Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nLnOPoXrp3U7NuDSRRDMroqis3c.cer
File: nLnOPoXrp3U7NuDSRRDMroqis3c.cer (raw, json)
Hash identifier: QDM6Bn0zH8NqFh1RDlQ4MaPdESqB1Dkn27lVv/KPs+Q=
Subject key identifier: 9C:B9:CE:3E:85:EB:A7:75:3B:36:E0:D2:45:10:CC:AE:8A:A2:B3:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF526FFA60DA7F50AA4425BDD5BBDE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/nLnOPoXrp3U7NuDSRRDMroqis3c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60428
IP: 185.130.89.0/24
IP: 2a0e:a5c0::/29
Validation: Failed, certificate revoked on Wed 12 Jul 2023 07:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:26:ff:a6:0d:a7:f5:0a:a4:42:5b:dd:5b:bd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cb9ce3e85eba7753b36e0d24510ccae8aa2b377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:f5:38:94:70:47:ff:c7:37:9f:40:19:84:
90:87:e7:a1:f2:bc:04:85:5a:2d:c8:6c:2c:66:b4:
84:be:6e:b5:f6:a3:05:db:85:f4:06:0a:c5:65:3e:
5b:e9:e5:9e:12:f4:d4:3d:79:ec:ed:94:7a:1b:01:
22:c7:8c:12:8f:cd:c9:5a:d7:fd:e5:dd:17:02:e7:
2a:61:d8:01:07:6a:0c:1e:7d:cf:bb:a2:72:4c:de:
11:89:55:f1:90:c8:e8:bd:07:8b:9f:e1:7f:c0:07:
2e:77:d9:70:4f:3c:4d:68:35:12:e0:6f:20:3d:b0:
e2:d0:db:ef:12:01:83:a2:42:63:99:2b:a4:87:a9:
ad:ed:99:68:da:88:87:7d:93:f7:ef:d4:3b:17:ab:
9a:d9:4b:78:db:5a:47:c6:5c:51:6e:24:f8:26:a6:
25:9b:d1:f6:ba:1b:e2:d1:d5:23:a0:37:05:56:71:
c9:db:0f:51:60:58:75:90:04:5a:38:3c:e6:56:08:
f4:d5:16:04:85:fd:c3:7b:7d:d9:ff:36:c6:af:fe:
fb:c1:be:51:85:01:2a:eb:f5:11:de:3b:4d:c6:e6:
c1:9a:a6:b6:a4:e7:f4:06:1e:a7:16:8f:5b:18:05:
f7:46:b9:b0:fe:d4:82:42:63:06:f9:3d:df:32:c6:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B9:CE:3E:85:EB:A7:75:3B:36:E0:D2:45:10:CC:AE:8A:A2:B3:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/nLnOPoXrp3U7NuDSRRDMroqis3c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.89.0/24
IPv6:
2a0e:a5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60428
Signature Algorithm: sha256WithRSAEncryption
3f:78:dd:7a:a7:b7:f0:b8:e5:29:08:58:f6:c1:70:40:9c:66:
41:b2:a4:f5:29:7a:e9:32:7c:5c:ba:58:f6:bf:b7:6b:a8:82:
f2:80:25:b2:da:87:48:0e:a4:c4:05:6a:d9:3b:a0:d6:ec:de:
de:96:f3:c6:d5:cc:15:6f:65:77:9b:88:7d:1d:da:27:1d:65:
a0:f0:0c:9d:1c:10:5d:f0:b9:3e:de:86:7b:37:a7:89:8c:f9:
af:97:d0:a5:ae:99:3a:b0:ff:bd:37:55:7e:06:35:9a:24:5d:
d8:6d:9d:d9:61:c1:2e:6c:b9:a7:c9:b2:b1:a4:da:36:7c:87:
85:5c:34:82:55:14:45:c3:eb:ca:c0:ae:83:42:b5:9e:51:fe:
a0:9d:c6:9f:76:b8:ac:e8:7c:1d:3c:9e:d9:f0:17:b6:23:e3:
2b:64:80:6f:71:ac:42:59:53:2a:b3:0d:26:d5:3b:03:e9:7e:
54:67:a7:5f:1d:62:2a:cf:5f:c0:29:ac:c4:fb:cf:f6:78:19:
c8:bf:4e:57:10:d9:e2:3f:a0:c1:e6:16:05:75:57:16:0d:b7:
a2:7a:7c:9e:e5:82:d9:6a:a8:64:7e:3c:41:e6:4b:ef:d6:b7:
7e:df:72:44:53:8b:f8:d6:ea:44:16:fb:53:c5:9c:ac:28:df:
81:5b:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:32 2024 by rpki-client on console-ams.rpki-client.org