Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NXbf2byYxhO4QyfTQGIHWsxWJy8.cer
File: NXbf2byYxhO4QyfTQGIHWsxWJy8.cer (raw, json)
Hash identifier: F+uhQ+J4jRr0jzzrmyZizMoxPWW/F3q+BMvI7/vdKj8=
Subject key identifier: 35:76:DF:D9:BC:98:C6:13:B8:43:27:D3:40:62:07:5A:CC:56:27:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D5B3427D407CB654E083B7F145224
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.210.125.0/24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 13:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5b:34:27:d4:07:cb:65:4e:08:3b:7f:14:52:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3576dfd9bc98c613b84327d34062075acc56272f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:44:1a:4c:64:3e:28:23:55:b3:bf:6d:cd:
2b:6d:df:e4:14:0a:e8:71:39:7c:a7:42:47:57:61:
32:6f:10:ce:29:63:85:57:b8:73:11:35:57:ad:ad:
93:54:4c:1c:11:62:ae:43:4f:18:23:29:c9:e0:1e:
0a:79:87:42:fe:85:70:20:e9:6d:b2:52:78:36:fd:
2c:70:6b:51:05:7d:c1:3a:22:90:57:6b:af:d1:ee:
c6:ab:d2:36:20:1b:4d:34:3a:3b:d2:e3:02:82:1d:
24:93:d0:35:6a:21:5e:65:cb:d8:f2:9f:1b:bf:af:
51:f6:4e:5e:18:65:0e:d6:f6:f6:87:de:5f:a0:09:
3f:9d:5a:32:85:d7:97:d0:33:0f:aa:1e:87:e4:08:
68:e1:9b:8e:6b:92:2f:52:e2:98:ad:38:d8:c2:25:
db:ff:25:75:2f:74:e5:ac:47:87:8c:dc:1a:f3:75:
56:73:c3:85:d3:74:98:a4:d2:2a:55:ec:d2:05:b2:
c1:b4:59:63:23:b0:4e:27:cb:73:9e:2a:f2:f4:2e:
f0:c0:0c:c0:bf:73:9e:fd:b8:45:fc:a5:ed:f6:de:
3f:73:85:ab:0f:c6:d7:c4:a0:a9:87:28:9f:d8:79:
1b:c9:40:92:b4:23:74:5a:c6:1d:ee:c5:8b:b0:bb:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:76:DF:D9:BC:98:C6:13:B8:43:27:D3:40:62:07:5A:CC:56:27:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/311fe5-3885-4c3f-8ca0-9bcf6cadaad6/1/NXbf2byYxhO4QyfTQGIHWsxWJy8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.125.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6e:23:34:00:c1:84:a3:79:6b:ef:0e:90:32:10:c9:d0:dd:
b1:d2:d5:ce:ef:79:d6:72:33:d4:4e:1b:ed:a6:c6:85:fc:d4:
c4:9c:70:bd:38:29:10:92:4b:7d:35:b5:58:ec:03:0b:5d:12:
57:0b:3a:3a:99:17:06:99:2c:3d:a4:c4:81:dc:c7:bc:a0:82:
40:69:a5:4c:a0:8b:c8:f7:c5:5d:39:15:5f:7d:fa:5a:5f:0d:
76:b0:7e:d9:f5:50:ab:57:31:19:7d:81:2a:5f:c0:db:17:a7:
79:39:0d:2e:e1:37:16:34:ea:5a:cc:c0:ee:c0:6b:5c:21:59:
d6:af:6a:0e:36:68:b7:31:0a:62:b7:cb:a8:6e:d2:7e:cd:86:
ac:1c:f1:9b:9b:c7:23:89:c3:b9:28:15:9f:a6:86:7b:58:4d:
47:6d:32:5b:c9:79:e9:b9:5e:f9:c8:2c:2a:3e:88:54:b8:fe:
0a:c1:51:cc:31:0c:82:8a:6e:26:bc:80:71:e6:1e:fc:63:01:
32:03:60:6f:e3:a6:43:93:d5:f8:0b:d6:75:37:16:0d:a9:ec:
c2:7d:6a:22:fa:60:7b:50:da:c8:4b:1c:3a:ff:2e:99:1c:a4:
54:80:64:46:dd:11:8f:c4:4e:2e:e7:63:fd:33:29:e6:10:3c:
a4:14:b1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:51:37 2025 by rpki-client