Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NLs4SqnQqsAp8rL0AVwuMY64rKQ.cer
File: NLs4SqnQqsAp8rL0AVwuMY64rKQ.cer (raw, json)
Hash identifier: /U14teR7qMKNWSr6o6THOOuQERAcPU/bAPNAwfk6tLI=
Subject key identifier: 34:BB:38:4A:A9:D0:AA:C0:29:F2:B2:F4:01:5C:2E:31:8E:B8:AC:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185C60E51593752D8AFD6B78EB7571BDB2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/NLs4SqnQqsAp8rL0AVwuMY64rKQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Jan 2023 18:05:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 48404
IP: 146.19.80.0/24
IP: 2a12:6500::/29
Validation: Failed, certificate revoked on Fri 22 Dec 2023 10:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:0e:51:59:37:52:d8:af:d6:b7:8e:b7:57:1b:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 18 18:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34bb384aa9d0aac029f2b2f4015c2e318eb8aca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:24:7f:1e:d2:f6:05:8b:64:6b:94:53:ce:
ce:c8:38:a6:30:30:a6:30:f9:91:64:a8:49:8a:85:
d0:08:c9:29:e3:a8:74:76:e9:e1:67:e6:0b:d3:d6:
92:f6:fb:d7:c3:2e:60:9e:30:54:c9:c2:7a:71:26:
4d:44:3b:fc:f9:cd:71:a2:66:01:8c:3c:fe:7e:e7:
78:4c:7e:0d:ac:6a:5c:7a:4d:70:1a:76:8b:c5:a5:
50:66:e2:d4:15:92:09:ee:3a:78:cc:c1:c5:2b:41:
19:e9:f7:00:bf:d1:e8:5d:9c:98:d4:b1:5d:3d:e1:
83:cb:16:42:fd:54:16:f5:4b:7f:0f:4e:0a:8b:37:
f8:17:30:d5:94:84:11:0e:a8:55:85:1a:07:ea:59:
ec:ad:e5:65:ce:78:7a:e3:91:0a:48:a8:30:29:d0:
1b:c0:cb:77:02:37:dd:55:1f:06:da:07:b9:73:fe:
2a:63:a4:5d:60:63:c3:7f:56:5d:e3:7c:9c:92:b8:
92:26:a7:c2:2e:f3:dc:4f:ca:cb:00:48:dd:b8:8a:
b2:ba:a2:e6:21:68:72:10:f6:f4:5d:18:d3:67:3a:
2f:8c:40:40:7f:5f:24:f4:96:e5:04:39:dc:16:d4:
24:1c:5f:e6:38:46:6f:49:32:db:9a:97:21:58:a3:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:38:4A:A9:D0:AA:C0:29:F2:B2:F4:01:5C:2E:31:8E:B8:AC:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/NLs4SqnQqsAp8rL0AVwuMY64rKQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.80.0/24
IPv6:
2a12:6500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48404
Signature Algorithm: sha256WithRSAEncryption
a5:c9:bc:19:a8:f2:4e:1f:64:8b:c3:cf:93:84:68:26:06:65:
c3:0e:48:e6:88:d1:f2:1d:cd:91:ef:9b:07:64:68:cc:62:bf:
49:85:30:5c:0b:4c:e0:33:87:9a:67:98:48:c4:55:1c:ba:d4:
d8:e8:fc:35:04:03:4c:69:53:2c:f2:54:c7:f1:1a:a9:7c:55:
a6:d0:19:22:92:b3:cd:3b:5f:df:39:3b:7a:8b:a9:18:18:d4:
f8:a2:76:82:59:81:30:ef:f8:9a:d4:b2:26:7b:97:9c:cc:a8:
f9:95:db:90:1a:9c:fe:e2:fa:3d:95:5a:d0:5b:d4:ac:9b:11:
d7:30:9f:aa:3f:fc:77:e7:1b:35:f8:cf:f5:ff:15:53:6e:03:
cb:6e:c5:1b:72:cd:f8:38:a0:6c:ad:2a:60:c6:33:e2:fa:57:
1f:a5:d8:f5:eb:d3:2f:b8:c0:47:e6:93:5d:66:3b:a5:c8:58:
6c:b6:56:d4:c3:4f:38:d2:44:0c:68:7c:22:c0:d1:b3:ea:62:
60:eb:17:d6:69:48:42:e6:5d:ab:3e:bb:18:92:af:34:d4:9f:
64:63:c8:9f:b7:60:12:63:92:a4:a6:a4:6e:51:a1:4b:9f:03:
45:e7:95:31:1f:aa:b8:d8:42:67:df:8e:2f:ea:a4:25:ee:1e:
19:09:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:13 2024 by rpki-client on console-ams.rpki-client.org