Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NpzFuFUHYm57TSm5O79QZE5zopM.cer
File: NpzFuFUHYm57TSm5O79QZE5zopM.cer (raw, json)
Hash identifier: RqQ+WoIEx5ah/+f0MPGnGsp3hB5PSq/DnnhCTYXFouA=
Subject key identifier: 36:9C:C5:B8:55:07:62:6E:7B:4D:29:B9:3B:BF:50:64:4E:73:A2:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC41E2A47B535B52E5CCBEA2F90F600C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/9/369CC5B85507626E7B4D29B93BBF50644E73A293.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/9
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:22:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197882
IP: 31.25.136.0/21
IP: 130.255.92.0/22
IP: 159.255.160.0/21
IP: 185.14.248.0/22
IP: 185.101.236.0/22
IP: 185.184.196.0/22
IP: 2a03:bcc0::/32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 13:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:1e:2a:47:b5:35:b5:2e:5c:cb:ea:2f:90:f6:00:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:22:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=369cc5b85507626e7b4d29b93bbf50644e73a293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:73:81:e8:42:e8:b7:69:be:1a:c9:19:a7:
ff:a2:91:de:35:8b:93:9d:b0:68:c0:81:62:a6:f7:
f7:76:a2:7f:dc:55:dd:91:13:76:7a:3e:a4:3c:3a:
89:02:af:f3:15:78:8c:ea:12:c1:1e:7d:de:ff:f0:
96:64:51:ff:73:17:a6:0f:5d:6c:20:92:00:a9:26:
15:d3:03:22:38:c5:45:ec:54:bd:83:61:6a:09:02:
09:fc:81:65:06:b4:24:cc:9e:b8:74:2d:75:ef:5b:
72:18:12:d4:83:e8:1b:3a:e6:25:31:e8:5e:41:7f:
a9:dc:b5:ed:83:5f:d7:34:0e:f9:2a:6d:fd:9b:30:
54:ae:e6:0c:12:d7:75:43:85:56:b1:df:d5:8e:0f:
ca:43:b2:be:89:fb:31:3f:65:7f:b3:99:1e:34:32:
c0:fa:01:1a:db:a1:b7:ba:3a:08:7b:e9:7e:a2:f6:
ec:28:0e:ec:18:84:a2:6d:11:0f:29:91:59:3e:b9:
1e:5c:bc:a7:5e:29:58:ec:79:19:8b:ce:f4:17:0a:
56:34:7d:9b:39:bf:bb:e9:73:99:b5:0e:93:28:d8:
4b:17:f1:35:55:4b:74:4c:ed:0b:bf:87:2d:c1:23:
88:0c:cb:37:d7:77:b5:eb:83:e4:52:45:e3:e2:0f:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9C:C5:B8:55:07:62:6E:7B:4D:29:B9:3B:BF:50:64:4E:73:A2:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/9
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/9/369CC5B85507626E7B4D29B93BBF50644E73A293.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.136.0/21
130.255.92.0/22
159.255.160.0/21
185.14.248.0/22
185.101.236.0/22
185.184.196.0/22
IPv6:
2a03:bcc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197882
Signature Algorithm: sha256WithRSAEncryption
60:a6:9f:6a:71:ec:24:b5:41:35:c4:a6:02:2e:03:ff:cd:76:
db:04:1c:b6:6d:41:72:e6:31:cb:a8:57:fa:ab:a2:1f:84:9f:
38:24:30:d8:10:1a:ce:2f:5f:99:73:49:07:60:10:27:04:2b:
84:9c:64:35:7a:d3:2f:56:b8:b6:ad:66:e0:7b:ca:74:76:30:
dc:07:64:40:eb:82:6e:dd:11:06:7b:7b:4c:f6:a4:62:67:c3:
62:39:11:c1:3f:66:b0:bc:e2:2b:73:c8:77:ab:40:09:f1:77:
99:e7:68:d3:e4:5d:d3:d6:ec:f6:90:4c:73:cc:6c:99:f1:0a:
5e:78:9d:17:b1:86:9b:22:f6:2f:60:81:a7:05:c1:58:8e:d7:
2a:4d:fd:d4:1c:d9:cf:0c:27:fb:9f:32:cb:0c:ba:0e:16:b1:
47:aa:08:90:34:f8:bc:b7:78:58:47:88:85:43:9b:e7:f4:dd:
c9:16:9a:41:05:c4:c0:49:37:22:8b:22:e7:cf:d8:07:f3:07:
bc:3b:e3:42:b7:b3:92:c4:41:1e:89:d9:21:23:6a:f7:d7:eb:
6d:c6:bf:95:62:c7:be:0c:45:21:aa:5b:84:07:3e:38:38:65:
c5:a8:c0:94:ff:b6:c3:5e:be:79:78:56:f7:fe:9b:4b:af:67:
04:54:50:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-fra.rpki-client.org