Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
File: NclgZQk5mLpCz7oRvw0X06xAPUA.cer (raw, json)
Hash identifier: gTy26u5qa/EsdODr0j4vMfRT/YV55zE6KFtsu+blDMY=
Subject key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018BC7D227C7797BC51E471AC6FBEC4EBF34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Nov 2023 08:35:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 158.247.56.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:d2:27:c7:79:7b:c5:1e:47:1a:c6:fb:ec:4e:bf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 13 08:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:82:41:3c:02:69:89:7b:68:9d:39:a1:24:
25:a9:bd:a9:45:bc:5f:6d:49:a4:3d:d4:08:49:85:
06:d1:32:28:3d:c0:88:8d:74:da:3c:e3:30:21:1d:
1e:d9:de:ae:85:fb:9d:ef:d3:a5:d6:e0:2f:9b:96:
d6:9a:d5:7b:0e:46:ca:21:ca:d6:98:4c:4b:fb:72:
35:40:45:8d:98:c2:5c:d7:2f:a5:10:e2:47:1e:09:
d9:eb:da:7f:2c:95:48:e3:99:02:16:70:6b:ee:82:
0c:65:ab:67:eb:3b:25:b6:2d:e6:58:75:9b:73:47:
49:57:8b:31:10:f4:b3:34:29:f9:4a:9f:69:4d:3f:
8c:df:e9:2d:7c:ab:88:13:5f:ab:66:9d:8a:9a:49:
d1:49:46:cc:5c:24:85:32:08:5e:33:9f:01:8e:c0:
fd:2e:a6:c9:e0:82:ae:22:1f:52:2b:36:e1:27:26:
82:5b:be:cd:89:dc:d0:94:1c:92:dd:62:11:a1:33:
3f:5a:03:63:e6:b4:e0:ca:ba:f2:d7:60:11:68:6e:
83:21:ee:18:6b:0a:77:58:44:40:eb:05:16:f2:d8:
7c:68:1f:84:92:ba:6f:d8:3b:72:e0:a8:33:88:83:
d3:61:30:e3:37:9c:34:87:37:98:cd:ed:f2:47:dc:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.247.56.0/22
Signature Algorithm: sha256WithRSAEncryption
08:89:4f:41:1a:ff:02:1d:16:ed:f0:0c:f9:04:4d:b1:da:38:
75:c3:2d:91:b8:26:ba:2b:e3:84:f9:50:84:15:df:ea:d7:6d:
00:a6:0a:01:95:34:73:f3:2b:ea:6b:af:94:c1:3a:a2:e2:75:
6f:85:04:fd:2f:e5:1b:70:26:d3:49:63:1e:69:d6:8b:27:03:
90:69:0c:db:c6:d9:2a:58:4f:b6:0f:98:7c:8f:75:b3:3a:a7:
73:19:5c:d7:8e:6e:84:b7:d6:d3:2b:20:87:cf:a3:0e:0a:1e:
3a:d8:1e:b4:73:39:56:3f:cb:cb:f8:7b:b3:4d:95:36:c6:52:
94:cf:c5:fe:fc:92:c3:d0:9a:34:20:ab:e5:91:df:bd:b5:dc:
49:74:61:48:62:bb:b7:d6:a5:78:02:a3:f9:2b:dd:f1:f7:c9:
76:1c:bb:06:8c:c1:17:62:20:bf:cc:11:92:c1:24:37:fd:1d:
a4:d0:de:97:d1:a3:f8:24:84:f8:e7:2a:14:57:88:e7:e2:bc:
72:91:d1:e2:71:e5:21:02:15:9d:97:94:2a:d9:9e:5e:a2:0c:
8b:c8:4d:e7:9b:54:28:44:ba:58:84:b9:61:0b:fd:d5:ab:57:
59:95:6b:36:d2:d3:d3:a0:9c:a0:69:83:df:1e:2b:34:78:fa:
16:60:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 15:18:39 2023 by rpki-client on console-ams.rpki-client.org