Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
File: ndmJI091rgTeMGU64UE5-dxgmsE.cer (raw, json)
Hash identifier: pnDTZoarHfUYDmGpUTwKJ3J60Ksb18Dq3V91Wm5IyYo=
Subject key identifier: 9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFCED3F21E890C43942B71AE95F81E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 50020
IP: 46.16.192.0/21
IP: 185.201.36.0/22
IP: 193.104.79.0/24
IP: 2a02:4ba0::/32
Validation: Failed, certificate revoked on Tue 03 Jan 2023 14:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:ce:d3:f2:1e:89:0c:43:94:2b:71:ae:95:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:6e:81:23:be:d4:10:52:80:61:6e:07:c4:
81:40:9a:39:9e:86:19:9e:26:d3:b9:c6:a3:35:d6:
84:df:8f:75:f6:ce:8c:1b:26:02:69:34:ba:0d:3f:
5d:0d:1e:37:fc:b6:48:40:40:4b:d3:1f:03:64:1c:
84:d8:17:17:30:98:ce:c0:fa:73:80:d4:d0:92:9a:
78:a1:e0:a4:9a:a6:a8:21:9c:89:b2:d7:a7:0f:61:
14:57:13:66:17:36:f0:21:a8:69:68:e2:42:1b:2b:
0e:39:f7:3a:cb:ed:f4:6e:b4:58:ec:91:3b:00:3f:
8d:51:18:bf:3c:1a:aa:6d:4b:89:35:d5:cf:7e:ba:
6b:de:c0:73:51:ea:d0:31:38:69:bd:b7:c4:f8:5d:
9e:4d:c4:91:48:1c:61:90:b9:50:b1:95:5b:3e:56:
00:d6:18:09:f7:19:de:0d:f1:9e:f9:43:18:45:4f:
8f:98:60:d2:fd:4a:ac:0d:60:44:2f:5d:7f:4a:00:
60:76:4e:67:e8:52:64:4f:22:ee:71:85:12:9d:e0:
fb:42:f7:42:f6:e6:dd:9b:5a:f7:67:b7:1e:7a:e3:
7d:74:05:10:0c:c3:44:73:ff:be:72:0c:7d:cb:42:
fb:2f:1a:00:2b:9e:04:e2:7b:8d:9b:21:89:23:60:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.192.0/21
185.201.36.0/22
193.104.79.0/24
IPv6:
2a02:4ba0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50020
Signature Algorithm: sha256WithRSAEncryption
9e:36:ec:1c:6b:87:02:60:b5:e9:76:12:a0:0f:b6:91:70:df:
7b:21:98:3f:a9:84:e2:a9:c3:ef:bb:2b:ab:1f:d1:fc:b9:fa:
44:ed:08:62:d1:4d:c1:38:16:64:c9:63:0b:53:30:6c:62:8e:
7c:1a:65:3a:6d:c7:88:53:18:78:33:6d:76:2d:59:15:17:4f:
d1:22:d3:87:ab:b4:c9:0b:51:57:96:7b:5f:fe:08:25:a1:bb:
7b:f7:bf:6d:91:06:6e:6f:b8:6d:87:58:75:ed:8c:2f:12:e8:
25:95:b1:f3:96:6c:02:62:ee:e6:3d:ae:fc:c3:aa:c6:78:4e:
5d:25:ea:f8:16:28:86:d8:a9:37:5e:e5:1e:96:78:61:18:9a:
8d:8b:2e:ad:fb:9b:97:52:3a:8e:96:e9:bb:cc:72:ed:af:c4:
33:90:93:63:37:13:b2:67:9b:88:04:3c:2c:08:c5:5e:05:d0:
4c:47:42:99:d2:d5:ec:a3:57:61:0c:67:b7:ed:0c:eb:53:0a:
11:08:5b:6c:f8:25:41:b0:13:dd:d9:50:86:6c:65:54:ca:4e:
a7:ab:8d:14:5f:ab:fa:e3:f3:9f:e6:dc:02:39:1d:be:d8:bb:
78:1e:b5:e7:9c:5d:06:d9:3c:20:8e:21:ae:fe:42:93:e0:cf:
d9:ee:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:34 2024 by rpki-client on console-ams.rpki-client.org