Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
File: NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer (raw, json)
Hash identifier: 8Zdbd7uUZnKT/IoBqBxAah7PSr9tztOPZSZ5kQ5PCMs=
Subject key identifier: 34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192B8DE3FD2159C499213FDB4A505705688
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Oct 2024 10:13:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a13:e600::/29
Validation: Failed, certificate revoked on Wed 23 Oct 2024 10:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:de:3f:d2:15:9c:49:92:13:fd:b4:a5:05:70:56:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 23 10:13:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:44:a7:67:16:8a:8b:b9:06:c6:a1:fa:4f:
6e:d8:27:17:00:85:d4:39:74:1e:8c:f5:0e:62:6e:
d3:a2:50:d5:f5:fd:c5:6a:9e:ee:00:f4:77:5d:32:
7b:98:bb:39:bc:7c:fd:0b:12:2c:09:2d:94:91:32:
8b:c4:7f:c3:2b:51:05:50:d7:75:e1:7a:fd:4e:ef:
ae:b1:1b:d8:c2:95:cb:82:13:d2:00:9c:ba:16:16:
0a:c0:a9:b9:b1:1e:19:fc:a0:71:c6:10:29:de:1a:
58:f0:f4:26:d0:4a:e6:36:cf:52:1f:ed:4d:9c:4b:
8c:b2:32:c5:29:10:94:02:7d:92:7e:61:1f:b8:51:
39:bc:a1:e3:82:af:8c:85:6f:35:39:a1:4f:bd:d7:
27:59:69:51:ae:de:a0:c2:0b:88:98:ca:95:1e:bf:
ad:0c:75:1d:f5:06:2a:45:57:8f:23:7a:8a:d0:d4:
ac:d0:4e:4a:e6:98:9c:5d:0b:6f:75:7b:ed:8a:7e:
e1:8a:91:49:1f:28:36:43:16:b4:03:b4:79:f3:50:
dc:da:c4:96:c1:f5:5e:bb:66:93:26:96:07:6c:19:
68:53:52:39:01:2b:29:7e:dc:b3:ec:63:a9:9e:13:
ee:14:d6:c0:77:4f:ae:74:22:25:54:a7:bf:82:b4:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e600::/29
Signature Algorithm: sha256WithRSAEncryption
2c:52:81:52:3b:26:e8:8f:a2:a9:64:29:02:ee:7a:4e:b7:8b:
9c:79:18:fd:9d:4c:ea:69:02:73:d0:fb:25:cf:f8:e4:f6:5f:
1e:43:c6:86:cd:89:70:bc:6b:ff:24:31:81:6e:f0:66:17:c5:
1d:b2:50:a6:03:c5:bc:57:62:3f:ec:cc:7c:4e:64:bb:67:cc:
64:a1:ea:78:5f:c0:a4:e8:b1:1b:0c:4f:45:85:51:98:81:4e:
1a:b0:a9:23:8a:d0:d1:8f:9e:3d:0e:f3:75:e3:24:e3:1e:72:
d8:2f:6f:27:76:e1:a1:d1:0b:24:ba:ec:2f:09:c0:29:be:8e:
66:71:86:ed:19:98:f9:3c:da:51:12:07:fd:36:56:2d:20:b2:
9c:d7:af:74:04:ba:7c:97:82:36:f4:21:bd:cc:56:e5:d9:ea:
8a:5b:ee:0c:cd:9c:6c:79:49:a6:57:b8:b4:05:b8:47:31:04:
be:45:a9:84:43:95:1a:36:10:9a:12:f8:cb:66:74:1e:49:81:
4a:ac:a6:91:f1:d3:33:52:00:59:24:4f:a9:be:01:b5:84:d9:
b6:61:1b:8d:72:08:bf:1b:c4:32:a7:a9:18:6c:ef:d7:62:af:
e9:0a:21:e7:87:53:11:db:ee:75:59:22:6c:4a:99:4f:06:67:
69:15:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 14:05:13 2024 by rpki-client on console-fra.rpki-client.org