Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nr3_4KBkGxCWM3pj-Wz9T9OLihk.cer
File: nr3_4KBkGxCWM3pj-Wz9T9OLihk.cer (raw, json)
Hash identifier: +2VmPHcydO+Y87n4ncRTFwkqTFpzd79G1XqJIk4rG1k=
Subject key identifier: 9E:BD:FF:E0:A0:64:1B:10:96:33:7A:63:F9:6C:FD:4F:D3:8B:8A:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B632B02C0CBC147E3B5108B8B7E23FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/nr3_4KBkGxCWM3pj-Wz9T9OLihk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 207412
IP: 212.102.111.0/24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:2b:02:c0:cb:c1:47:e3:b5:10:8b:8b:7e:23:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ebdffe0a0641b1096337a63f96cfd4fd38b8a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:da:31:d2:f7:d0:92:4a:48:ed:d4:19:64:
fd:23:4e:68:35:20:fb:12:95:4b:94:a6:17:37:8c:
f1:7f:3b:1f:d8:c3:89:5d:37:26:e1:57:02:03:30:
b0:58:2f:0d:a7:c7:bc:05:a7:bd:7c:22:a4:d7:4f:
37:c7:87:f9:89:da:53:94:da:2e:f1:0d:bd:67:e9:
5f:23:d2:27:62:85:56:ab:af:65:ae:a4:3b:4a:15:
8b:e5:6c:54:03:63:b6:cd:52:34:61:66:5b:f0:e2:
1f:80:48:7e:51:17:72:43:e7:34:2d:52:c3:b3:85:
4b:43:f8:3a:c4:b0:2d:b9:2f:36:d6:0c:3e:0b:cc:
27:72:5c:9b:8f:89:4d:dc:29:a5:c5:46:05:ac:01:
de:8a:ac:f9:9b:92:0c:91:a9:98:de:8d:75:49:2a:
36:2e:7d:26:d6:37:4f:85:be:f5:cc:e0:e9:48:84:
dd:58:cc:5d:64:da:ea:35:0e:99:f1:fd:57:c9:90:
18:ed:3f:92:c2:6c:eb:80:6b:78:02:b9:fa:b1:87:
c8:48:f8:b0:53:b5:12:8d:ce:7f:42:29:aa:27:6a:
8d:77:03:de:0a:5c:d7:bc:bc:76:41:c1:3b:44:61:
12:c5:42:3a:6b:ec:3a:1c:ee:f8:38:a8:d2:b4:5c:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BD:FF:E0:A0:64:1B:10:96:33:7A:63:F9:6C:FD:4F:D3:8B:8A:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/nr3_4KBkGxCWM3pj-Wz9T9OLihk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.111.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207412
Signature Algorithm: sha256WithRSAEncryption
36:01:e1:24:59:77:be:c4:ca:d7:56:60:14:cf:3d:02:33:85:
02:03:d7:05:42:b4:01:2b:00:8f:62:18:1a:59:29:a7:92:72:
5b:10:e9:f2:1c:22:59:8a:68:af:20:7c:3c:b7:19:2e:ac:99:
2b:1e:04:45:05:0d:3e:dc:a0:d6:c3:94:d3:77:02:0d:85:2d:
0f:8f:3e:94:4e:db:0e:67:17:61:3c:ce:6b:19:4d:93:09:20:
9f:76:75:e6:68:c2:b5:f0:33:5e:ef:37:20:b0:84:0f:a1:f1:
6f:6c:17:67:d3:d1:e9:41:a6:60:72:c7:a9:a5:82:ab:9c:83:
6c:7a:93:08:b0:88:07:63:4c:19:a5:44:04:12:11:a8:04:07:
77:ff:69:3c:69:51:f3:ee:dd:9a:c0:74:73:b3:ce:06:c3:12:
13:60:5d:f8:47:63:2b:74:27:c8:e8:34:f9:6a:71:2f:e6:e7:
5c:ab:94:8e:05:49:50:40:a3:0e:fd:35:c9:e7:ba:04:fe:de:
6f:36:6c:98:cf:6f:a6:18:28:0f:e8:ce:8a:4e:24:00:46:ee:
a0:87:d3:82:ff:41:91:2b:84:58:0c:da:5d:5a:53:82:77:df:
2b:8b:8b:78:35:e0:e3:15:b6:38:61:bf:76:f5:6e:1b:b5:55:
a8:f9:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:29 2024 by rpki-client on console-fra.rpki-client.org