Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nCnONOCZPV64GEbmbvX0Q880uFg.cer
File: nCnONOCZPV64GEbmbvX0Q880uFg.cer (raw, json)
Hash identifier: hw/1HhlgpS1Vy+WJP94lC2hwCw1n/yHZcnjqgGzccVM=
Subject key identifier: 9C:29:CE:34:E0:99:3D:5E:B8:18:46:E6:6E:F5:F4:43:CF:34:B8:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAFED4EFF3E005D40CB738DCBDF7E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/3b9365-28ba-49b1-a18f-3860c188448e/1/nCnONOCZPV64GEbmbvX0Q880uFg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/3b9365-28ba-49b1-a18f-3860c188448e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.113.116.0/24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 11:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:fe:d4:ef:f3:e0:05:d4:0c:b7:38:dc:bd:f7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c29ce34e0993d5eb81846e66ef5f443cf34b858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:95:fa:75:29:78:af:15:eb:45:74:16:33:
2c:fc:2a:b6:6a:5b:34:6d:50:78:64:cc:43:68:7e:
95:6a:c6:54:6f:b1:77:a9:bd:6c:8e:30:29:93:49:
b0:46:04:60:78:17:89:9a:9c:64:16:11:54:79:e9:
26:6f:c0:a7:0e:bd:1b:d3:c0:bb:7d:00:62:26:e3:
1a:71:ec:ac:97:49:04:3d:f0:d9:04:e7:48:00:83:
94:1b:3d:e5:39:63:81:f4:a0:ae:c9:11:dc:d7:51:
18:ba:aa:98:e8:07:ad:3f:9f:90:76:06:18:0a:0d:
30:8b:d2:ed:2f:8a:1c:3b:91:64:32:82:b7:81:2b:
33:79:19:b4:db:12:fe:42:60:d1:a4:86:ad:a6:3d:
34:c8:94:14:e2:6d:5a:f3:4f:3a:47:0f:79:be:4d:
59:56:ce:82:02:45:ca:48:bc:95:c3:34:63:90:bd:
93:93:b8:c8:87:87:fb:40:d5:17:46:6d:e4:3b:a6:
95:71:62:29:a7:05:bc:c8:89:ac:ef:f1:6f:2e:ed:
75:e5:2c:eb:ea:3a:ed:d8:c4:fa:08:89:a5:cf:04:
8f:b4:67:d6:05:e2:0b:63:0b:1b:83:4c:29:ad:5e:
89:69:32:ad:2c:32:b8:d9:0b:02:63:22:58:89:58:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:CE:34:E0:99:3D:5E:B8:18:46:E6:6E:F5:F4:43:CF:34:B8:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3b9365-28ba-49b1-a18f-3860c188448e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3b9365-28ba-49b1-a18f-3860c188448e/1/nCnONOCZPV64GEbmbvX0Q880uFg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.116.0/24
Signature Algorithm: sha256WithRSAEncryption
25:02:58:ae:bb:fe:bd:86:05:1a:be:1e:11:cd:fa:44:d8:04:
e7:ed:28:99:44:7e:c0:fb:75:03:b2:75:fb:04:b6:3d:b4:54:
70:ef:66:cc:49:dd:63:5a:15:9d:74:42:88:ff:53:2f:95:4c:
05:e3:44:c5:d4:35:1b:54:f2:c2:5d:28:10:48:4e:5a:a2:c4:
11:cd:36:cf:0a:36:fa:26:3e:22:cd:a3:80:49:2f:10:b4:a5:
b7:93:f6:4c:e5:f1:37:5a:f3:ca:cc:03:5b:7e:ac:be:d7:01:
45:84:8f:2c:6e:86:38:43:9d:60:d7:6e:f9:04:ac:43:b6:0f:
95:0d:46:62:45:ac:95:25:65:6b:9e:9e:e7:eb:ae:9a:3b:35:
a0:c1:32:75:61:a7:19:03:79:db:9a:37:09:7f:65:cb:46:3e:
23:b7:9c:75:8a:72:d1:5f:6c:dc:7c:d0:6a:bb:8e:fe:f1:1a:
9d:7f:0c:7f:cb:fb:9f:b2:ca:c8:29:a5:51:3d:7e:91:14:8d:
3f:1f:02:3a:dd:e6:e3:d1:49:71:dc:29:ff:7b:33:f7:21:8c:
49:38:ce:14:a7:3f:4d:59:f4:0d:6d:ee:14:59:bd:5b:f2:9b:
eb:02:52:17:c1:ee:25:83:c7:53:93:d1:8b:08:b1:f3:d3:49:
7d:81:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:30 2024 by rpki-client on console-ams.rpki-client.org