Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ntQBgoFaNJefvGjjDEAIv5m0Ib8.cer
File: ntQBgoFaNJefvGjjDEAIv5m0Ib8.cer (raw, json)
Hash identifier: C7SC7ENhuJ4SnOKb7VovOlg0Tt6ewgRYvhJ0J7GA30s=
Subject key identifier: 9E:D4:01:82:81:5A:34:97:9F:BC:68:E3:0C:40:08:BF:99:B4:21:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED40C1F8C9189260541C05FA086B222
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/8e516a-f205-4869-ad74-abc76df32d29/1/ntQBgoFaNJefvGjjDEAIv5m0Ib8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/8e516a-f205-4869-ad74-abc76df32d29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.205.186.0/24
IP: 2a12:7600::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 08:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:0c:1f:8c:91:89:26:05:41:c0:5f:a0:86:b2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ed40182815a34979fbc68e30c4008bf99b421bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:b1:63:c6:e7:b6:13:25:95:aa:42:ac:c2:
61:25:a2:55:63:67:1a:0c:a0:c2:74:64:5c:13:b0:
6c:af:4c:c4:2f:cb:64:e9:fc:09:a8:eb:7f:9f:d9:
26:d5:10:4c:88:b8:79:48:5b:be:80:ed:68:5d:fb:
de:65:67:cd:cc:8d:61:79:21:4d:d2:05:de:11:da:
22:5e:d3:cd:0e:16:95:86:c0:7d:9f:60:56:09:46:
00:dd:25:8c:b9:b1:b0:ce:17:0c:66:7e:3e:78:52:
ac:28:78:80:c9:d2:59:00:12:1b:39:4c:32:7b:d5:
de:be:c0:48:2f:f9:6c:87:d8:db:d6:1c:3e:dc:e5:
20:fb:82:71:b0:67:37:04:cb:9e:f3:34:2c:90:93:
90:4b:00:d2:19:5e:e9:d2:ab:52:5e:43:36:1b:24:
20:f0:42:fb:f3:28:0e:1a:f7:93:54:bc:4e:1a:19:
e2:f1:c3:9e:bf:58:1b:d5:fa:1f:f2:8f:ad:37:b1:
c8:79:81:47:35:a6:ec:59:2b:a0:cb:05:0d:f8:d3:
e2:d0:9a:70:a6:f0:68:27:04:7d:8f:3b:80:c9:56:
0b:f0:00:62:9c:b9:65:c8:b4:58:78:fb:b1:a2:b5:
eb:56:bc:00:94:3a:ac:77:68:30:e5:68:a3:ae:94:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:01:82:81:5A:34:97:9F:BC:68:E3:0C:40:08:BF:99:B4:21:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8e516a-f205-4869-ad74-abc76df32d29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8e516a-f205-4869-ad74-abc76df32d29/1/ntQBgoFaNJefvGjjDEAIv5m0Ib8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.186.0/24
IPv6:
2a12:7600::/29
Signature Algorithm: sha256WithRSAEncryption
07:d5:32:62:08:9d:dd:db:5a:17:eb:6d:41:28:f0:89:89:2b:
5a:84:84:3c:3e:24:f0:b2:29:3b:2f:2d:af:20:13:1d:ee:7e:
b9:2c:43:68:58:8f:1c:d2:97:8d:7e:1c:01:eb:e0:c1:4b:34:
7c:8a:90:7c:3d:51:23:8d:ee:69:56:0d:bb:d1:58:d6:18:9f:
fd:db:d1:da:cf:cc:61:07:82:5e:7c:2e:f6:30:1f:51:8c:b0:
3d:d0:7f:66:d8:06:5d:7b:cf:f1:f6:6a:ee:26:39:c3:b7:49:
80:8a:66:ed:e7:fe:50:39:fb:3d:d4:62:2c:ac:b3:75:b6:80:
0a:4c:07:9b:0d:c5:45:fa:b7:94:dc:e4:86:97:99:13:d6:dd:
65:e6:b9:9e:a4:76:3d:67:47:4f:0b:c5:16:47:04:ff:45:9a:
a7:52:05:48:51:22:de:c4:0d:76:2c:3a:e1:fd:5f:9d:60:9a:
77:a7:87:21:5a:18:d1:ed:8b:13:a1:fa:1e:bf:3f:9f:62:9d:
15:2b:81:d4:55:2c:90:43:78:a1:fc:48:af:a0:25:54:72:c1:
4b:c0:a9:fe:f1:c4:c8:dc:f1:38:52:e8:4b:59:73:08:fb:60:
dd:f1:ad:79:78:f5:a2:04:4d:51:d0:1f:2d:69:73:89:49:9b:
7c:08:ce:d4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu1AwfjJGJJgVBwF+ghrIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWQ0MDE4MjgxNWEzNDk3OWZiYzY4ZTMwYzQwMDhiZjk5YjQyMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3CxY8bnthMllapCrMJhJaJVY2ca
DKDCdGRcE7Bsr0zEL8tk6fwJqOt/n9km1RBMiLh5SFu+gO1oXfveZWfNzI1heSFN
0gXeEdoiXtPNDhaVhsB9n2BWCUYA3SWMubGwzhcMZn4+eFKsKHiAydJZABIbOUwy
e9XevsBIL/lsh9jb1hw+3OUg+4JxsGc3BMue8zQskJOQSwDSGV7p0qtSXkM2GyQg
8EL78ygOGveTVLxOGhni8cOev1gb1fof8o+tN7HIeYFHNabsWSugywUN+NPi0Jpw
pvBoJwR9jzuAyVYL8ABinLllyLRYePuxorXrVrwAlDqsd2gw5WijrpSJMQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJ7UAYKBWjSXn7xo4wxACL+ZtCG/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzhlNTE2
YS1mMjA1LTQ4NjktYWQ3NC1hYmM3NmRmMzJkMjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvOGU1MTZh
LWYyMDUtNDg2OS1hZDc0LWFiYzc2ZGYzMmQyOS8xL250UUJnb0ZhTkplZnZHampE
RUFJdjVtMEliOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAbc26MA0EAgACMAcDBQMqEnYAMA0GCSqGSIb3
DQEBCwUAA4IBAQAH1TJiCJ3d21oX621BKPCJiStahIQ8PiTwsik7Ly2vIBMd7n65
LENoWI8c0peNfhwB6+DBSzR8ipB8PVEjje5pVg270VjWGJ/929Haz8xhB4JefC72
MB9RjLA90H9m2AZde8/x9mruJjnDt0mAimbt5/5QOfs91GIsrLN1toAKTAebDcVF
+reU3OSGl5kT1t1l5rmepHY9Z0dPC8UWRwT/RZqnUgVIUSLexA12LDrh/V+dYJp3
p4chWhjR7YsTofoevz+fYp0VK4HUVSyQQ3ih/EivoCVUcsFLwKn+8cTI3PE4UuhL
WXMI+2Dd8a15ePWiBE1R0B8taXOJSZt8CM7U
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:30 2024 by rpki-client on console-fra.rpki-client.org