Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6KkFsKTxujc9nniS0kVbxeqLv4k.cer
File: 6KkFsKTxujc9nniS0kVbxeqLv4k.cer (raw, json)
Hash identifier: GdV3EViofbmAuHc7uzwnVwjopZXg+HAEAzkjuUA4Vh8=
Subject key identifier: E8:A9:05:B0:A4:F1:BA:37:3D:9E:78:92:D2:45:5B:C5:EA:8B:BF:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857088FCB339BE480EF8060385063DC5F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/bfb168-1b3d-48ae-9800-1744e7259b17/1/6KkFsKTxujc9nniS0kVbxeqLv4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/bfb168-1b3d-48ae-9800-1744e7259b17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:31:43 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.235.227.0/24
IP: 2a09:8140::/29
Validation: Failed, certificate revoked on Mon 02 Oct 2023 06:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:88:fc:b3:39:be:48:0e:f8:06:03:85:06:3d:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:31:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a905b0a4f1ba373d9e7892d2455bc5ea8bbf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:e9:37:77:d1:de:37:b8:be:f6:bc:85:24:
0b:59:97:35:23:63:3e:18:e6:2d:82:2d:22:f6:65:
7b:7f:1a:d4:d0:da:b2:f7:ab:54:ab:08:63:62:88:
18:7f:d7:48:60:67:37:d9:fa:9d:94:02:65:22:3a:
c2:f4:a8:f5:77:b1:79:e4:8d:16:3f:2d:f6:29:79:
d2:89:2a:f5:7b:05:88:9d:af:f3:87:18:e3:20:08:
51:ec:77:c0:2d:f5:e4:ca:7c:b5:eb:9c:2d:31:4e:
0b:4d:25:98:43:4f:66:35:eb:13:64:60:ce:01:b6:
da:95:dc:32:a4:33:54:89:3f:6e:a5:a9:c4:34:8d:
77:48:3e:03:a3:41:96:78:fa:9e:e8:bf:e1:31:09:
ed:53:10:07:29:cc:50:13:ee:fe:ac:9c:3a:8d:b7:
cc:27:4e:7f:11:7f:0c:21:52:09:20:72:c6:07:de:
46:d7:d6:b4:af:ac:52:6c:d5:79:ea:6a:8b:91:4f:
99:07:a8:74:54:d8:31:1f:5d:9c:1e:0c:26:71:8c:
d4:bd:67:44:4c:b2:c1:94:5c:b0:51:86:a9:b9:e0:
b9:7f:28:6c:e9:fc:34:dd:cb:3d:1e:f3:95:c9:69:
a4:8f:c3:9b:af:b2:e2:80:03:ba:1e:da:54:53:ae:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A9:05:B0:A4:F1:BA:37:3D:9E:78:92:D2:45:5B:C5:EA:8B:BF:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bfb168-1b3d-48ae-9800-1744e7259b17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bfb168-1b3d-48ae-9800-1744e7259b17/1/6KkFsKTxujc9nniS0kVbxeqLv4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.227.0/24
IPv6:
2a09:8140::/29
Signature Algorithm: sha256WithRSAEncryption
85:cc:7b:c5:3a:32:25:08:37:b0:68:71:69:a4:b1:18:1e:ad:
b4:01:69:aa:1e:25:f3:ab:99:73:0b:23:da:40:23:2d:99:f8:
18:58:c3:61:21:cd:30:40:33:55:f5:f6:1b:5d:67:2f:51:8c:
4f:61:42:ed:b3:0f:38:ea:43:85:bb:a9:97:f9:bb:aa:83:af:
51:3b:55:35:e5:69:5b:3b:db:c4:ad:8d:b1:b4:1b:ac:8a:bf:
1d:6e:c7:78:a3:7e:3c:ab:6f:74:24:2c:58:a9:b6:9c:f1:6e:
1b:0b:ea:e1:4e:59:dd:39:f1:de:85:66:a4:6f:e4:9e:95:1a:
fe:17:ec:4b:92:92:e5:6d:ff:de:6c:14:f8:bc:2f:0d:fb:e7:
f8:33:4d:98:19:e0:9a:85:39:1a:4e:42:cd:71:4f:98:7a:ae:
88:49:e2:fc:0c:cd:a2:63:bd:55:69:2a:0a:0b:fc:ae:34:ba:
3a:81:89:e1:ab:ff:6c:04:f8:4f:49:b5:4c:3d:b9:b7:18:25:
27:89:de:5b:e5:a0:1a:cd:48:c7:1b:ac:6a:ba:32:be:96:70:
03:96:18:bd:23:ce:09:5a:2f:c3:d2:0b:32:02:9a:dd:50:d6:
1c:96:2d:d0:49:eb:28:4b:62:2f:a0:89:d8:be:0e:01:85:74:
89:28:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:01 2024 by rpki-client on console-ams.rpki-client.org