Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mj3w7XSavLirlKgOaTjQjn9WeyM.cer
File: mj3w7XSavLirlKgOaTjQjn9WeyM.cer (raw, json)
Hash identifier: ilhepUTZr75E6f5h6UaY5XZgdh9GYeeMAQOfuA+HwxQ=
Subject key identifier: 9A:3D:F0:ED:74:9A:BC:B8:AB:94:A8:0E:69:38:D0:8E:7F:56:7B:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B63495BF49D0D79B1B37A9E5F4B727A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/mj3w7XSavLirlKgOaTjQjn9WeyM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.107.149.0/24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 13:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:49:5b:f4:9d:0d:79:b1:b3:7a:9e:5f:4b:72:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a3df0ed749abcb8ab94a80e6938d08e7f567b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:41:8f:40:ea:ec:b0:66:21:24:56:44:1e:
83:74:37:d6:0c:78:2f:8f:be:e0:fb:7b:13:7d:73:
e7:78:91:6b:e8:f0:25:ea:26:2a:c2:03:5e:52:60:
47:6f:cf:4e:62:d8:2d:14:7c:e3:48:30:a2:6b:f3:
3e:fc:bb:6b:ee:21:d3:cc:17:c3:d2:1e:26:ed:69:
23:d7:aa:6b:eb:23:51:36:6c:a0:33:e1:2c:a0:24:
a5:07:ff:6c:29:5a:15:7d:44:e9:4f:bb:9f:09:81:
8b:cb:ef:97:d8:e3:ed:25:c8:e8:54:33:eb:82:6a:
5e:9a:0f:83:f3:2c:2a:0f:70:6c:0b:a5:e8:7a:be:
2a:08:69:e0:c5:6e:b3:05:01:b1:0a:f1:13:b1:90:
22:cf:6a:f2:50:73:20:38:c2:2a:74:2d:bb:0e:1e:
92:9f:6c:57:43:83:5d:dc:19:a3:1a:8e:4d:76:d8:
24:ee:b6:e3:b7:36:f8:26:5a:d3:92:0b:0c:ad:03:
e3:74:c5:33:9d:44:2d:8f:be:de:8a:e2:36:99:56:
16:6c:b8:bf:e7:4b:d3:55:74:83:94:03:f7:b0:39:
31:29:49:c1:80:c6:5d:d1:d2:86:5f:a9:6b:47:3f:
13:7d:77:83:5b:c8:48:79:a6:83:10:94:87:1d:a2:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3D:F0:ED:74:9A:BC:B8:AB:94:A8:0E:69:38:D0:8E:7F:56:7B:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/mj3w7XSavLirlKgOaTjQjn9WeyM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.149.0/24
Signature Algorithm: sha256WithRSAEncryption
09:80:81:60:c8:44:05:7c:0c:f7:06:e7:59:06:95:4c:7b:7c:
11:6a:cf:90:09:12:31:c4:e6:90:38:62:8c:a6:d2:c7:49:34:
c1:f4:e9:f9:73:32:2e:f1:13:4a:05:10:da:9a:8b:a2:99:fe:
93:c2:9d:7e:bc:68:2d:38:bf:00:96:e1:d6:7e:79:56:fd:8c:
a1:ce:da:b0:3e:1b:7b:41:89:8e:81:6b:b6:60:04:75:a2:90:
9f:24:8a:32:c2:ef:a9:64:26:74:c1:8e:fe:63:06:0f:ea:ec:
44:90:1c:0b:60:78:ac:35:08:87:75:ee:e5:3d:86:62:9b:94:
61:b9:0e:c4:29:6b:bb:53:0d:b7:91:03:8e:75:41:40:da:f6:
19:61:1b:2d:b4:ff:51:d7:13:bc:30:1f:31:8b:95:13:7d:9b:
e4:34:b2:1f:d7:72:8c:92:a7:53:c8:96:2f:5a:6a:a7:f9:6b:
9e:e5:b6:02:79:24:95:9e:8f:2c:3d:22:53:6b:ab:2e:03:d1:
6a:02:43:91:c6:68:65:03:5b:34:22:06:eb:a8:9e:c1:ae:76:
8e:69:36:46:9c:cb:7b:7a:53:2a:a1:f4:f3:d8:f9:52:be:5e:
d2:c8:c2:96:63:8f:65:d5:fc:2a:61:fa:b4:fd:91:5e:09:75:
ca:a6:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:22 2024 by rpki-client on console-ams.rpki-client.org