Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NvnoXo-ZVp9TI2TvCLBtcLVuzYQ.cer
File: NvnoXo-ZVp9TI2TvCLBtcLVuzYQ.cer (raw, json)
Hash identifier: I+ERpd+O9VUfncekxwNoDvZFvYo92iKTTTLk934ju8c=
Subject key identifier: 36:F9:E8:5E:8F:99:56:9F:53:23:64:EF:08:B0:6D:70:B5:6E:CD:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD13D635E6D0DA52C1D2B590D68C993
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/c501d3-e2ee-4b6b-9038-34d2bae95aad/1/NvnoXo-ZVp9TI2TvCLBtcLVuzYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/c501d3-e2ee-4b6b-9038-34d2bae95aad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.168.0/24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:3d:63:5e:6d:0d:a5:2c:1d:2b:59:0d:68:c9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36f9e85e8f99569f532364ef08b06d70b56ecd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:e6:8b:fb:a6:db:ce:6e:46:57:e4:fb:33:
11:d8:80:de:77:c3:18:42:b7:8e:29:a6:86:ea:72:
cf:21:18:0f:ed:cc:fe:43:3a:5e:3b:0d:80:c0:53:
b6:d2:89:b0:66:a4:ef:59:45:e7:de:05:af:a8:ab:
b6:0b:60:4a:47:8d:e2:9b:ba:a1:af:5a:dc:ce:3a:
73:cc:7e:08:81:1d:5a:f9:e4:c3:2e:bf:5b:85:b4:
e8:3d:5a:40:fd:c1:47:78:3a:ae:50:24:4c:e9:20:
f8:47:78:5c:ad:ef:38:4c:63:16:dc:e4:a5:f0:c9:
20:ed:18:3a:cf:be:6b:c8:bc:f6:9a:93:a6:85:b8:
98:6d:ab:bf:52:6a:80:6b:fe:79:67:a2:d9:d1:51:
21:fb:bb:8b:aa:bb:04:f8:b8:46:d4:de:ef:17:82:
99:82:71:80:8c:c7:5b:7e:a5:d7:8b:18:3b:f9:19:
ae:df:47:d0:e3:da:fa:97:90:ba:61:09:cc:5e:43:
fe:d6:1b:1b:69:78:57:f5:e3:1b:ab:03:68:e5:27:
1c:b6:c0:a4:fd:f8:91:79:e1:44:c0:ea:da:a1:bf:
67:73:d9:a4:72:c4:6f:89:da:f7:c7:2a:85:23:88:
fb:bb:04:85:70:21:3b:3c:0c:2c:db:10:da:cb:f8:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:E8:5E:8F:99:56:9F:53:23:64:EF:08:B0:6D:70:B5:6E:CD:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c501d3-e2ee-4b6b-9038-34d2bae95aad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c501d3-e2ee-4b6b-9038-34d2bae95aad/1/NvnoXo-ZVp9TI2TvCLBtcLVuzYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8d:4d:30:08:b3:c0:fa:6f:2f:38:e2:8e:8c:d0:d2:ac:48:
27:7e:7a:f0:ac:dd:bf:9c:5b:c4:1a:f0:cb:13:da:0a:01:8a:
1e:73:04:a6:dd:e3:99:38:33:68:3d:3e:e8:7f:ad:91:e6:02:
eb:43:ae:59:f2:a3:62:72:2e:51:a7:7b:8d:91:6e:79:20:33:
52:48:41:a0:72:a5:4a:16:8c:68:04:ff:ee:61:46:5f:db:48:
af:c8:cb:3c:ee:08:36:f9:b5:ff:30:11:5a:79:60:f8:85:c1:
f6:4b:ff:eb:8c:2d:4b:1f:2d:c4:3f:25:ba:0e:e8:70:a2:99:
c7:ae:63:58:9b:cf:e8:59:24:61:d4:43:5f:7f:23:70:05:94:
3e:22:37:26:b5:03:8c:f8:e0:77:53:a8:a5:ff:44:52:63:6e:
17:f8:2c:88:b6:7c:32:30:9c:14:d8:23:30:a7:70:33:5c:3f:
f0:1e:52:8c:5e:ce:3e:45:fe:f9:1e:d4:89:25:35:6c:c6:3f:
60:d1:e5:dc:38:0b:95:cd:73:3a:dc:03:54:15:1c:3a:fe:be:
ad:f9:b4:ca:a7:47:94:7e:a8:3e:e9:75:97:69:3b:0f:c6:2f:
90:f1:7b:e2:e6:13:ca:22:0c:f2:b3:f3:d5:e7:f3:05:55:c3:
7a:35:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:27 2024 by rpki-client on console-ams.rpki-client.org