Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mfbYFxhqyQKCmALMje_1uExjcY4.cer
File: mfbYFxhqyQKCmALMje_1uExjcY4.cer (raw, json)
Hash identifier: gfxs1hvfZbB+PzmfcG7++poyScLdHSICkvGGFSJgSzQ=
Subject key identifier: 99:F6:D8:17:18:6A:C9:02:82:98:02:CC:8D:EF:F5:B8:4C:63:71:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6352A239CA147EFE0FBF7EC729A34A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/mfbYFxhqyQKCmALMje_1uExjcY4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.62.0/24
IP: 2a11:c0c0::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 14:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:52:a2:39:ca:14:7e:fe:0f:bf:7e:c7:29:a3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99f6d817186ac902829802cc8deff5b84c63718e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:f9:37:57:a6:8e:66:4b:a9:2d:36:1a:6a:
d1:54:27:bf:9b:1f:a5:28:ed:9b:20:e4:35:aa:3f:
b8:98:14:cb:c8:8b:1a:33:2c:9e:c9:2e:fc:d0:bc:
31:14:48:a2:ea:59:b7:d2:e6:f2:45:77:a2:fb:af:
dc:ad:0f:55:d9:5b:25:a5:3e:16:b2:ea:6d:97:5f:
0d:75:2f:4d:d5:6f:b6:3a:de:d6:e4:6e:66:96:d4:
cc:89:ef:f7:02:b3:9b:bf:c3:83:82:80:54:19:44:
a4:ae:ba:a2:b9:86:d4:8a:cd:a4:8c:b9:1e:d4:6f:
46:9a:54:2d:fc:ff:da:5f:14:de:c6:f5:58:4a:da:
b4:20:97:d5:b9:e2:54:31:bc:ba:70:3b:8d:50:06:
81:0b:45:ba:54:57:f5:86:ef:56:2c:5b:d1:89:5e:
d9:54:51:d3:27:05:75:45:bd:4c:cd:a0:33:6e:e0:
32:11:0d:19:bd:06:1e:11:20:bd:6c:ff:85:2b:9f:
66:16:1a:26:02:4a:1b:70:64:01:56:55:a8:58:c5:
41:1f:16:e5:51:ae:be:0c:50:89:a8:c5:ae:4f:14:
0d:e5:90:a9:c5:0f:c1:d1:04:65:65:ab:80:06:ce:
77:46:30:6f:ff:dd:f4:73:56:2e:50:a9:b6:be:4a:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F6:D8:17:18:6A:C9:02:82:98:02:CC:8D:EF:F5:B8:4C:63:71:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/mfbYFxhqyQKCmALMje_1uExjcY4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.62.0/24
IPv6:
2a11:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:f5:ed:ae:6c:f6:92:96:a4:1a:ce:67:cc:bb:14:c0:ab:63:
e9:20:28:cd:24:03:84:89:43:bd:67:6a:6c:9d:56:0a:46:7c:
b2:91:aa:8e:60:6d:ab:ff:94:7f:40:7d:bb:4a:de:ca:91:e2:
5e:de:1e:9a:3a:62:ec:12:64:42:d7:66:45:0b:d2:62:67:8c:
9f:62:e3:f9:91:40:4d:2f:e0:18:0b:5e:55:1a:04:77:29:f6:
bc:84:25:c4:db:2f:25:41:23:9c:83:37:a4:6c:59:11:0d:3a:
3e:83:0d:ed:0a:e1:c0:9b:f5:64:ce:70:e1:d5:4c:1e:4d:0d:
d7:bf:05:be:e2:59:df:0f:ac:85:9a:e8:85:ff:51:e7:85:24:
aa:28:3c:da:76:cb:a1:7e:e5:78:53:64:4b:81:b6:dc:c8:1f:
90:6a:e6:0e:97:05:b0:a0:de:ea:de:7b:73:d0:6d:30:42:cc:
0f:a2:04:62:1a:eb:99:16:9a:c0:81:01:97:5a:ea:5d:24:ab:
58:4f:5d:58:1c:7d:ad:a0:37:fd:5d:58:55:b4:87:13:2c:5f:
ca:33:03:e6:8f:6e:0b:bf:e9:45:ac:b0:56:59:e3:a0:de:cb:
42:c3:2c:5d:36:48:f8:f6:5f:90:49:4c:4a:0c:0a:8f:d6:f1:
27:79:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:18 2024 by rpki-client on console-fra.rpki-client.org