Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TK8PdjWpbv9bc_IW2P53zE4qCo4.cer
File: TK8PdjWpbv9bc_IW2P53zE4qCo4.cer (raw, json)
Hash identifier: bRzwOIWLqtooCJhbeA7m/WsO2U4GW0vI6I6p5WpLw1k=
Subject key identifier: 4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80170C453A2547A2FF2BAF4C72D935E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.96.148.0/22
IP: 2a06:40::/29
Validation: Failed, certificate revoked on Mon 09 Sep 2024 13:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:70:c4:53:a2:54:7a:2f:f2:ba:f4:c7:2d:93:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4caf0f7635a96eff5b73f216d8fe77cc4e2a0a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:2f:4c:db:e0:58:6b:1f:71:ce:78:5e:0b:
bf:95:e7:71:8a:b4:cc:9b:25:6a:1e:2a:e2:b3:78:
4f:de:95:69:1a:b0:58:0b:bf:e0:51:23:7b:ae:49:
fc:94:d5:77:72:d5:22:95:78:76:c0:1a:27:04:71:
40:ea:88:3f:15:cd:82:87:30:bf:1e:cf:aa:49:d3:
3f:c4:98:e5:6f:f0:d2:5e:6d:ce:7b:29:10:87:27:
fa:8c:94:59:39:6e:7a:56:db:f1:ab:80:db:59:2a:
d2:a7:f9:57:77:49:a7:c4:97:ce:fe:6b:7a:d9:4a:
b8:9f:f5:3d:7c:d0:e4:7a:f6:ef:38:ae:cc:44:d8:
25:5e:b5:92:b7:1f:54:d8:c8:05:de:54:d7:ff:53:
f5:5e:e9:2a:08:a3:0d:85:77:13:88:19:ba:53:49:
70:e7:40:c0:5a:fd:61:4f:d0:29:01:d7:bd:18:fa:
fd:a4:fb:2f:4a:fa:60:91:5d:84:1c:bf:30:8b:ba:
2d:57:57:78:3b:6b:f9:47:d4:5f:ae:d7:d1:7a:15:
b6:d1:80:eb:2b:8f:fd:58:d1:42:e0:80:0d:fb:d2:
11:fd:01:8b:5b:48:4b:52:dc:94:a1:99:c8:94:3b:
b5:ae:ee:e8:c6:31:b8:ba:c9:b5:08:5b:21:8a:57:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.148.0/22
IPv6:
2a06:40::/29
Signature Algorithm: sha256WithRSAEncryption
96:48:7d:43:1b:7e:09:fa:37:f9:43:c4:2e:69:e9:82:35:ed:
1e:07:11:79:86:b1:61:52:f6:b0:6d:14:e9:6e:da:60:0a:be:
9c:bd:09:8a:92:7f:56:5a:44:11:b0:bc:2f:62:2f:e9:49:9d:
10:4d:1c:94:1d:1b:3b:fe:5b:bc:0d:3a:e1:1f:79:ce:e8:44:
69:6b:18:b0:2c:34:b5:ff:cd:0c:e1:6f:17:8c:8b:dd:f9:3f:
5e:d3:00:e0:a5:14:a4:31:1e:e5:a6:50:f7:69:db:2e:a7:34:
3f:ae:47:aa:68:b5:1c:fb:06:22:27:57:51:00:d4:6e:cc:28:
a0:b5:f7:da:60:ac:94:e8:41:09:c2:18:86:d9:36:f9:4d:6b:
eb:ea:47:b4:c0:c5:cb:d8:b3:e1:02:ef:89:d6:c6:c0:0a:89:
9c:b0:0d:9b:c8:2c:43:c3:b2:b0:fd:41:8a:83:4f:7b:73:26:
b5:4b:5f:5b:08:24:c1:dd:09:00:ea:65:78:48:fd:0a:86:19:
a2:86:49:84:a7:8f:ae:75:a6:ff:d6:a9:09:77:9b:27:26:20:
a9:bf:f2:61:4a:dc:8a:cd:42:a6:0a:ba:ed:54:8a:8e:3e:56:
35:6d:b4:61:d8:93:b9:a7:f7:25:b0:34:0b:ae:c8:e9:01:7b:
9b:73:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:07 2025 by rpki-client