Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer
File: mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer (raw, json)
Hash identifier: CH3JcXb56rjXJo5ztG9iYnOf1bka6UvpMlDvIB0Q6WE=
Subject key identifier: 99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492B04A13EECDB0E273868743F8E18C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.5.147.0/24
IP: 2a14:2700::/29
Validation: Failed, certificate revoked on Mon 29 Apr 2024 09:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:b0:4a:13:ee:cd:b0:e2:73:86:87:43:f8:e1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99fea9717c280ec879335273f022e6b0537455c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:aa:74:96:e0:5f:df:a5:d4:f7:30:1a:55:
1c:4f:61:20:09:c3:61:c8:e0:5f:0b:66:03:31:b3:
ef:d6:16:8c:19:dc:fc:ab:64:0a:a0:6c:69:4a:ab:
81:a2:f2:74:0c:a6:b0:c9:3d:68:94:d1:95:c3:3a:
e3:79:e4:fb:2f:3a:d7:be:bc:da:14:ba:6a:a0:6a:
3f:4a:2b:57:67:8b:75:47:f8:fb:8a:2d:e3:2a:f1:
ce:cd:85:35:4c:c3:26:b4:90:8a:35:7d:fd:1e:d5:
1f:a2:38:4c:c1:9e:d8:e7:59:ab:97:7b:8e:3f:e9:
59:c4:9d:ac:ac:40:bb:8b:32:a9:59:c2:23:b2:26:
23:f0:b6:3d:52:b7:87:d7:12:16:fb:d5:cd:5f:35:
0a:52:7b:3d:03:a2:84:43:47:87:70:f2:55:dd:e2:
5c:db:00:73:d9:1b:02:97:0a:55:04:06:92:2d:c4:
f6:67:39:b7:ae:69:45:ba:71:cb:bf:9e:96:b1:92:
40:2d:07:a0:c1:0a:ea:3e:19:9d:77:2c:32:9e:92:
42:36:54:01:f9:31:00:db:72:b1:e5:5d:2c:8f:05:
a8:a2:e4:e7:22:7f:79:95:ec:5a:c6:4f:5b:85:cb:
10:f4:0d:29:dc:c8:20:fc:50:19:18:fb:91:60:3a:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.147.0/24
IPv6:
2a14:2700::/29
Signature Algorithm: sha256WithRSAEncryption
2d:91:f4:51:81:b8:5a:bd:1f:1f:79:ed:a1:4a:fa:2d:b6:7a:
5c:7c:6c:41:b4:cc:3b:c1:ca:da:4d:4e:51:8e:4f:ed:18:d2:
6d:c4:c4:3f:2e:88:84:ce:8b:3e:e1:04:db:ee:57:e2:67:37:
dc:39:1b:c4:77:e4:7d:00:7b:53:b4:1c:e3:bf:dd:8d:23:85:
bb:82:e7:29:b2:28:47:fa:41:ed:58:77:b0:00:bc:51:4c:95:
9b:73:a0:c7:ac:dc:0c:00:c1:bf:02:e5:e9:0e:d2:e0:26:17:
d2:a6:45:0d:d6:a8:6c:c6:48:14:ef:76:28:18:e9:52:84:74:
f0:87:6f:95:82:76:2c:83:ff:a5:09:0c:50:8c:6f:2d:57:a8:
1c:dd:55:c5:6f:2d:9d:58:5e:6e:13:f2:50:44:a6:88:20:b1:
16:31:b1:fa:52:8c:89:3b:5b:a8:31:61:99:c4:b8:ad:de:0a:
b5:0e:64:55:bd:14:35:ce:d2:07:42:8e:23:cd:da:be:db:4c:
4d:b6:96:33:58:0c:8e:61:44:65:f6:4e:31:a4:93:5a:8f:7c:
23:04:75:06:ac:d3:14:6a:f4:e7:5c:29:7d:ea:7a:d8:52:a5:
ac:58:c7:60:29:8a:92:ad:33:0f:17:79:26:ce:18:e5:6a:2a:
8e:75:c0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:13:46 2024 by rpki-client on console.sobornost.net