Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NaIpxxtybl7t8GG3vW09lPoWDLU.cer
File: NaIpxxtybl7t8GG3vW09lPoWDLU.cer (raw, json)
Hash identifier: Qz41qIgQt/TPbs9AUkzQSqUfyNvyaiJkIO6PFnjAQUQ=
Subject key identifier: 35:A2:29:C7:1B:72:6E:5E:ED:F0:61:B7:BD:6D:3D:94:FA:16:0C:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7E9E0C77D13EF57B9327452B16A4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/NaIpxxtybl7t8GG3vW09lPoWDLU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:34:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.24.120.0/24
IP: 2a11:26c0::/29
Validation: Failed, certificate revoked on Tue 19 Sep 2023 10:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:e9:e0:c7:7d:13:ef:57:b9:32:74:52:b1:6a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:34:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35a229c71b726e5eedf061b7bd6d3d94fa160cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:2c:da:a6:3e:92:80:76:c1:ba:14:2e:6c:
43:86:3b:6d:69:80:c7:17:2a:b3:68:ad:1d:5e:29:
7c:ab:95:51:55:f3:16:72:3a:52:32:07:59:24:3f:
bd:89:5c:c6:c8:fc:ff:5e:0b:5b:d3:b5:35:9c:71:
69:bb:f1:fa:cb:62:c3:92:d1:c4:30:3d:78:8e:b0:
1e:77:bc:03:ae:4c:a8:85:ad:95:d1:bf:28:5b:8a:
6c:02:d3:06:ef:40:27:6f:c5:52:80:46:66:c2:06:
f9:b8:8d:aa:a8:2d:01:fd:45:22:e3:15:ae:cf:78:
3e:05:ed:ba:26:ee:80:d2:7a:f1:5f:ee:65:59:3a:
24:3d:01:93:00:6b:0b:2f:a1:93:0c:5d:fe:af:37:
4a:40:cf:73:bd:c6:63:bc:62:b8:68:a4:33:0f:72:
e8:c1:b5:74:90:d2:24:8e:11:df:0b:9a:b0:54:22:
9f:7c:fc:b6:0b:70:2f:88:65:4d:71:ed:4f:cd:b1:
f4:8a:95:cf:fc:43:a2:c6:19:52:c3:b2:03:41:7e:
90:4d:02:b0:2c:29:09:fa:80:64:f5:87:d0:52:3e:
e2:bb:9d:e6:33:6c:81:e9:93:be:02:66:6c:1f:3c:
7a:1d:e7:f9:58:b8:9e:c5:ec:5d:10:e5:e7:47:5c:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A2:29:C7:1B:72:6E:5E:ED:F0:61:B7:BD:6D:3D:94:FA:16:0C:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/NaIpxxtybl7t8GG3vW09lPoWDLU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.120.0/24
IPv6:
2a11:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:33:72:3a:c4:eb:50:42:0b:f6:43:7b:ed:83:12:61:83:a0:
4d:10:fa:c3:fa:9c:ef:20:cb:29:63:ab:34:3a:ce:a1:b9:5a:
cf:4d:27:7c:b3:d2:d5:1b:20:af:1c:c5:10:eb:8e:36:d2:b8:
5d:df:a3:c4:aa:eb:18:b2:be:0b:e2:63:62:b5:ee:cc:64:57:
0e:05:0f:29:6d:a8:5a:d6:bc:05:93:70:c9:60:a5:4f:03:fc:
37:44:19:ea:e8:85:bc:a4:b2:87:e5:ff:b4:39:c0:aa:c7:3a:
7b:57:d6:40:60:8c:86:3d:e8:01:d0:f3:65:9d:04:49:ef:92:
12:de:e5:6b:b2:19:99:3f:6c:74:06:5b:00:aa:7e:65:22:62:
cf:1a:3c:d4:22:64:91:61:28:57:ab:67:95:b3:bf:78:f8:80:
8b:23:8f:9a:62:99:7d:2f:e4:36:e7:f8:46:2c:30:ca:e2:17:
31:4d:29:7f:a1:37:c1:02:ae:54:76:df:9f:3f:20:84:3e:c5:
b7:de:f1:31:f7:03:91:13:d2:53:25:ed:70:87:f8:a4:32:0d:
38:f6:b2:8f:fa:06:6f:bc:5a:0e:54:8b:00:ba:bf:90:54:f5:
0a:6c:3c:d9:05:e9:27:bb:86:17:74:70:83:f7:fc:a2:04:79:
47:72:43:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:35 2024 by rpki-client on console-fra.rpki-client.org