Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/npYqRCF7jtRdDlZxCDE_BLvwUOU.cer
File: npYqRCF7jtRdDlZxCDE_BLvwUOU.cer (raw, json)
Hash identifier: fVvdnwN2kc1OVsgEIhKv2KN5nfKMGW+jkj/iHUioKtQ=
Subject key identifier: 9E:96:2A:44:21:7B:8E:D4:5D:0E:56:71:08:31:3F:04:BB:F0:50:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B63650AC6E77273B8036BF38CCDCC5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/0d2b6c-abd7-43bb-97b7-4596d65b54f8/1/npYqRCF7jtRdDlZxCDE_BLvwUOU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/0d2b6c-abd7-43bb-97b7-4596d65b54f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 28863
AS: 199507
IP: 109.234.168.0/21
IP: 2a03:a4c0::/32
Validation: Failed, certificate revoked on Mon 23 Oct 2023 08:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:65:0a:c6:e7:72:73:b8:03:6b:f3:8c:cd:cc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e962a44217b8ed45d0e567108313f04bbf050e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:53:27:94:4b:39:37:4b:bb:c8:00:a9:d1:6e:
1e:91:6f:5e:d4:10:31:15:3b:10:c6:52:66:d4:2e:
c3:22:61:9a:d3:e5:0e:9e:70:07:a4:e1:e2:34:f0:
22:8a:df:d2:4c:1d:15:15:87:f6:73:3b:8b:d9:f4:
05:31:41:07:7f:90:b9:18:37:5d:b4:4f:de:48:51:
0f:fb:cb:63:76:45:a4:db:8b:27:20:32:1f:09:94:
ab:c7:8f:c8:78:dd:cc:5d:84:05:a2:ac:aa:82:c6:
3e:d0:ab:30:75:04:d7:cb:c4:be:2f:12:be:4a:92:
bb:35:93:d0:4b:50:c5:9b:90:ae:ca:b2:5a:f5:20:
05:99:8e:5e:3c:4f:1c:52:19:e2:90:f7:90:6b:be:
05:99:1b:cf:bb:eb:c0:e8:a8:5e:40:33:2d:ef:03:
7c:e1:ca:64:ac:4a:5e:61:47:21:6f:ca:96:ab:b3:
62:8b:43:a4:11:72:ab:0f:af:33:78:c6:05:a8:f4:
8c:01:61:f4:6a:61:c9:0f:41:af:f2:86:bf:73:1f:
ba:2d:d9:6c:33:ac:ad:fc:2b:f8:93:03:d9:b5:55:
7b:10:97:29:e1:74:80:2d:67:b1:b7:aa:58:d5:8d:
03:31:20:bf:44:9d:e4:19:5a:b5:a6:35:86:8f:83:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:2A:44:21:7B:8E:D4:5D:0E:56:71:08:31:3F:04:BB:F0:50:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0d2b6c-abd7-43bb-97b7-4596d65b54f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0d2b6c-abd7-43bb-97b7-4596d65b54f8/1/npYqRCF7jtRdDlZxCDE_BLvwUOU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.168.0/21
IPv6:
2a03:a4c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28863
199507
Signature Algorithm: sha256WithRSAEncryption
79:58:08:51:0c:cb:17:28:a3:e8:52:33:a1:97:a1:08:27:7a:
71:4a:e5:d8:6a:3c:23:43:93:8a:51:af:0c:67:76:9a:04:6e:
6d:44:19:8e:c6:2d:54:b9:78:b1:d9:d0:00:04:0f:61:e0:c3:
72:73:ec:6e:ca:5a:13:67:17:80:49:5c:cb:40:ee:83:7b:53:
30:5d:5c:7a:aa:4b:c2:7c:36:6f:79:3b:09:64:fc:b7:32:bf:
f9:b0:72:cc:02:ee:04:31:33:7b:35:35:90:51:90:2b:32:8e:
d4:69:ab:6d:a4:08:81:b5:8d:a1:b7:53:79:54:6e:0e:5c:1f:
14:b7:11:5e:62:70:46:32:1b:76:96:ca:96:64:8a:95:0e:05:
7c:34:e7:78:94:db:9e:a8:1d:6e:f3:f7:7f:5e:12:58:d5:93:
71:af:26:55:93:87:f4:b1:f8:d1:b7:f8:a8:e8:e7:6c:09:2b:
2a:ea:14:18:b4:d1:57:b0:01:f1:6f:7c:79:97:42:71:cb:71:
f6:c9:80:0d:58:f8:29:52:ce:d4:fa:ed:4c:1e:0a:44:e0:09:
c9:a7:db:b1:55:4c:16:cc:23:08:48:78:da:42:f8:ad:1f:fa:
72:f9:ec:90:20:39:bb:df:c1:d7:a0:19:35:65:a5:06:01:4c:
37:13:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:36 2024 by rpki-client on console-ams.rpki-client.org