Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer
File: mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer (raw, json)
Hash identifier: JBR0zR4Sdt9SSqBRt21wX+liGVahdTFhthvVZFUt2qQ=
Subject key identifier: 99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185716778111552F6B0E0690BE1E697C6B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:34:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.253.131.0/24
IP: 2a12:2a40::/29
Validation: Failed, certificate revoked on Thu 16 Nov 2023 11:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:67:78:11:15:52:f6:b0:e0:69:0b:e1:e6:97:c6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9989ddf489ba45c98e28917018b565dac1b2ec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:7f:a0:67:84:01:72:50:c8:ab:bc:47:f2:
27:93:ee:bb:90:18:49:ad:a0:98:71:55:90:1e:b9:
71:1c:1f:a2:6e:d6:1e:f3:6a:a3:4e:51:25:74:86:
5a:1e:e1:1c:66:0b:e9:1a:a1:dc:fc:64:6e:18:95:
e3:35:a8:08:28:66:85:85:42:fc:17:0d:8d:a6:6f:
4a:3d:79:9e:23:47:2e:40:0b:ef:7b:b2:c9:30:6f:
2f:4b:08:9d:50:26:18:f9:19:c2:64:f0:bb:25:ad:
73:72:77:7a:c3:7a:bb:97:f5:05:36:ad:47:7c:21:
12:2e:f3:57:3c:c4:47:64:51:b4:70:28:7b:5e:dd:
7f:ed:65:b8:44:0d:b2:4a:f0:c8:60:21:96:a3:8f:
d3:a7:c9:5d:b5:9e:fe:54:5d:16:5f:1b:23:af:a1:
66:0a:3b:84:cf:ef:ac:36:69:77:68:ba:58:16:af:
db:12:0c:ca:55:e9:00:60:4a:60:da:9b:a2:4f:1c:
89:36:c4:04:2d:18:1e:93:c7:51:83:ff:f5:25:db:
78:5b:d1:0f:99:ca:37:61:42:4c:78:48:10:4f:ba:
72:3d:d6:a3:14:ad:16:e3:4e:a3:6a:d1:7f:ac:ef:
49:df:42:11:2e:17:f7:83:63:c1:cf:51:10:ef:ec:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.131.0/24
IPv6:
2a12:2a40::/29
Signature Algorithm: sha256WithRSAEncryption
0f:e6:80:d6:46:d3:8e:3d:43:c8:cb:f4:fb:84:01:31:fc:23:
17:96:0f:98:ee:1b:df:52:a6:b7:6e:67:14:00:3c:24:29:5b:
3e:c8:34:e3:4e:b1:13:96:c2:02:1e:5f:7d:e8:b1:93:94:3f:
b2:55:f7:02:63:26:14:29:85:ba:9a:4f:65:11:08:86:92:8c:
c9:33:e9:57:fa:46:c6:04:b6:b0:f7:d3:53:ad:5c:7e:21:f4:
bc:e3:3e:61:13:8f:5e:66:62:f2:b8:de:a7:ea:ab:2c:4f:63:
ce:77:17:13:0a:7b:e5:16:87:6e:e0:65:4a:0c:93:d7:44:c2:
0a:3b:b5:6b:d6:73:0a:85:3c:fb:08:30:dd:71:a6:95:f9:45:
99:a1:a3:26:3d:19:97:1e:78:7f:f7:c6:4e:c5:20:32:9f:4d:
b1:dd:fb:96:8d:ae:ea:00:5b:78:23:83:07:63:76:28:aa:1a:
02:30:86:a4:97:9f:5e:38:49:91:41:c4:dc:89:ee:1f:bf:83:
fa:15:c0:65:f9:42:ec:69:37:7f:e8:39:f0:7d:49:f4:b8:17:
9b:62:83:a0:2a:de:36:56:b9:5e:c7:4d:4f:99:f6:a3:17:9e:
4b:56:44:96:cc:ec:ab:53:18:ce:2f:82:76:23:4d:8f:93:ed:
c4:e1:10:3d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVxZ3gRFVL2sOBpC+Hml8a4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTg5ZGRmNDg5YmE0NWM5OGUyODkxNzAxOGI1NjVkYWMxYjJlYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbR/oGeEAXJQyKu8R/Ink+67kBhJ
raCYcVWQHrlxHB+ibtYe82qjTlEldIZaHuEcZgvpGqHc/GRuGJXjNagIKGaFhUL8
Fw2Npm9KPXmeI0cuQAvve7LJMG8vSwidUCYY+RnCZPC7Ja1zcnd6w3q7l/UFNq1H
fCESLvNXPMRHZFG0cCh7Xt1/7WW4RA2ySvDIYCGWo4/Tp8ldtZ7+VF0WXxsjr6Fm
CjuEz++sNml3aLpYFq/bEgzKVekAYEpg2puiTxyJNsQELRgek8dRg//1Jdt4W9EP
mco3YUJMeEgQT7pyPdajFK0W406jatF/rO9J30IRLhf3g2PBz1EQ7+wdYQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJmJ3fSJukXJjiiRcBi1ZdrBsuwsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4L2E1ZGRm
Yi1kYjIxLTRhYTAtOTIwMi1mMTJkMjdiNmVlNzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvYTVkZGZi
LWRiMjEtNGFhMC05MjAyLWYxMmQyN2I2ZWU3OC8xL21ZbmQ5SW02UmNtT0tKRndH
TFZsMnNHeTdDdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQALv2DMA0EAgACMAcDBQMqEipAMA0GCSqGSIb3
DQEBCwUAA4IBAQAP5oDWRtOOPUPIy/T7hAEx/CMXlg+Y7hvfUqa3bmcUADwkKVs+
yDTjTrETlsICHl996LGTlD+yVfcCYyYUKYW6mk9lEQiGkozJM+lX+kbGBLaw99NT
rVx+IfS84z5hE49eZmLyuN6n6qssT2POdxcTCnvlFodu4GVKDJPXRMIKO7Vr1nMK
hTz7CDDdcaaV+UWZoaMmPRmXHnh/98ZOxSAyn02x3fuWja7qAFt4I4MHY3YoqhoC
MIakl59eOEmRQcTcie4fv4P6FcBl+ULsaTd/6DnwfUn0uBebYoOgKt42Vrlex01P
mfajF55LVkSWzOyrUxjOL4J2I02Pk+3E4RA9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:19 2024 by rpki-client on console-ams.rpki-client.org