Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NEwncoVU6Ps3gMHoPo5lF8ZZzRs.cer
File: NEwncoVU6Ps3gMHoPo5lF8ZZzRs.cer (raw, json)
Hash identifier: o5A+cQhY/faNVNXhw2qyPrfUkerOCeUR/3WuSImN3c0=
Subject key identifier: 34:4C:27:72:85:54:E8:FB:37:80:C1:E8:3E:8E:65:17:C6:59:CD:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B634934F7A67DBFD0CFEA32D0E97F1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/NEwncoVU6Ps3gMHoPo5lF8ZZzRs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.202.107.0/24
IP: 2a11:f280::/29
Validation: Failed, certificate revoked on Thu 14 Sep 2023 13:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:49:34:f7:a6:7d:bf:d0:cf:ea:32:d0:e9:7f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=344c27728554e8fb3780c1e83e8e6517c659cd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:94:57:1c:d4:fa:b5:04:0b:44:0f:23:49:cc:
13:93:4e:75:6c:7e:cc:bc:42:20:3f:cd:14:57:59:
40:b9:df:24:2d:e2:95:04:76:5c:4d:c3:0d:96:64:
17:11:79:8f:38:04:52:db:5c:aa:87:a6:af:4c:20:
fd:c6:76:d0:65:d9:0c:5c:d1:04:8f:4d:6a:75:ef:
c8:dc:90:8b:8b:5e:51:82:92:70:7d:b8:b5:a6:74:
1d:03:9b:14:d4:3e:92:8c:31:9b:fc:30:6a:5e:97:
2c:95:86:a8:63:9e:06:d5:b3:d1:c2:9b:b2:29:6d:
05:94:2a:70:42:ff:f2:ff:91:86:35:6d:b5:87:ec:
f9:86:7d:44:b4:84:3f:cf:7f:93:6a:fd:cb:bd:4f:
42:af:42:51:8f:8f:d8:1b:6c:98:ba:d5:82:48:a3:
ff:9d:d1:85:8d:34:a1:a1:f2:07:e1:91:45:dd:52:
73:5d:fa:ea:fa:01:58:73:c7:54:2e:14:80:90:17:
5f:76:f0:11:b2:40:b4:50:ea:67:da:44:8e:83:d0:
27:6c:14:12:c6:f6:72:c5:df:77:d9:84:15:51:1e:
f9:30:a8:90:47:b3:7b:6b:3f:e6:4c:ef:7a:bd:07:
20:8e:46:ce:82:6f:2b:fb:9a:a6:d4:aa:20:f0:99:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:27:72:85:54:E8:FB:37:80:C1:E8:3E:8E:65:17:C6:59:CD:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/NEwncoVU6Ps3gMHoPo5lF8ZZzRs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.107.0/24
IPv6:
2a11:f280::/29
Signature Algorithm: sha256WithRSAEncryption
9f:53:cd:3c:d5:2b:f9:10:7b:e9:17:ef:03:bf:99:af:03:91:
66:87:ef:7c:d5:08:7c:bd:2e:48:31:aa:63:c0:1e:b1:e6:9a:
61:02:e4:34:b3:42:45:b4:a7:c8:8c:0e:e8:86:0d:91:88:39:
b2:85:ff:99:89:85:75:75:21:da:b8:cb:66:65:d2:67:1e:de:
40:7d:82:58:84:50:ce:d9:77:ff:1d:0b:e3:20:a5:00:1a:78:
1a:bf:02:46:e2:d9:11:85:67:8c:bf:42:7e:30:33:81:74:46:
2c:8d:e7:9d:8a:5a:1e:64:d7:bc:0b:b4:99:f7:19:41:d2:b7:
fa:fa:d5:4a:e6:26:d3:48:e4:31:b7:ad:67:12:a4:60:00:ea:
a9:83:dd:39:17:5c:07:36:14:40:01:b2:fa:ee:ec:ff:d2:9e:
83:99:a8:3d:a8:83:5e:f6:8d:01:e1:e4:54:7d:42:6e:f3:8d:
fd:9a:e8:ab:f0:a9:28:ea:47:a2:84:79:52:f2:3d:64:68:08:
d1:e9:01:a3:b2:9d:d9:54:40:de:51:79:dc:57:5f:77:d9:23:
6e:ac:3a:39:95:d8:a7:87:50:7f:60:cd:23:2e:29:77:cc:dd:
88:b2:1e:6d:4b:52:59:1a:e2:dc:73:08:8a:4f:4c:08:87:7e:
3d:3e:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:11 2024 by rpki-client on console-ams.rpki-client.org