Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NdvO-LDBjf09SqLWWI6XHcm905w.cer
File: NdvO-LDBjf09SqLWWI6XHcm905w.cer (raw, json)
Hash identifier: qX7wOC2QgN3aWlZgnUt3Q94ej7qeB6TP4mkwCCvw0Z0=
Subject key identifier: 35:DB:CE:F8:B0:C1:8D:FD:3D:4A:A2:D6:58:8E:97:1D:C9:BD:D3:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708B5D184C3656E26E0D41947114A00A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/999789-2631-4eb9-a5dc-c7d29b294170/1/NdvO-LDBjf09SqLWWI6XHcm905w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/999789-2631-4eb9-a5dc-c7d29b294170/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.223.189.0/24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 09:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:5d:18:4c:36:56:e2:6e:0d:41:94:71:14:a0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35dbcef8b0c18dfd3d4aa2d6588e971dc9bdd39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:2e:2e:65:ad:c3:f8:bd:57:12:4f:6a:97:
f3:76:83:02:49:89:35:f3:b3:0f:5f:d2:bf:ff:9d:
65:26:93:d8:d5:9a:15:e7:64:84:9d:6a:73:6c:49:
3d:e1:b5:73:af:63:7b:e6:f5:3e:91:df:48:d0:97:
63:e4:53:18:35:cb:e5:dd:cf:5a:f7:a1:d4:37:c0:
14:c0:41:7c:33:87:ba:e2:bb:dc:99:04:d2:9e:63:
c3:a9:5f:b0:aa:60:b3:2c:ff:0f:f9:21:91:43:47:
5d:ca:26:a5:b6:aa:07:ac:cb:70:f1:f8:d7:f3:f3:
ac:11:87:41:9c:be:64:6d:00:20:18:6d:b7:6d:5e:
f3:03:4c:3c:e4:2a:50:10:82:f3:58:07:d3:98:13:
a4:26:a7:6e:35:bc:2a:48:e0:e4:52:98:67:48:ca:
80:99:ea:d6:b3:fa:e8:9e:e8:db:0b:ab:0a:b3:2b:
25:2b:df:b2:6e:6e:4f:e7:03:49:e7:b1:49:00:62:
0c:26:c1:1a:b1:e9:36:4e:a3:52:27:2b:c7:8e:5b:
ba:f2:c1:47:53:86:ad:71:59:76:57:db:f6:dd:83:
55:cc:7c:94:b8:d8:36:57:95:5a:4d:cf:7f:59:08:
cd:a0:49:76:5b:ce:a4:1b:ed:44:b9:7a:00:57:75:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DB:CE:F8:B0:C1:8D:FD:3D:4A:A2:D6:58:8E:97:1D:C9:BD:D3:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/999789-2631-4eb9-a5dc-c7d29b294170/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/999789-2631-4eb9-a5dc-c7d29b294170/1/NdvO-LDBjf09SqLWWI6XHcm905w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:32:21:d9:ac:fe:5d:13:4c:b0:63:b9:18:26:28:e0:eb:71:
84:94:09:21:c3:39:b4:55:72:d5:bd:81:76:30:74:9c:87:8a:
6d:69:00:87:e7:6f:f1:a3:14:4f:c1:a9:5d:58:9f:dd:35:70:
a3:8f:de:d9:9a:59:f0:5d:a5:d7:0c:6a:db:60:3a:8a:15:9d:
8f:6a:83:92:50:84:8d:a0:ee:36:3d:e1:42:72:a7:fb:7f:cf:
b5:45:49:5d:48:5e:1f:8a:da:f4:cd:25:26:ea:c6:3a:f8:ad:
32:e1:ad:21:8f:1d:e9:9a:da:02:7d:e4:24:66:c9:b8:fc:c6:
3e:ec:51:3b:2f:f1:a6:2e:2d:f9:3f:3d:46:d4:50:e4:99:ca:
e8:40:fe:b1:41:c5:52:6e:cf:62:3e:0c:06:b8:08:ab:21:b2:
02:74:2c:76:53:40:2e:e7:da:c1:00:c0:bc:24:2b:72:2a:36:
37:44:7a:50:e4:11:b6:ff:08:e7:81:6c:cd:03:46:db:ab:c2:
cb:f6:b3:43:76:2e:49:11:47:9b:f4:e9:eb:78:c3:f2:29:4b:
25:df:63:c1:91:b6:37:17:8a:30:8c:12:25:0d:7e:24:e8:3d:
89:18:b5:f8:e7:4d:10:d9:e2:88:dc:5e:01:68:3c:6c:d9:68:
b3:7b:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-fra.rpki-client.org