Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
File: pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer (raw, json)
Hash identifier: 8F8t2Q5gd5A62GahLDzc3m6tow6nR4rY6RTiMu102Lc=
Subject key identifier: A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF6FB6DBCE821521DB0485C1929017F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/pMG7EBqBS54u6CZPgTUqW_Ly0CU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 129.88.0.0/16
IP: 147.171.0.0/16
IP: 192.33.171.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f6:fb:6d:bc:e8:21:52:1d:b0:48:5c:19:29:01:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:39:ef:25:27:69:2b:97:c1:f4:9d:d7:e1:
8e:01:23:1f:4a:ac:65:92:73:4a:9b:ec:6a:01:ab:
10:cc:eb:bc:c9:ec:1e:89:8e:d4:d4:82:9e:6f:ec:
58:ed:25:40:d7:a2:19:f6:1a:c6:a2:d9:37:d9:89:
9d:b0:f9:82:17:28:05:ef:bb:10:d6:28:0d:1e:35:
80:e0:35:8d:55:dc:32:a0:7a:e2:67:c9:bc:f0:31:
ea:31:7c:c3:0a:06:22:f2:e5:66:76:c8:ec:26:c5:
65:61:fd:b6:17:3e:62:ee:9f:f1:72:ee:6e:a9:a3:
0c:50:c2:f4:ef:d9:ab:c3:26:8b:bf:96:50:ea:33:
f0:dd:3f:43:dc:fe:22:db:b5:49:32:71:b4:28:f3:
e4:2c:93:a1:b3:b2:e1:9d:71:e1:80:3b:bf:c6:27:
53:fa:a3:17:7b:d4:b4:6b:d1:36:e1:44:2e:67:b5:
f3:0d:48:d7:3f:34:07:2e:32:db:78:a1:25:3e:fd:
84:ea:3c:8f:58:85:7a:bb:ca:79:26:94:46:d0:a9:
25:34:1e:c6:c5:a2:6c:85:5f:06:60:5b:4d:89:af:
25:f5:60:f0:51:b9:28:cd:82:8f:0c:f4:54:ba:43:
52:04:af:8f:a7:38:a3:c7:2d:4e:52:f7:2c:b8:08:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/pMG7EBqBS54u6CZPgTUqW_Ly0CU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.88.0.0/16
147.171.0.0/16
192.33.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a6:66:df:75:43:cd:2d:e9:62:96:93:08:2a:e5:7e:e5:cb:
0c:23:3a:69:2b:99:a1:92:de:32:e3:df:92:14:a3:f5:cb:f4:
cd:1e:8f:94:b6:a0:06:e0:66:a6:00:f8:77:1e:58:bc:c6:88:
a7:c6:76:df:33:10:28:f8:84:19:9b:24:7c:83:ae:58:0d:8b:
a4:09:72:5c:05:b9:e9:b4:a2:06:07:ce:db:c8:43:37:05:3c:
2f:c0:e1:ca:c5:08:99:1e:8c:a6:09:f2:2b:e8:79:57:3d:2e:
44:60:33:60:8f:64:ce:84:e0:49:ba:fd:6f:7d:f6:d1:f6:02:
37:77:74:95:4e:93:c4:be:d5:39:48:92:df:9b:86:59:9a:52:
d5:c1:dc:e3:eb:9c:79:cb:c7:24:66:ea:0f:6b:2a:fa:3a:fc:
18:c7:e8:81:96:eb:cb:38:8a:60:89:3e:16:86:88:cf:84:8e:
fe:ee:84:1d:b0:a8:37:2d:ec:3b:12:42:97:b8:a1:87:a0:25:
29:f2:11:0b:fd:4a:e0:1c:79:53:46:ee:90:7f:c3:f9:c0:2c:
91:3a:53:d2:6a:10:7f:45:c2:a4:b8:a4:b6:8c:09:3d:f2:16:
79:d0:8b:08:af:ee:6b:79:db:1a:76:ab:14:3e:34:57:1c:8b:
55:07:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:14 2023 by rpki-client on console.sobornost.net