Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
File: KryuX9N1NzGwDp4lH81jzB-upWc.cer (raw, json)
Hash identifier: mPXiGtocESip9QlKz3ULyreObUW4lnoe2vRc9gs8O9w=
Subject key identifier: 2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F41DA475A1C7545015843C0DC19A4C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.200.102.0/23
IP: 193.201.72.0/23
IP: 2a09:5d00::/32
Validation: Failed, certificate revoked on Wed 13 Sep 2023 08:12:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:da:47:5a:1c:75:45:01:58:43:c0:dc:19:a4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:a4:fe:bb:08:0c:c4:72:b0:9e:4d:5d:91:
da:57:7c:51:6f:6b:8c:88:92:e9:14:bd:3e:25:23:
c3:a2:8e:3f:b9:e0:b8:3e:ca:fb:c0:3e:4a:71:17:
1f:48:8a:ff:30:8e:2a:71:f6:3c:f8:12:4b:9d:3d:
dd:99:9a:d4:cd:19:bb:d5:04:36:a2:96:9e:69:1f:
d5:58:dc:7c:33:44:82:60:62:3b:32:9f:85:7a:ba:
32:2a:81:f5:12:3c:9a:4b:a9:55:01:ba:7e:89:25:
eb:1b:e0:24:5d:75:fd:cd:eb:04:a7:39:23:71:32:
a7:fe:d9:59:3f:17:a4:b8:ce:87:81:3e:d4:0a:df:
c1:58:d8:77:53:f5:85:8a:4a:84:9f:08:59:bb:0b:
fc:b5:ef:e2:7b:25:39:eb:51:01:49:a2:9f:c9:4e:
75:2d:9f:a4:d3:cd:41:ee:80:06:f3:f8:7a:d9:eb:
81:d5:bb:8c:4d:eb:8e:f5:16:f1:a0:76:bc:dc:6b:
f9:69:5a:1e:89:53:18:b4:da:0f:6d:8e:40:5b:af:
0e:c5:d1:9a:28:4b:50:42:41:53:64:44:3d:d7:25:
ef:44:6a:e9:81:dd:39:92:58:69:1f:cd:37:88:17:
aa:65:50:c7:74:27:b7:32:46:af:96:3f:9f:5a:10:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/23
193.201.72.0/23
IPv6:
2a09:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
6b:33:d2:e7:04:c6:a6:a3:09:31:36:65:f9:8f:0e:fc:40:55:
9e:0d:d0:0f:8f:05:ce:0d:37:e1:b5:35:75:1a:8f:35:17:23:
ad:82:86:61:d7:c0:b3:6a:d0:5a:0b:0b:00:12:d7:2c:0d:15:
b4:e2:7f:e5:ee:6d:53:58:f3:02:27:80:9c:c5:45:cc:85:50:
86:36:4e:45:31:26:22:e5:ee:ec:b5:f7:45:e7:98:3c:52:af:
05:7d:22:03:6c:b5:ee:3c:88:11:77:20:09:94:8c:f7:fc:62:
09:9b:b3:d7:77:0e:ad:48:9d:e7:3f:d0:9b:5b:45:b5:08:a6:
ad:2d:82:90:8f:5d:3a:61:a7:9a:72:82:cb:bc:c1:19:01:19:
90:bb:b4:84:5f:33:73:03:4c:09:21:ec:7c:74:2a:a9:6e:e9:
4a:da:8b:27:d0:39:13:b8:37:ab:9a:0e:ff:b8:1a:56:7a:54:
a9:d2:b7:55:51:46:d1:2c:87:e5:4c:be:37:9c:24:71:41:27:
fe:10:f3:77:cf:de:40:14:30:59:51:70:39:a8:61:77:3d:e8:
01:c9:80:74:50:5e:24:7c:b7:c1:60:2f:e7:d5:f5:8d:43:cf:
79:ca:57:af:35:1d:19:1b:4f:70:f8:0a:45:1b:df:a7:9d:6c:
38:be:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:25 2024 by rpki-client on console-ams.rpki-client.org