Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mpu9qgABH2wvaVGIlfoCPTLVt9k.cer
File: mpu9qgABH2wvaVGIlfoCPTLVt9k.cer (raw, json)
Hash identifier: 0TH7WIur386Rx5CZWrNr2Y5U/ogYCXtpBrXdQMGzqwE=
Subject key identifier: 9A:9B:BD:AA:00:01:1F:6C:2F:69:51:88:95:FA:02:3D:32:D5:B7:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3F6D284CD38744643253B588647F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/mpu9qgABH2wvaVGIlfoCPTLVt9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.227.254.0/23
Validation: Failed, certificate revoked on Mon 02 Oct 2023 12:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:f6:d2:84:cd:38:74:46:43:25:3b:58:86:47:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a9bbdaa00011f6c2f69518895fa023d32d5b7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:29:57:01:35:3b:42:c1:df:3f:ae:9f:93:
a0:f6:69:cb:34:61:5b:10:ec:41:22:bd:8b:c2:5c:
e6:6b:8d:22:07:e2:5a:5b:ad:64:70:a0:2c:23:25:
1b:4b:19:2b:6d:05:3e:0a:56:5b:e2:8d:11:cc:3a:
86:16:f3:9b:07:bc:5a:ce:b7:24:b6:16:7f:74:9c:
f7:f7:81:f6:1f:6a:36:de:f7:5a:e9:b5:cf:e0:09:
28:a6:4a:67:93:51:1a:d5:29:1f:b4:bb:25:49:d1:
3c:e2:47:16:b3:63:c2:58:7f:a2:df:2f:86:cc:ff:
ff:54:c9:be:c3:f1:9a:43:c1:62:ac:1f:fc:8d:4c:
62:7c:ad:79:49:58:5c:73:ff:d5:91:82:2f:50:b5:
dc:71:ac:18:85:31:1f:f9:ae:15:f0:86:74:30:59:
ac:eb:11:3a:fa:f4:d9:1a:c9:53:4e:af:b3:10:8e:
c7:cc:23:d9:e7:7e:4c:14:eb:33:f8:75:83:e4:a9:
db:ab:66:88:82:ac:26:fc:1a:14:f7:f9:a2:8a:d0:
b7:74:e7:f2:e0:18:c5:77:1e:c7:8a:b4:80:65:4f:
9e:f0:e3:12:8a:e5:4c:78:85:04:15:62:20:a5:cf:
45:71:48:29:02:bf:1d:90:a4:76:29:a6:30:1e:56:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:BD:AA:00:01:1F:6C:2F:69:51:88:95:FA:02:3D:32:D5:B7:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/mpu9qgABH2wvaVGIlfoCPTLVt9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.254.0/23
Signature Algorithm: sha256WithRSAEncryption
15:c9:ea:9a:1b:70:e1:b1:c3:10:9f:27:62:fd:33:84:e5:54:
4a:5d:7d:ba:17:cb:dc:c6:e9:05:a0:8c:16:f6:0c:40:41:63:
fc:54:1f:80:db:ba:3d:93:63:ed:0f:fe:bc:c5:e2:87:26:43:
f2:25:69:8f:d2:0c:be:95:37:9c:48:a2:bf:df:ec:d0:1b:ea:
77:1f:cd:56:e0:66:8d:e9:3d:af:cc:a2:10:9d:b2:63:53:81:
39:ea:7e:f0:b9:7d:4a:7f:40:70:12:6e:dc:62:7f:65:85:7d:
d9:0c:ad:7f:b5:e8:56:e2:e4:e5:ba:69:47:78:15:ce:5c:79:
33:96:d8:40:65:29:1a:3b:4f:cd:2a:a2:10:c8:35:da:e4:75:
d5:f8:65:36:b6:f0:e2:36:c9:bf:49:ba:e4:42:48:1b:38:93:
22:78:2b:de:5b:b4:53:d8:3e:78:e0:8e:42:50:53:ae:4d:8e:
01:da:5e:30:84:c9:5b:f2:07:0b:88:72:5a:d3:da:dd:f7:db:
fc:93:3b:5a:b6:ab:96:b7:de:60:b1:55:0e:bc:a2:9e:11:79:
d6:bf:9a:74:6b:f3:4c:11:bb:04:48:b2:0c:79:f2:3e:1d:0e:
29:52:64:82:f7:fd:6d:25:f8:9a:72:9e:1d:0d:26:1e:59:3a:
f1:4a:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:24 2024 by rpki-client on console-ams.rpki-client.org