Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
File: NNTev4f2fLtEI3OBfn1i91ilms0.cer (raw, json)
Hash identifier: xlfIY+z+Un1QUL7IRp+BKo63Ez5/Nf/R33Lhjc4qPoM=
Subject key identifier: 34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9B88E5E8230345EE3C932AE5D82D8CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 94.143.224.0/24
IP: 2a12:8680::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 10:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:8e:5e:82:30:34:5e:e3:c9:32:ae:5d:82:d8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34d4debf87f67cbb442373817e7d62f758a59acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:f8:8a:e2:bc:ec:e4:36:ef:1a:c6:ef:ac:
c1:28:e2:ae:3e:01:e3:5e:44:68:83:b8:8b:4f:23:
ce:03:0b:e2:63:d5:ae:ad:bb:5d:07:2b:8b:5d:0f:
5e:a3:17:16:6f:7e:2c:07:bc:09:b3:40:2a:73:4c:
5f:ef:0d:32:87:ca:f0:35:75:50:af:87:84:36:7f:
81:5f:f0:54:1a:00:59:71:ec:8e:01:19:87:6b:04:
ff:7a:d1:80:7a:c3:2f:c5:3c:42:09:50:96:20:a4:
1f:06:90:8c:1a:b2:d1:79:25:ae:f6:00:e7:25:05:
2c:b6:bd:92:68:44:8e:4d:47:9a:bb:8e:4e:64:27:
35:3f:30:f6:e1:80:42:33:a4:a6:c8:07:46:4a:c9:
52:a4:cd:6d:da:27:0e:cf:3e:ca:04:d9:2f:27:f7:
a3:d6:22:8b:47:a7:ea:aa:3c:cf:95:8d:6a:47:35:
db:93:6b:80:3f:a4:f2:56:16:ee:2b:0d:7a:29:1d:
21:90:7b:2c:21:e3:90:4d:f2:8a:9f:7a:4a:7e:67:
37:ea:db:31:60:c0:3a:e8:a5:8e:27:a4:bf:07:af:
a0:30:69:bd:d8:d4:21:c4:c1:55:81:bd:d3:77:ca:
2d:30:07:74:5f:84:ee:e8:37:2d:6c:10:ec:1a:86:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.224.0/24
IPv6:
2a12:8680::/29
Signature Algorithm: sha256WithRSAEncryption
7e:7b:6d:eb:42:23:37:cd:91:f1:57:07:9c:ee:37:af:d4:9e:
18:02:d0:32:ea:ad:18:ca:60:9a:0d:4e:7e:00:38:d6:79:78:
8c:76:24:60:7d:45:15:f0:e7:5c:60:be:42:3f:e7:bf:c7:ea:
fc:6f:ed:66:31:0a:da:c6:06:a7:0d:9a:93:62:dc:6c:8f:9d:
47:f5:ec:ca:55:32:9a:73:32:6f:04:36:f5:56:d2:93:ec:c9:
c3:b4:f4:b9:cf:00:4d:c3:d6:0b:e8:ef:fa:8b:d3:fc:bc:ac:
71:e6:61:3c:39:9c:c6:7c:53:76:11:c5:66:c8:f6:17:0e:9f:
90:ab:89:15:c0:5f:f5:dc:8f:58:35:9a:31:50:e1:8d:f6:1d:
2a:56:60:1c:02:74:6b:ac:d3:ea:3c:20:c4:20:65:62:f8:5e:
58:04:eb:07:b8:bc:83:1a:c6:ac:a9:05:70:14:94:fb:f2:1e:
ed:98:c1:fd:ab:29:3f:c7:51:a7:ba:3f:9f:37:10:d3:cb:00:
b4:e2:07:56:27:a8:cb:af:91:d7:cc:60:a1:b5:73:66:ee:d6:
f5:b0:41:fa:05:d1:cf:19:77:d6:67:18:4b:cb:cb:33:9a:42:
32:85:16:62:03:04:fb:96:33:d0:5a:83:6b:1f:1c:22:52:53:
7d:ef:1d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-fra.rpki-client.org