Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mQVAjtXSO-yskFwaLgqHYIrTT5g.cer
File: mQVAjtXSO-yskFwaLgqHYIrTT5g.cer (raw, json)
Hash identifier: d2gWHRRywkyUPxaLY67fBViFTKRZMeSsGLJoP3ZU1wM=
Subject key identifier: 99:05:40:8E:D5:D2:3B:EC:AC:90:5C:1A:2E:0A:87:60:8A:D3:4F:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01858BD6482997E1C64EF760128B219D2E9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/a010cc-75e3-4cbb-ba5e-8bf893b889c2/1/mQVAjtXSO-yskFwaLgqHYIrTT5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/a010cc-75e3-4cbb-ba5e-8bf893b889c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 07 Jan 2023 10:45:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.44.0/24
IP: 2a12:fe00::/29
Validation: Failed, certificate revoked on Thu 14 Dec 2023 09:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8b:d6:48:29:97:e1:c6:4e:f7:60:12:8b:21:9d:2e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 7 10:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9905408ed5d23becac905c1a2e0a87608ad34f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:ab:28:97:e5:54:08:39:1b:9f:c4:cd:64:
55:e4:8d:9c:e5:f0:6b:dd:ea:df:33:92:cf:b4:20:
b7:ee:47:b7:5b:a4:23:f5:1b:ef:85:e6:0f:ac:3e:
9b:2e:bd:8b:ae:64:ad:03:0e:df:52:35:3f:b2:6b:
b7:49:8c:8f:80:43:b5:ac:f2:b3:e7:ec:99:ea:c1:
e6:a1:cc:75:7b:67:86:ed:fc:41:dc:ce:6f:da:f1:
61:2c:89:64:42:e9:70:f2:e0:98:3c:a8:ab:42:c6:
e2:a6:e5:bc:28:27:e5:53:bf:a8:fa:0f:81:ad:a0:
62:ae:be:07:e3:99:a9:43:bd:d1:77:25:2e:31:14:
5d:c1:5d:cf:c0:80:43:31:43:db:7f:9d:f3:4c:6c:
d7:24:c7:ea:2d:50:05:09:9d:96:20:d1:6c:91:9f:
7d:a0:cb:b5:94:73:09:bd:e5:58:95:2f:d3:59:21:
ac:e0:f5:77:10:b8:cd:0c:ba:e8:28:b5:97:24:a2:
7c:24:92:4e:3a:59:64:8b:a0:d4:56:5e:34:58:c6:
c2:1f:29:df:5d:91:e7:91:8e:f1:bc:9b:ef:9f:b3:
53:05:51:8e:02:50:4c:ae:56:c9:d8:1c:92:6f:7c:
d8:e3:76:27:d1:17:85:58:6b:3b:fe:56:59:e6:0d:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:40:8E:D5:D2:3B:EC:AC:90:5C:1A:2E:0A:87:60:8A:D3:4F:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a010cc-75e3-4cbb-ba5e-8bf893b889c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a010cc-75e3-4cbb-ba5e-8bf893b889c2/1/mQVAjtXSO-yskFwaLgqHYIrTT5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.44.0/24
IPv6:
2a12:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
2f:1f:fe:b5:5d:00:93:9f:05:76:50:06:dd:20:f2:5c:3f:69:
14:a4:4c:b4:75:a4:ce:e0:8d:a1:80:0e:97:97:91:72:bc:ba:
df:84:41:c4:83:af:e9:2a:e2:75:e0:1c:ad:ec:8f:cf:ff:a1:
9f:4e:51:9b:59:b4:d0:76:8f:2b:11:06:af:41:0b:9f:21:0f:
5e:f0:73:c0:23:88:6e:40:07:87:a6:23:0a:5a:24:d0:8f:30:
f8:50:bf:c2:71:6d:3a:d1:c8:04:e4:b3:ff:23:d0:af:3d:ef:
f7:e6:4c:35:94:10:59:de:90:6e:23:3c:1f:ee:94:da:d1:79:
14:c4:d3:6c:00:9d:9f:58:dd:3c:b2:08:47:d7:ea:9c:24:19:
53:92:63:be:0a:8f:6a:2f:50:6f:0e:f6:9e:50:5f:90:6c:18:
5c:d2:b9:07:99:ff:c7:e8:11:34:45:ac:ff:75:d5:2a:2c:44:
55:0b:f6:83:c5:59:4d:fd:44:af:d3:52:6f:e6:a2:02:49:24:
8d:4c:6d:5d:06:97:9a:49:b6:af:54:b6:4b:5b:5b:36:91:aa:
4f:40:9f:56:d9:6d:2c:b1:6c:86:fa:50:25:19:ed:bc:b8:b9:
c0:8a:7a:a6:06:39:31:d9:10:b2:97:44:24:a4:8e:98:db:59:
ce:1c:d3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:16 2024 by rpki-client on console-fra.rpki-client.org