Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nudhE9vzIDhvc-GTWsmslD6BtYw.cer
File: nudhE9vzIDhvc-GTWsmslD6BtYw.cer (raw, json)
Hash identifier: +jiVi1Z3uM47+m4VO/voBcaJlMNDrGFEq8p2oXYP244=
Subject key identifier: 9E:E7:61:13:DB:F3:20:38:6F:73:E1:93:5A:C9:AC:94:3E:81:B5:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5009870704767DC36115B192D4A1E05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/nudhE9vzIDhvc-GTWsmslD6BtYw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20986
AS: 20989
IP: 185.111.52.0 -- 185.111.59.255
IP: 185.112.16.0/22
IP: 2a06:5940::/29
IP: 2a06:5980::/29
IP: 2a06:6140::/29
Validation: Failed, certificate revoked on Wed 10 Apr 2024 09:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:98:70:70:47:67:dc:36:11:5b:19:2d:4a:1e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ee76113dbf320386f73e1935ac9ac943e81b58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:b6:b7:57:30:a3:6f:50:36:d1:5f:b0:11:
fe:3a:13:1f:72:44:70:ab:ba:ef:d1:3d:b8:f0:57:
84:79:a9:3e:8a:1f:c5:00:3f:40:cc:73:dc:06:f9:
d1:f6:15:b6:e7:b3:87:61:d6:0a:ce:a7:4f:75:09:
f3:09:09:06:d4:53:58:10:fc:5a:47:63:02:15:5d:
1f:b6:77:ad:d7:a7:4b:c0:fd:e0:5c:20:0b:ba:ab:
a8:92:20:49:fc:fa:8d:f8:72:ec:9e:d7:35:c0:3f:
e4:b4:34:59:3d:96:6c:4b:6f:e8:d9:97:10:3f:8c:
cf:52:9a:0d:98:42:8e:f9:2b:a4:bf:19:44:81:05:
d0:75:67:fa:89:21:8f:e6:c4:4a:43:1f:cd:d5:fc:
43:31:9d:0c:a1:5e:b6:bf:07:ce:4d:78:fd:a2:ff:
06:04:1b:79:b7:22:fe:fd:ae:f6:fd:4a:d9:d6:81:
69:c5:39:cb:0d:20:53:1a:d1:c5:52:6c:ea:e6:53:
8d:83:a8:88:90:48:ee:08:d5:1e:8a:a5:32:44:fc:
07:3a:f5:7f:d2:b6:7c:56:1e:69:dc:eb:6f:a4:c1:
b7:6a:26:20:67:d6:9c:22:77:a2:a0:de:3e:42:db:
01:8e:3a:cd:2d:d3:11:60:99:c0:a6:1a:9f:f6:2c:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E7:61:13:DB:F3:20:38:6F:73:E1:93:5A:C9:AC:94:3E:81:B5:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b919ce-0f83-4fb4-8dd8-de0412eb3bcc/1/nudhE9vzIDhvc-GTWsmslD6BtYw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.52.0-185.111.59.255
185.112.16.0/22
IPv6:
2a06:5940::/29
2a06:5980::/29
2a06:6140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20986
20989
Signature Algorithm: sha256WithRSAEncryption
64:cc:e1:33:55:ad:e7:34:a7:6c:91:f5:f7:0f:f6:1c:b8:68:
b9:37:da:0a:bf:0a:2e:76:d5:e4:13:5f:93:d4:eb:17:58:14:
47:be:3f:dd:00:8b:90:63:17:92:c2:f9:65:0a:ed:8c:1a:30:
24:d0:aa:53:dd:c5:13:7a:81:f0:67:6a:70:08:cf:88:56:08:
b3:21:82:48:bf:b6:d9:5d:b3:7c:73:d0:ab:db:e9:97:55:b5:
45:0a:8c:7a:c6:d6:33:fb:9e:7f:4f:da:a7:b9:df:df:48:bf:
43:5a:d4:43:bd:69:34:c4:eb:f5:22:22:23:28:73:81:f4:ed:
00:3a:b9:6f:04:2f:57:c9:c1:e6:ec:0e:bd:ff:1e:be:77:3a:
cc:60:90:c0:94:16:56:57:fa:d4:34:60:18:e2:99:14:8f:1c:
f1:76:16:a8:f0:f8:a3:c2:6b:a3:50:40:5b:cc:b4:0b:80:6a:
8a:e3:e3:c2:2a:cc:ee:c6:00:7e:01:ad:9b:01:ba:6b:c5:82:
36:db:9d:75:34:0a:65:7e:6b:d8:71:69:d2:4c:17:f4:84:28:
c1:df:55:24:30:e8:d9:bc:62:3d:ac:91:b9:3e:8e:b4:08:4e:
8d:14:2c:92:b9:07:15:3f:ca:5b:74:ed:f0:1e:12:32:44:bd:
a4:ad:93:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:38 2024 by rpki-client on console-ams.rpki-client.org