Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NtDQT18wpUB3MzoFEf_flcKK1go.cer
File: NtDQT18wpUB3MzoFEf_flcKK1go.cer (raw, json)
Hash identifier: 8LV5lfey1Il2fbL8bQ7c219W7X8dL+aeXLbnWaulJKk=
Subject key identifier: 36:D0:D0:4F:5F:30:A5:40:77:33:3A:05:11:FF:DF:95:C2:8A:D6:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD039F7A2045024DD76C77AB57C399CD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/02a953-31b2-4a22-ab61-9581f3c50d74/1/NtDQT18wpUB3MzoFEf_flcKK1go.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/02a953-31b2-4a22-ab61-9581f3c50d74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Feb 2024 09:51:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a01:5f20::/29
Validation: Failed, certificate revoked on Fri 23 Feb 2024 13:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:39:f7:a2:04:50:24:dd:76:c7:7a:b5:7c:39:9c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 09:51:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36d0d04f5f30a54077333a0511ffdf95c28ad60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:6b:99:86:e4:b9:4b:63:97:55:42:cd:29:
61:97:4e:ab:e4:ee:74:b5:85:f9:b0:5a:07:d5:81:
dd:e9:56:51:cc:24:0c:a1:6a:68:4a:ab:7b:1d:e8:
15:0a:c9:f8:ed:08:df:e6:8e:ad:d5:ac:e0:67:50:
77:75:c3:df:61:31:df:60:b3:11:05:78:83:ec:0b:
f9:be:0e:e1:ad:f8:37:33:22:3a:03:e9:0b:fc:5f:
48:d2:03:4a:af:dc:94:f7:84:42:45:04:a8:ef:a6:
6e:26:9c:f5:89:e2:cd:95:58:22:49:68:e2:95:80:
5f:b8:4c:13:63:10:a3:f5:2f:17:bc:44:a9:3b:c1:
3d:84:a2:93:40:5f:e3:64:b4:9c:4e:90:d3:90:ab:
1d:87:19:7b:37:9f:28:b2:dc:bb:21:ea:eb:ec:bf:
f4:9d:67:f8:21:6a:45:5e:52:92:67:b0:4f:33:e6:
a8:bb:4f:eb:b9:3a:9d:37:af:85:0b:f4:71:e4:be:
fb:7f:86:1c:64:c5:db:d6:1c:6d:50:6d:73:92:de:
db:b0:2d:eb:59:4b:37:26:78:09:34:62:1d:1f:3a:
34:12:e3:81:c3:d2:be:aa:36:47:50:4a:9b:2c:74:
2a:d8:c4:34:5d:19:54:ba:7c:bc:7e:08:e7:36:57:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D0:D0:4F:5F:30:A5:40:77:33:3A:05:11:FF:DF:95:C2:8A:D6:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/02a953-31b2-4a22-ab61-9581f3c50d74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/02a953-31b2-4a22-ab61-9581f3c50d74/1/NtDQT18wpUB3MzoFEf_flcKK1go.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5f20::/29
Signature Algorithm: sha256WithRSAEncryption
2c:fb:98:25:65:17:4e:17:a4:62:10:56:cc:86:ab:eb:ba:db:
ab:1a:1f:2e:8f:5b:b0:4e:5d:be:38:4f:e4:a9:be:6b:d3:97:
44:cc:c2:93:5b:b8:f8:ce:65:6e:76:96:83:70:d2:a3:f9:f8:
91:57:1e:12:85:24:a7:ce:93:c0:65:ab:61:e2:b9:84:88:bb:
44:fc:0e:10:d9:ca:4b:0c:41:a5:b5:20:38:f5:0e:48:e5:59:
c8:cd:80:79:83:a1:7f:de:b0:7d:d1:ee:41:17:56:b8:24:1d:
27:b6:8a:ea:93:9b:6f:44:ad:54:97:a4:90:63:a2:99:db:1d:
c2:62:db:0e:88:e4:47:9b:fd:4a:9c:fe:ba:f3:e8:65:cc:23:
87:13:97:dd:1a:bb:9f:f5:9a:f0:70:f4:04:da:dd:24:fb:20:
f5:cb:59:47:0b:bf:36:b2:b5:dd:c5:7a:92:f4:e4:73:f3:bf:
67:27:71:f8:7f:13:1b:65:6d:49:f6:f9:66:dc:7e:05:56:c5:
da:d0:66:a8:fe:df:1d:9f:70:ca:dd:3e:b2:ad:09:fe:d8:16:
17:a0:58:ad:e8:f5:db:54:45:ef:e8:08:04:41:3c:8c:c6:2d:
75:5d:a1:b6:92:37:3e:8e:e0:ba:c4:a3:f0:cd:66:7a:43:66:
b4:cb:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-fra.rpki-client.org