Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mx458vbK57KwbYqzauRyXRUec8E.cer
File: mx458vbK57KwbYqzauRyXRUec8E.cer (raw, json)
Hash identifier: q9VXCznCA8uACDGY+nrOorO6247vDI+ZBIy8xdTuJmA=
Subject key identifier: 9B:1E:39:F2:F6:CA:E7:B2:B0:6D:8A:B3:6A:E4:72:5D:15:1E:73:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB083FA1ED547191CD54C7468FE50AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/mx458vbK57KwbYqzauRyXRUec8E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 130.193.79.0/24
IP: 2a11:9e80::/29
Validation: Failed, certificate revoked on Mon 11 Sep 2023 12:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:83:fa:1e:d5:47:19:1c:d5:4c:74:68:fe:50:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b1e39f2f6cae7b2b06d8ab36ae4725d151e73c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e7:24:71:be:ca:b4:fa:5b:6e:15:df:29:56:
07:d8:f5:6d:da:c8:fe:06:96:6b:b0:04:d9:98:85:
64:f3:d9:0e:8d:96:85:01:dd:94:b5:09:9b:a9:42:
38:ee:02:ad:60:72:a1:dc:a9:96:34:73:97:60:47:
49:cb:b0:f0:f7:83:c2:ff:b0:b9:66:3f:2b:d4:14:
09:81:a8:25:12:13:eb:5a:05:23:46:f9:5b:12:2d:
31:7a:5d:fb:51:a0:45:90:d8:78:12:94:c2:e7:87:
fd:f4:04:29:6c:06:1d:62:56:b4:fe:20:9f:46:8b:
f9:74:e6:e7:19:22:02:74:a0:6f:8f:8f:50:ac:56:
32:9a:22:1e:c1:8a:cf:55:57:79:2d:9d:6f:83:21:
51:1c:8b:96:62:6a:12:a0:a5:17:26:22:95:7f:ab:
84:77:dc:59:e9:37:d2:9c:d1:d6:76:d3:7f:1b:57:
63:b2:bd:7c:57:8b:91:c7:88:d6:0a:fd:01:2a:86:
81:4a:37:a2:ea:02:b8:5b:d8:a3:fd:d5:9e:58:eb:
8f:58:83:b1:e4:e3:f9:b8:71:4e:18:0a:88:a8:f4:
64:97:15:57:74:2b:a9:a2:6f:c8:ce:5b:2b:8e:b9:
c6:9c:ef:d3:fe:07:24:18:01:f1:42:be:26:2e:c9:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1E:39:F2:F6:CA:E7:B2:B0:6D:8A:B3:6A:E4:72:5D:15:1E:73:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/mx458vbK57KwbYqzauRyXRUec8E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.79.0/24
IPv6:
2a11:9e80::/29
Signature Algorithm: sha256WithRSAEncryption
8c:74:d7:65:af:f3:5a:09:2a:64:46:b0:36:27:b2:af:12:e3:
c7:28:7b:49:bf:21:31:8b:d4:52:f4:9a:6e:f5:21:b8:33:92:
80:e3:77:d2:f7:97:c1:42:a1:8c:44:df:e8:64:49:61:a8:35:
05:31:a8:6f:43:9e:8d:bb:c4:98:60:6c:8c:98:73:5e:68:91:
b8:32:bb:57:c5:39:ba:53:c9:25:dd:cb:b1:b8:f1:e1:2a:8c:
e4:67:4f:c1:88:c3:c1:64:04:c7:bb:ab:12:a9:c3:9a:c2:cf:
4a:ac:79:99:52:05:12:79:f3:74:0e:3b:99:d9:1a:aa:3e:8b:
5b:78:00:34:ea:ff:44:3f:47:6b:8b:6c:95:ab:6f:69:ff:2f:
df:d3:09:32:4a:04:3f:db:a1:03:33:34:ad:6d:ee:48:b2:57:
cf:e7:b6:e4:98:d8:9c:27:65:56:5a:a5:6e:22:22:e1:ee:0b:
95:56:4c:ca:7b:0d:5d:cd:76:cc:80:d3:05:bb:11:7c:cf:f1:
d8:c1:57:6d:dc:9b:32:27:0c:f5:c0:b1:a8:01:3b:40:77:d4:
e2:81:09:62:b0:b6:ef:cd:cb:4b:66:12:c5:30:22:05:e0:78:
98:fa:a4:ee:c9:c0:0f:d4:fb:8c:34:92:fd:31:7a:12:9d:f4:
c4:5a:64:b8
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVvsIP6HtVHGRzVTHRo/lCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjFlMzlmMmY2Y2FlN2IyYjA2ZDhhYjM2YWU0NzI1ZDE1MWU3M2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuckcb7KtPpbbhXfKVYH2PVt2sj+
BpZrsATZmIVk89kOjZaFAd2UtQmbqUI47gKtYHKh3KmWNHOXYEdJy7Dw94PC/7C5
Zj8r1BQJgaglEhPrWgUjRvlbEi0xel37UaBFkNh4EpTC54f99AQpbAYdYla0/iCf
Rov5dObnGSICdKBvj49QrFYymiIewYrPVVd5LZ1vgyFRHIuWYmoSoKUXJiKVf6uE
d9xZ6TfSnNHWdtN/G1djsr18V4uRx4jWCv0BKoaBSjei6gK4W9ij/dWeWOuPWIOx
5OP5uHFOGAqIqPRklxVXdCupom/IzlsrjrnGnO/T/gckGAHxQr4mLsmv/QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJseOfL2yueysG2Ks2rkcl0VHnPBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzM3NDQ5
MS1lY2E2LTRmMTUtOWFkNi0wYzFlY2YxODZkYWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvMzc0NDkx
LWVjYTYtNGYxNS05YWQ2LTBjMWVjZjE4NmRhYi8xL214NDU4dmJLNTdLd2JZcXph
dVJ5WFJVZWM4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAgsFPMA0EAgACMAcDBQMqEZ6AMA0GCSqGSIb3
DQEBCwUAA4IBAQCMdNdlr/NaCSpkRrA2J7KvEuPHKHtJvyExi9RS9Jpu9SG4M5KA
43fS95fBQqGMRN/oZElhqDUFMahvQ56Nu8SYYGyMmHNeaJG4MrtXxTm6U8kl3cux
uPHhKozkZ0/BiMPBZATHu6sSqcOaws9KrHmZUgUSefN0DjuZ2RqqPotbeAA06v9E
P0dri2yVq29p/y/f0wkySgQ/26EDMzStbe5IslfP57bkmNicJ2VWWqVuIiLh7guV
VkzKew1dzXbMgNMFuxF8z/HYwVdt3JsyJwz1wLGoATtAd9TigQlisLbvzctLZhLF
MCIF4HiY+qTuycAP1PuMNJL9MXoSnfTEWmS4
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:21 2024 by rpki-client on console-fra.rpki-client.org