Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K-gWIR8hUSF0b5cPLvjMQL1_Ils.cer
File: K-gWIR8hUSF0b5cPLvjMQL1_Ils.cer (raw, json)
Hash identifier: 8t7h2pyYPvnNkPhVTETYLPGhienhUtIaJv0m+7Ev0nI=
Subject key identifier: 2B:E8:16:21:1F:21:51:21:74:6F:97:0F:2E:F8:CC:40:BD:7F:22:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A01ED9A930627007783ECA96A3CCD66EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/K-gWIR8hUSF0b5cPLvjMQL1_Ils.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Aug 2023 05:17:43 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2a0b:3e00::/29
Validation: Failed, certificate revoked on Mon 30 Oct 2023 08:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:01:ed:9a:93:06:27:00:77:83:ec:a9:6a:3c:cd:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 17 05:17:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2be816211f215121746f970f2ef8cc40bd7f225b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:e3:87:1e:bd:f6:14:bd:c0:8a:d5:00:9b:
44:ed:01:1b:f3:e8:88:23:bf:31:e9:fb:78:ac:db:
da:d7:d4:28:82:0a:b3:5f:26:d8:8a:7b:fa:e9:8b:
86:24:87:23:06:63:54:7c:af:d2:ea:19:c0:54:f1:
e9:67:00:26:80:4e:a6:a0:f5:f5:b5:06:61:8a:70:
59:f0:e3:0d:6c:3e:9a:11:6c:d0:2a:55:73:85:7b:
9b:d8:7c:f4:d7:9c:3e:fb:e6:7c:47:28:04:d4:53:
b8:6a:97:b1:61:09:a4:18:0a:c7:76:48:52:a3:87:
25:75:9c:c5:af:a2:2c:43:7d:08:60:1b:e2:0f:27:
61:26:8f:c3:ed:87:53:d4:84:36:6e:f2:60:a0:85:
e1:19:6f:71:6d:36:bd:98:34:46:b2:f2:94:5a:4d:
a1:f2:e5:d6:27:8f:a5:8f:91:f5:37:a9:b2:60:5a:
c6:49:71:8e:7c:a3:ca:cc:62:c0:9e:b0:cd:e3:b8:
43:e2:42:8c:58:c0:48:fb:95:b0:3c:ea:a0:e0:c6:
9e:0b:72:4f:46:12:78:cc:a6:b4:57:97:cf:89:ac:
c7:81:a8:79:91:d8:8e:06:5b:98:d7:18:86:1c:24:
a8:d4:6c:83:49:32:2f:41:2d:4c:b6:ea:d7:a5:79:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E8:16:21:1F:21:51:21:74:6F:97:0F:2E:F8:CC:40:BD:7F:22:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/K-gWIR8hUSF0b5cPLvjMQL1_Ils.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
09:57:82:4b:83:93:06:26:c5:00:a8:20:d3:2e:68:3d:19:9c:
af:58:9b:8a:d6:44:61:98:47:c9:00:8c:d1:e2:13:43:f4:4e:
47:b2:1d:15:b8:00:6b:8c:5b:37:7b:e3:ae:08:0a:33:20:d2:
65:07:45:0e:11:ac:c3:db:48:98:87:8b:81:74:45:6e:1a:a6:
69:24:e9:9c:fe:51:0e:68:32:ec:38:e0:dd:c1:8e:dc:d2:5c:
f9:05:b3:64:bb:df:a8:99:37:7d:b5:05:da:19:1b:91:b5:a6:
d3:87:d8:0a:6d:7e:71:69:74:13:aa:1c:60:92:f9:8d:54:07:
fe:df:5a:c6:99:01:e3:03:2f:56:6f:8b:0f:9e:6c:36:e2:90:
c8:9d:4e:e5:23:8e:7b:5f:f6:7f:b2:76:75:b8:da:d5:d6:2a:
56:bd:c8:b5:c3:31:4a:54:93:93:9f:40:b3:23:1f:b1:a0:1d:
07:6c:80:f5:0d:fe:fa:56:c9:84:0f:d2:60:ca:2f:53:39:c3:
80:af:be:1f:ce:32:41:9d:4c:99:78:29:b7:16:fe:f1:33:d6:
3a:2c:52:d6:b8:5b:51:12:db:d3:b2:c7:b4:19:10:e0:7a:05:
4e:d7:f4:56:49:b9:5b:93:07:77:ce:04:74:29:8e:9f:03:45:
b8:53:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:42 2024 by rpki-client on console-fra.rpki-client.org