Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NgIU2wk9XieZWrRjMS_kB26wz1A.cer
File: NgIU2wk9XieZWrRjMS_kB26wz1A.cer (raw, json)
Hash identifier: LKR2X2M3G5bBKk1a82ClQgWjyH3duiytbZRxfuDmbQs=
Subject key identifier: 36:02:14:DB:09:3D:5E:27:99:5A:B4:63:31:2F:E4:07:6E:B0:CF:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC0CFE8D3DDE1633630D7D36B9D14A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/NgIU2wk9XieZWrRjMS_kB26wz1A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13153
AS: 20506
IP: 193.150.172.0/23
IP: 194.176.113.0/24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 17:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0c:fe:8d:3d:de:16:33:63:0d:7d:36:b9:d1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=360214db093d5e27995ab463312fe4076eb0cf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:92:33:26:c3:8f:6a:fe:8b:b2:9a:eb:28:
d8:9e:85:18:9a:3b:dc:22:45:d9:05:41:7b:f9:da:
60:ea:60:55:9a:ac:4b:d6:39:ed:fe:fe:17:bc:be:
bc:09:69:5d:a5:8a:c4:38:9f:a3:52:11:fc:8b:1e:
e5:b4:b2:ae:c3:f5:02:50:93:a0:52:81:00:c1:73:
2b:9a:b8:b9:3e:65:5b:74:b5:fb:78:55:dd:5d:48:
a7:0c:6b:43:59:47:a5:d1:46:8e:3e:79:29:ea:6d:
c9:e4:50:3b:bf:eb:73:e1:0f:a5:a0:ee:cc:0b:32:
4d:7f:b4:fc:64:be:f6:94:db:8d:45:29:d3:3a:d8:
1e:47:07:73:b2:9c:e3:2e:24:68:24:f2:c0:aa:cb:
c6:54:91:c1:4b:82:36:e0:8b:9d:92:c6:b5:d2:3d:
cb:5a:95:5b:49:c7:14:95:48:d5:b5:6c:19:81:71:
3b:2a:e4:02:11:bc:11:9b:10:71:92:6f:d1:70:9b:
f3:c9:40:28:0a:a4:84:90:21:d0:82:7a:12:f6:65:
56:aa:6c:8d:12:ef:0f:ac:9d:24:73:36:8e:d4:a1:
ef:71:ed:92:cf:5b:2e:32:d6:7f:da:66:88:2b:98:
a6:b5:d9:83:21:fe:de:c4:cb:82:e1:fe:32:65:1d:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:02:14:DB:09:3D:5E:27:99:5A:B4:63:31:2F:E4:07:6E:B0:CF:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/NgIU2wk9XieZWrRjMS_kB26wz1A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.172.0/23
194.176.113.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13153
20506
Signature Algorithm: sha256WithRSAEncryption
32:a3:d4:e8:62:69:cc:4f:98:37:28:d4:87:30:60:9d:8e:c0:
00:6a:3a:0a:b2:7b:df:1b:3f:4c:13:0f:de:90:21:66:14:40:
23:77:ed:0f:f5:30:dc:5d:b8:01:56:17:6f:a3:ae:4b:60:80:
b0:37:87:39:44:a2:3f:e9:14:88:54:23:a9:80:c3:b0:e7:8c:
53:02:8c:da:37:e0:c4:3e:5b:ae:f4:fd:2b:b6:4a:ce:51:be:
de:e6:37:01:3c:ee:77:e7:3c:e2:69:5d:d0:26:04:eb:58:66:
e2:1d:af:60:db:f7:6a:8f:ea:e8:0f:75:20:97:2a:81:64:3d:
af:4b:9e:76:0c:5f:70:d7:20:06:15:64:d8:97:3d:08:76:0a:
26:ba:05:43:69:78:83:2b:41:a2:8c:64:61:90:2b:b3:7f:fb:
b3:78:40:91:11:89:64:6b:23:ba:28:41:80:86:ee:3f:c0:24:
22:97:93:d7:1d:93:a1:52:0a:72:92:9f:31:91:20:cc:91:39:
50:bd:25:93:64:79:aa:13:e3:98:d2:72:94:ac:7d:3c:5f:00:
1c:c6:db:d4:65:d9:4d:99:75:52:32:98:4b:97:fa:c8:17:d0:
c2:11:19:b4:f3:07:29:c0:eb:93:ac:5d:53:8e:a4:19:82:c8:
7a:70:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-fra.rpki-client.org