Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mTlsHrWblma3SH5YyEqzREziMRM.cer
File: mTlsHrWblma3SH5YyEqzREziMRM.cer (raw, json)
Hash identifier: u69rVxfMhREVtUvc4oreFAGvhcrEOXScM6utAn8dpW8=
Subject key identifier: 99:39:6C:1E:B5:9B:96:66:B7:48:7E:58:C8:4A:B3:44:4C:E2:31:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E0A9D81D15463BE5382E65B377403
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/mTlsHrWblma3SH5YyEqzREziMRM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.247.188.0/24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 08:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:0a:9d:81:d1:54:63:be:53:82:e6:5b:37:74:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99396c1eb59b9666b7487e58c84ab3444ce23113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:42:2b:68:5b:d3:53:5b:f3:bc:6d:61:2f:
57:a5:b7:df:43:65:3d:ce:29:b1:84:5c:72:83:a1:
c5:ad:63:0f:f4:40:93:42:a7:20:c6:4d:d4:04:29:
72:6d:c3:24:ae:c2:f1:5f:0d:6b:58:3b:9b:60:f0:
54:27:17:19:da:2b:df:58:3e:4a:7f:4f:df:8d:ea:
b9:7a:ae:68:c3:59:f1:a3:7a:1b:69:24:95:c6:bb:
1e:83:65:8c:da:6d:49:c9:cd:b7:a5:f0:e1:c1:70:
18:58:c2:9e:13:a2:3a:69:8a:fb:21:cc:89:3f:31:
c0:cf:a4:82:b5:eb:84:22:eb:f2:ff:f7:0c:0e:27:
de:90:53:08:b2:d0:67:20:32:9e:10:3f:19:ff:b3:
c9:59:91:f0:5f:f4:56:06:af:a9:c5:de:c2:72:48:
7e:77:34:5d:5c:c5:32:8f:bf:2e:3b:68:99:1d:5d:
67:ca:cc:3e:5d:c2:21:f6:e6:a6:4a:a9:22:19:78:
3b:e6:55:95:96:c8:9e:ed:6d:ae:39:43:01:6b:4e:
1e:a4:14:7a:6c:35:d3:4d:6f:ef:a0:fe:80:f6:05:
35:cd:64:0b:dc:3f:8c:5a:e6:47:1a:bc:e4:0c:59:
35:45:d4:b7:68:b9:bb:f7:f8:e9:fd:34:3c:50:89:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:39:6C:1E:B5:9B:96:66:B7:48:7E:58:C8:4A:B3:44:4C:E2:31:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/mTlsHrWblma3SH5YyEqzREziMRM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.188.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:47:1b:e2:4c:0b:51:4a:c6:e2:ed:eb:7e:77:56:d6:bb:8d:
61:c1:1c:44:64:3a:b9:04:8d:62:38:3f:b6:4f:83:c2:0a:24:
6c:e0:4c:f4:23:47:81:fa:74:47:89:3b:96:70:c9:c2:79:cb:
b1:2b:b6:74:8e:9d:24:70:dc:c5:0b:41:37:83:50:13:ad:cb:
b9:d1:c9:f9:db:b1:36:c4:69:f3:bd:50:09:31:ee:62:0f:0c:
68:7c:04:95:dc:7f:92:72:bf:dd:6a:75:a0:48:60:dc:82:1a:
f6:fb:91:41:80:73:33:4e:40:5d:10:2e:77:43:1c:f6:f7:ca:
a6:9b:12:5e:cf:ae:06:99:3d:af:ca:54:91:31:9f:ec:74:56:
d2:7f:c0:9a:06:9d:51:76:09:c3:0d:48:7e:1b:43:41:85:96:
3d:9f:99:d0:f6:b8:d7:ac:a5:44:51:b5:5c:3d:c4:ed:d5:99:
08:75:b3:73:c1:93:38:3f:10:a8:d2:4b:f6:7c:d6:bb:61:ac:
fb:3f:ba:9a:2e:2d:43:be:45:29:10:12:ca:49:d9:6d:38:23:
3f:fa:ff:71:6b:75:06:73:48:17:37:a1:8d:01:87:d6:3b:85:
85:4d:24:3c:bd:d5:31:a9:3c:ca:0a:9f:f6:a2:dc:b2:75:4d:
d1:cb:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:17 2024 by rpki-client on console-ams.rpki-client.org