Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
File: m0h4hjxhXxsDxsgOVx7BcK40iiU.cer (raw, json)
Hash identifier: OycCk21e/sPNgJipUoeKVX1s/Ctoecb10QTw27/W5nw=
Subject key identifier: 9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAEF2C97B889D32239C3C4DFEF0EC28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/m0h4hjxhXxsDxsgOVx7BcK40iiU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 92.119.36.0/24
IP: 2a11:9e00::/29
Validation: Failed, certificate revoked on Wed 21 Jun 2023 11:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:ae:f2:c9:7b:88:9d:32:23:9c:3c:4d:fe:f0:ec:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:62:3c:25:98:59:45:fc:4f:97:62:f7:ee:
e9:51:97:76:4d:a9:f1:1f:b1:41:20:48:8c:72:4c:
b6:f7:03:8c:f1:a2:43:0a:74:09:65:b3:4e:3a:1d:
0c:1d:fb:70:f0:1b:0c:50:0b:0c:cd:49:98:7a:e8:
64:9d:af:6d:33:5f:9f:2c:fd:d3:1b:3e:37:2d:2f:
c6:f6:00:9d:7a:49:2e:24:93:40:3a:af:be:e1:dc:
1e:7d:4e:a1:9e:76:31:85:36:c7:84:64:1f:4e:ab:
ae:3b:e3:a6:48:51:8f:66:25:84:7a:43:9f:c9:26:
f8:69:34:c9:7a:4e:b5:0b:55:7d:ec:e3:0e:71:9a:
0d:a6:98:7e:17:29:3d:cd:18:e8:ca:3d:7f:36:dd:
5c:70:26:f0:75:b9:4d:a4:14:e3:69:d2:ce:a0:d2:
85:47:f5:cc:a1:a1:63:9a:8f:35:41:7a:04:4f:74:
f9:dc:49:7b:ba:92:69:5d:56:c0:89:a2:91:1a:3a:
70:ba:28:ab:4e:3b:30:4f:95:f2:73:be:5a:83:3e:
0d:60:97:e4:90:4f:2e:ee:13:36:a0:e9:a4:f9:13:
99:64:10:0f:7e:fd:8f:54:af:e3:58:10:e0:81:61:
a8:fb:cb:9b:be:57:fb:24:b4:10:79:dc:3c:96:0e:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/m0h4hjxhXxsDxsgOVx7BcK40iiU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.36.0/24
IPv6:
2a11:9e00::/29
Signature Algorithm: sha256WithRSAEncryption
a1:36:f5:97:4d:32:63:d4:be:2a:58:fe:a2:89:b1:94:fd:1c:
cc:38:53:b1:50:62:91:f1:46:d3:5f:61:c6:33:bd:b0:10:6f:
54:26:0a:d7:bb:de:47:8d:9f:4c:7e:23:66:94:20:0e:95:7a:
b6:9f:06:0b:65:56:fa:5a:0a:c6:20:aa:59:73:62:b3:aa:13:
9b:25:f1:b0:6d:2d:ce:1f:cf:58:b2:73:3f:6d:f5:e2:0e:8a:
4c:ad:71:7b:75:78:77:35:77:82:75:26:8a:72:a9:d0:db:b8:
0e:80:a0:49:d6:8c:3e:be:f5:33:ae:0e:9f:fb:54:7a:f4:6e:
97:3c:2c:cb:fc:fd:9c:c6:6e:9b:51:dd:31:85:df:9e:e6:d6:
6f:0e:e5:6a:14:d2:b8:8a:24:ff:18:6c:38:df:8f:d6:b8:c4:
68:ea:8b:26:f4:19:be:70:6c:cc:81:68:46:0d:fa:0b:b2:db:
91:64:ae:10:53:b9:fd:9f:3e:7b:f7:13:76:19:6e:79:c2:99:
c6:eb:c3:a6:4d:79:f7:a0:72:9c:1d:0f:6e:cd:04:f7:bd:14:
36:33:85:6a:2e:76:27:e7:28:a4:d3:6d:81:d6:89:30:d4:8f:
49:4e:0a:be:4e:d7:8f:4c:7e:99:01:d6:22:cd:fa:04:e3:d3:
ec:e6:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:12 2024 by rpki-client on console-ams.rpki-client.org