Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.cer
File: K8-mLspUhPOcdJ7fGBrZnqoC1PQ.cer (raw, json)
Hash identifier: /GCF08IH9ggDqGq+M2PWdC9E8qPL6m5v/35iCTW5SsU=
Subject key identifier: 2B:CF:A6:2E:CA:54:84:F3:9C:74:9E:DF:18:1A:D9:9E:AA:02:D4:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CACF26972C4D5D3A35C57819F0E6BEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 206207
IP: 185.190.208.0/22
IP: 2a0a:d40::/32
Validation: Failed, certificate revoked on Tue 06 Jun 2023 13:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ac:f2:69:72:c4:d5:d3:a3:5c:57:81:9f:0e:6b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bcfa62eca5484f39c749edf181ad99eaa02d4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:bb:ca:6c:26:b6:16:9b:31:a7:4f:86:6d:
b5:50:f1:b6:e1:d1:71:b8:a0:0a:f8:52:c1:d6:46:
d8:bf:45:44:3f:41:61:70:a8:4e:40:1e:63:fd:7e:
50:45:5b:e6:de:b5:a8:c0:c8:ce:ee:42:90:31:f7:
0e:19:43:b4:ff:5d:0b:e8:3b:52:13:72:38:2b:ec:
78:ad:08:51:c2:ba:53:d6:15:ca:51:6f:2f:af:5f:
6d:98:63:dd:7e:bd:66:21:4c:3c:45:84:df:d5:81:
16:cd:ed:a0:35:3f:f3:91:db:1a:b3:26:42:b9:20:
49:df:39:56:04:2f:7c:bd:1b:ab:6a:f0:e0:dd:09:
f6:32:08:3d:c7:78:8c:3d:ae:87:82:fc:29:64:7d:
a8:e0:e5:42:4b:b2:ac:b1:c4:36:a1:13:eb:ec:da:
17:04:83:db:b9:d4:56:50:6d:2e:0e:3f:57:88:f4:
34:44:04:3c:72:3f:1f:8b:98:cc:99:c0:c0:d0:20:
08:56:b9:a0:d5:81:39:f3:af:42:a3:f2:b5:19:d1:
4b:b3:15:d2:ff:43:4d:4a:64:b8:04:8e:1e:38:1f:
7d:29:32:dd:0f:b8:4a:64:fc:e4:33:f8:47:d9:da:
a5:f8:ce:e3:22:60:72:33:ee:61:6b:95:6f:41:a4:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:A6:2E:CA:54:84:F3:9C:74:9E:DF:18:1A:D9:9E:AA:02:D4:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.208.0/22
IPv6:
2a0a:d40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206207
Signature Algorithm: sha256WithRSAEncryption
17:d4:b5:2b:d3:a4:0e:29:1a:66:d5:b3:43:fd:4d:ce:d4:c0:
f0:c9:6b:ac:bf:32:6a:b7:84:4e:11:29:86:a9:33:bb:c5:27:
69:b9:90:36:1c:56:7d:90:a7:09:21:84:2c:7d:02:bc:07:8d:
73:97:a3:01:7c:09:31:70:f0:02:2d:0a:88:49:e4:21:41:1c:
44:8b:15:be:12:10:46:01:ed:61:88:d0:ac:da:8b:aa:78:d7:
3b:25:c4:cb:fa:00:2e:0a:e8:ae:7d:9b:ba:f2:b6:ed:a1:e4:
4a:db:d9:be:28:24:bb:83:de:47:66:a5:2a:56:7d:57:c8:30:
4b:09:86:04:24:bd:4f:d0:95:a8:74:41:80:34:f8:65:64:3e:
52:51:60:6b:2d:fe:55:10:5b:03:d6:13:6f:c5:e4:9d:dd:af:
94:5f:bb:77:9d:00:5f:92:b9:37:3b:e7:1d:5d:a0:7c:8f:db:
96:18:f0:39:4c:e4:9c:bc:7b:50:ab:fb:79:47:37:93:fe:fb:
e4:01:1a:d7:e5:9e:31:17:37:4e:3d:51:4d:6a:51:6c:e5:90:
f0:09:3f:d5:5f:ed:87:60:35:e6:d0:bf:6e:95:13:72:6a:e5:
44:df:a0:8c:e6:6b:74:5c:be:85:3e:3a:d2:96:1e:49:09:de:
1d:67:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:44 2024 by rpki-client on console-fra.rpki-client.org