Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NFmgOs_kj0orj7fXUds8tcDTVoA.cer
File: NFmgOs_kj0orj7fXUds8tcDTVoA.cer (raw, json)
Hash identifier: Wp/Cf2Sznos8mmYwcXGDcsiru6lKGKYeKSUABm/o4m0=
Subject key identifier: 34:59:A0:3A:CF:E4:8F:4A:2B:8F:B7:D7:51:DB:3C:B5:C0:D3:56:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857089B10F9BF8609B27F0F2A88F7EC80A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/da4101-eb87-4a54-ab46-e2239c2d4d62/1/NFmgOs_kj0orj7fXUds8tcDTVoA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/da4101-eb87-4a54-ab46-e2239c2d4d62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:32:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 35768
IP: 87.237.40.0/21
IP: 176.74.200.0/21
IP: 2a01:5080::/32
Validation: Failed, certificate revoked on Fri 02 Jun 2023 09:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:89:b1:0f:9b:f8:60:9b:27:f0:f2:a8:8f:7e:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:32:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3459a03acfe48f4a2b8fb7d751db3cb5c0d35680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:e6:a4:fc:f3:77:2f:6f:1e:98:7d:ed:69:
63:9c:c4:eb:c0:4c:3e:61:1a:53:ad:5c:7d:e7:32:
13:1d:ad:b9:35:05:bd:85:2a:d8:bc:0e:0b:76:e0:
86:66:7a:fc:f6:c8:ba:9d:56:80:9a:77:de:a0:2f:
28:87:a4:a8:82:1f:e2:8c:fa:fe:e5:2d:3d:9e:9e:
1d:15:70:ef:a2:fb:bc:02:a3:9a:5b:44:21:b8:b9:
08:41:4d:32:2f:13:6e:ec:35:3d:49:79:4a:94:59:
9a:98:4a:f6:bd:e7:64:7f:da:57:75:63:1e:d5:57:
78:50:0d:6f:89:f8:03:09:a2:3b:83:f0:3e:fe:b1:
9f:bf:44:00:6a:20:ee:5c:c3:1d:24:74:7f:cd:9c:
06:60:73:c2:94:fa:94:50:ff:45:e6:5d:08:35:01:
95:bb:19:52:77:62:cd:ec:e2:e8:36:3b:69:51:f0:
8f:80:83:e5:3c:f4:8b:cc:75:c9:92:2b:86:5c:f5:
b9:bf:85:a2:dc:3f:ef:3b:46:da:bd:b7:33:a5:fc:
a1:37:19:3c:c8:f5:6c:c5:a7:4d:49:f8:fe:65:64:
1b:e3:ec:dd:b9:fd:4e:85:29:54:6e:72:74:3b:2e:
47:9d:67:0a:21:01:89:a9:f8:b4:35:f9:0d:4d:a8:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:59:A0:3A:CF:E4:8F:4A:2B:8F:B7:D7:51:DB:3C:B5:C0:D3:56:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/da4101-eb87-4a54-ab46-e2239c2d4d62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/da4101-eb87-4a54-ab46-e2239c2d4d62/1/NFmgOs_kj0orj7fXUds8tcDTVoA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.40.0/21
176.74.200.0/21
IPv6:
2a01:5080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35768
Signature Algorithm: sha256WithRSAEncryption
05:0e:c4:90:22:60:89:c4:8e:a7:3e:c0:4c:e6:b3:3d:41:c9:
4b:2c:ae:a6:41:9c:0c:56:58:6b:30:6b:fd:7f:17:fd:d2:ed:
f0:77:56:49:c4:c9:93:42:a3:de:f4:4b:d3:6d:b8:6f:85:78:
47:f0:7a:d2:3e:e3:19:40:cc:a4:f7:a0:78:ef:37:52:e9:11:
39:4f:f3:02:94:eb:fd:e5:55:3f:da:ea:b1:a7:6e:29:e8:5e:
54:e5:e1:8c:ed:4a:65:66:3d:23:5f:7c:58:16:c4:f3:e6:68:
09:4d:93:46:09:a0:d2:ec:9a:cb:c7:b5:4f:8d:22:32:ed:40:
07:aa:8b:b9:7a:7d:7c:7b:7f:33:69:c7:cf:5a:bb:c3:62:47:
3f:97:95:60:a6:ce:50:15:3d:c6:5e:fa:3b:d4:94:40:c7:6d:
12:5d:c3:17:6c:22:8c:a8:80:2d:27:d1:bc:97:97:61:a3:0d:
81:4b:f7:7d:85:56:b5:a3:1f:24:3d:84:55:2c:cc:8f:58:4e:
fb:d3:d7:33:ce:c0:b1:7e:7c:2f:67:14:e8:1c:3b:67:fa:61:
be:02:ae:0c:40:e8:ad:2a:31:c7:f3:f1:b5:3b:e6:b1:8b:21:
7a:45:60:c2:50:d7:23:e5:d5:77:9b:cc:2a:6d:1a:e7:68:9c:
47:35:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-fra.rpki-client.org