Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/msrh6G8-WKu4DA-pdCAJTVUgbXs.cer
File: msrh6G8-WKu4DA-pdCAJTVUgbXs.cer (raw, json)
Hash identifier: rTk0KAPwXc+kElFyXN2domsVjgB3cgVXHDAQs84WIlM=
Subject key identifier: 9A:CA:E1:E8:6F:3E:58:AB:B8:0C:0F:A9:74:20:09:4D:55:20:6D:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185724528DDBA2B5204037E80C9F6BAE4ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/msrh6G8-WKu4DA-pdCAJTVUgbXs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:36:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.218.0/24
IP: 2a12:e80::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 12:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:28:dd:ba:2b:52:04:03:7e:80:c9:f6:ba:e4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:36:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9acae1e86f3e58abb80c0fa97420094d55206d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:96:2a:83:97:4a:9f:c5:d6:b2:be:12:36:
a7:58:ec:2e:13:3c:52:81:66:3c:75:5a:cf:db:e4:
9f:74:f0:28:ab:7d:34:ad:f3:f8:4d:76:cf:9e:be:
71:65:fd:dc:1b:82:c0:f5:55:2e:6c:13:ce:c4:e2:
45:33:67:39:ec:79:5d:85:f2:ee:f4:08:14:80:5e:
22:a0:6e:fe:6f:47:ab:f3:73:99:e6:96:54:fe:38:
40:89:98:f2:4f:d7:e4:17:92:e7:c1:d1:22:44:4f:
84:27:7f:1b:46:f4:0a:57:5b:d9:16:1a:77:12:96:
a6:97:61:e5:89:df:81:6c:62:a4:27:f0:2a:1f:6e:
26:43:00:13:d5:51:d3:ba:6a:11:b5:de:2c:3d:a0:
57:83:b3:00:12:59:7b:bd:ec:d0:8b:98:4b:81:83:
67:cb:1b:8b:1c:13:70:08:83:67:2a:6c:d0:ec:15:
1e:3b:2b:4a:d3:b6:d4:43:0b:de:03:83:98:56:1f:
f4:18:15:f6:59:90:55:d3:57:b2:e1:2c:c7:f0:27:
d1:b7:bc:e6:c8:d4:1d:5e:08:dd:a9:71:bf:a0:ad:
5c:8f:21:b5:e7:d4:cd:23:7b:af:ee:90:fa:4b:e0:
d2:f1:2f:b0:3d:9f:85:1c:f9:29:df:33:e3:31:f7:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:E1:E8:6F:3E:58:AB:B8:0C:0F:A9:74:20:09:4D:55:20:6D:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/msrh6G8-WKu4DA-pdCAJTVUgbXs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.218.0/24
IPv6:
2a12:e80::/29
Signature Algorithm: sha256WithRSAEncryption
49:5f:99:3a:df:ca:9f:54:28:2a:ac:be:a1:64:f1:a6:47:78:
46:e6:9e:21:2d:5f:e7:15:d2:6b:7d:95:88:c4:67:3e:cd:f4:
48:07:dd:79:f3:2f:9c:48:11:03:50:f5:fc:5c:b6:5a:88:21:
cd:9c:51:d5:56:ee:9c:ba:6d:08:a8:3f:2a:3b:9c:79:4a:b5:
18:c6:c4:56:e8:7f:09:2c:ec:9c:8b:b2:b3:e9:aa:a1:13:28:
ae:39:c1:0b:ae:be:19:ae:b2:08:13:ba:20:48:39:24:98:67:
05:4b:c5:1b:f0:89:b9:fe:c8:18:73:b1:a6:16:8b:13:45:cb:
6d:6f:20:4b:f9:b6:71:1c:db:32:cc:fc:75:c8:1d:e3:78:8a:
3a:ed:82:f8:3e:1b:f2:ba:b9:31:4e:72:81:a3:1d:ee:9c:9c:
40:92:fb:ab:a1:44:80:e8:70:ba:d9:f2:5a:07:e9:4c:5e:cb:
32:02:28:29:b3:22:a2:5c:1b:04:53:e6:21:b5:55:07:b1:12:
24:43:02:30:0f:bb:4b:2f:ab:f1:c0:2d:87:03:28:df:fa:c2:
a9:66:0b:c4:21:cc:12:aa:67:c8:e7:65:69:3b:fd:f6:4a:9e:
70:8a:d0:1d:fd:bd:6c:25:1e:b6:55:ef:54:06:3a:e4:d2:99:
b4:86:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:25 2024 by rpki-client on console-ams.rpki-client.org