Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_cGpCHZrOR43G24_XmoRQe_nikg.cer
File: _cGpCHZrOR43G24_XmoRQe_nikg.cer (raw, json)
Hash identifier: GmqguyJA8AKas13vUBxQaMsHqE5tfTwhMejnJApVSDs=
Subject key identifier: FD:C1:A9:08:76:6B:39:1E:37:1B:6E:3F:5E:6A:11:41:EF:E7:8A:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01889B26B7AA39925E9BEB58081AE3678C2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/FDC1A908766B391E371B6E3F5E6A1141EFE78A48.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 08 Jun 2023 13:16:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.64.143.0/24
IP: 2a07:1c40::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 11:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:26:b7:aa:39:92:5e:9b:eb:58:08:1a:e3:67:8c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 8 13:16:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdc1a908766b391e371b6e3f5e6a1141efe78a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:ed:3b:e3:c0:0f:68:f2:0f:bf:c9:ab:0f:
77:4e:05:a4:fc:30:6d:6b:c4:d6:d1:2e:6f:3a:1f:
aa:00:1b:67:d0:66:d7:25:fb:80:b5:41:ef:c0:3c:
1d:a2:a0:dc:8d:bd:e2:46:c6:d2:ad:bc:94:47:ea:
1d:54:51:75:55:a1:53:b9:c2:11:3d:e4:c1:a1:a4:
ba:1f:eb:c8:c3:a2:d1:87:e3:fb:50:8f:3b:50:56:
61:b0:bd:2d:b7:6e:5e:b3:0d:d3:95:b7:e4:c6:96:
2a:90:c5:e9:fd:0a:cd:c9:6a:13:04:eb:10:e6:cc:
01:e1:fc:5e:b1:dd:ca:1c:05:78:b8:a7:35:ce:5b:
2e:ff:1d:c0:92:87:a0:76:49:21:7c:ac:31:12:5e:
d2:80:33:5f:89:7b:3a:3f:84:6d:2a:89:72:84:de:
86:2c:fe:5f:a0:d1:56:3d:b1:a3:5c:7d:46:df:ae:
d9:5c:f6:d6:81:00:64:cb:6d:86:27:ef:65:af:4c:
bd:61:b8:0e:f3:1d:19:34:db:36:b9:ad:70:41:3f:
f2:66:12:df:9c:55:18:e1:43:5f:28:1e:c1:3e:e9:
12:12:d1:6b:26:7a:02:25:ce:93:b6:27:02:fa:44:
77:5f:a6:7c:7d:ed:85:76:62:45:99:ec:c2:4a:81:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C1:A9:08:76:6B:39:1E:37:1B:6E:3F:5E:6A:11:41:EF:E7:8A:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/FDC1A908766B391E371B6E3F5E6A1141EFE78A48.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.143.0/24
IPv6:
2a07:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
84:fe:0b:77:6b:64:d3:5e:b6:58:7a:7c:b9:5d:80:ee:10:44:
c0:0d:eb:07:75:c5:8b:e4:68:6a:fa:9e:31:12:c0:3c:d0:f4:
a1:9a:35:42:f8:84:c9:ed:e5:93:22:81:34:62:4d:2a:60:4b:
09:c0:1a:d5:1b:b5:cf:13:dd:45:8d:28:d0:2f:79:1d:cd:ea:
39:c4:a3:1b:d3:e4:6b:54:da:a5:83:70:a7:b4:bf:7c:cc:2a:
fb:af:f9:1f:98:7e:13:f7:26:27:50:b0:c9:aa:a3:62:a7:7f:
a3:6c:c0:34:bf:19:d9:2a:c3:37:75:be:30:c9:fd:78:47:96:
c6:a7:1a:05:b0:a2:3b:73:db:cf:43:05:f7:85:9f:5d:12:3a:
33:18:ef:3a:43:72:0a:07:33:5b:aa:ce:5d:dc:3f:b0:ed:ac:
8a:a2:a5:22:04:5a:e0:f9:13:63:ae:65:3b:87:ac:8b:5b:36:
e6:24:9c:a6:87:db:c9:4c:17:22:1e:f7:2a:9b:f4:e5:6a:33:
f7:b2:96:28:fb:24:50:a9:15:19:1d:db:02:cb:fd:59:0e:c1:
0e:4f:22:18:ff:3f:a6:d0:f8:e5:40:6b:e4:70:63:3b:a8:44:
42:e4:db:f6:9b:15:95:89:8d:fe:74:c0:c7:d7:09:17:81:ae:
17:23:6f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:35 2024 by rpki-client on console-ams.rpki-client.org