Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer
File: mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.cer (raw, json)
Hash identifier: PajL80b6BFUKnXaCcKaC0BWiMLRsdBrN0xVX5IOJVFA=
Subject key identifier: 9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801509E6D4DD64EB00E5DC93ED04087
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.201.29.0/24
IP: 2a12:6480::/29
Validation: Failed, certificate revoked on Thu 08 Feb 2024 14:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:50:9e:6d:4d:d6:4e:b0:0e:5d:c9:3e:d0:40:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a6c0367f6bd34afd0b7543cea0e332661d61c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:87:c8:69:a0:d7:f2:4a:58:bf:a9:58:9a:
4c:d4:1d:19:6c:e5:26:cb:2a:17:6b:25:a9:3b:bc:
d6:ac:4e:a7:f9:91:7f:d6:08:a1:5c:07:bf:8c:85:
35:4f:3e:7d:11:a1:5a:83:d4:7c:22:37:05:c2:27:
ff:8f:b7:43:84:72:cb:27:5d:8c:df:69:7f:54:02:
a3:9a:28:40:e2:58:c2:c7:38:a6:62:a0:3e:09:7b:
45:d0:f3:ed:da:8f:ff:3a:5d:d3:07:04:33:87:7d:
c6:33:c6:60:9b:74:f3:ae:ae:64:c9:7d:f5:3e:2a:
b2:09:3b:55:20:1d:87:b4:72:d1:af:40:66:11:8c:
75:86:0c:3d:74:ba:cf:43:00:f5:3f:4a:7b:0e:b8:
94:32:2d:af:03:cb:83:49:e0:6c:d1:77:f4:b3:5f:
00:63:de:36:b2:b7:c5:89:70:44:9c:aa:07:40:83:
9a:69:1b:32:02:82:ca:0b:af:0a:25:b9:75:ff:d3:
f3:9f:5b:22:5f:91:96:90:00:20:6f:22:81:c2:56:
ba:fc:c2:15:76:a4:c4:f5:66:8e:46:36:8f:54:17:
3f:99:6f:41:c5:11:3f:fa:de:3a:ab:14:d8:f5:6c:
b0:3e:d1:7c:de:d3:a9:f9:90:eb:2c:c2:9e:b8:9f:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:03:67:F6:BD:34:AF:D0:B7:54:3C:EA:0E:33:26:61:D6:1C:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3c240b-4c9a-452a-9136-e3a42ad1455d/1/mmwDZ_a9NK_Qt1Q86g4zJmHWHAM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.29.0/24
IPv6:
2a12:6480::/29
Signature Algorithm: sha256WithRSAEncryption
12:df:df:c1:76:35:95:02:e8:60:88:a6:c6:80:cc:df:52:76:
92:32:18:4f:2c:85:b6:60:da:f1:a2:ec:8a:77:39:8e:f0:df:
ac:01:39:15:a9:00:fd:ae:a1:dd:f7:5f:36:aa:ae:e3:e6:6b:
19:cd:b6:78:68:3e:f0:c6:7c:a6:86:22:cb:de:97:c8:29:88:
62:7c:2a:65:e4:85:f9:dc:5b:d9:cc:9d:24:ef:4e:46:60:83:
16:94:73:25:fc:8b:64:c0:19:9c:66:95:3b:47:17:0a:af:6d:
a4:e8:ac:a8:38:17:ae:2f:c6:d3:1c:74:a4:2b:bc:01:36:dd:
2d:e1:ee:be:cb:cd:51:fe:52:c7:66:87:f3:31:c1:8d:fd:a1:
48:25:6a:81:53:98:44:9d:55:62:56:aa:5f:59:f7:7a:f9:34:
a3:7f:e4:e3:ff:53:ff:e6:e3:e8:77:3c:1b:4d:ea:7f:21:36:
17:59:22:21:2f:07:a7:35:30:56:c4:40:cb:ea:a5:3b:a1:d1:
8c:4f:a2:df:d7:f8:22:27:df:28:23:df:d6:bc:c3:b9:e5:35:
86:6c:bd:e3:1f:41:da:d1:81:36:52:b2:fd:4a:f7:9c:cc:9a:
77:58:e2:8b:ce:f5:af:7a:d7:3a:13:f4:cd:0a:ae:a9:a2:cf:
2d:be:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:23 2024 by rpki-client on console-ams.rpki-client.org