Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
File: KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer (raw, json)
Hash identifier: KBcfleEcP6L0OTkU4TJ4WsSYFVJRqkAQMtlTlbnIbKk=
Subject key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0DD9B83C8EB1F083F2B80282FCCAB5F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Mar 2024 09:02:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.181.19.0/24
IP: 146.19.12.0/24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 10:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:d9:b8:3c:8e:b1:f0:83:f2:b8:02:82:fc:ca:b5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 09:02:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:67:05:c0:d6:e6:4d:f5:84:78:ef:f9:52:
44:45:e3:16:84:1d:46:da:f5:e6:57:80:42:8d:a6:
44:43:7e:8d:d5:45:fe:2e:b8:f5:6f:c5:5a:a0:00:
79:04:54:47:60:d0:60:b8:ec:cd:6a:00:83:28:1e:
4a:00:10:2c:1f:96:b1:46:df:cc:18:71:b5:e1:da:
b8:3e:11:c8:53:3d:2e:0e:39:c3:a8:22:a5:e5:62:
ca:8a:71:15:7a:59:56:f6:d8:fe:84:66:1f:ea:eb:
9f:2e:05:e9:82:9f:6f:68:10:26:27:36:51:d1:8c:
d1:5e:16:6b:98:4b:07:86:f0:ea:89:f2:e2:5d:a8:
e3:d4:88:1a:42:4e:6c:70:ef:04:ae:40:0f:76:5a:
45:a4:e8:22:41:e3:4d:d4:b9:f4:d6:59:65:7e:70:
b6:23:33:47:9d:59:6d:e2:51:0b:bb:57:f9:40:a4:
03:47:58:6f:aa:c8:69:c9:fa:80:87:65:01:9d:5f:
61:a1:c1:96:0a:1e:07:43:f9:4e:07:7e:50:f0:df:
e8:b1:12:1e:e5:28:fc:f5:ae:10:38:9e:49:b8:b3:
31:3c:3c:af:2b:14:86:5b:c3:d7:f1:35:f9:d6:c6:
02:c3:e6:ff:b3:47:17:7b:4c:c5:b6:d4:e6:2c:61:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.19.0/24
146.19.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c1:a2:de:e9:95:56:9a:00:63:fd:b9:eb:f3:14:b8:27:1d:
57:a4:bb:8b:dc:f5:d4:3e:c5:03:dd:af:ee:1e:28:80:d7:5b:
04:86:48:23:f6:a9:bd:16:9d:4f:70:e6:42:71:08:66:a2:ea:
4b:a6:0c:aa:29:0d:d2:f9:db:7f:71:2d:1e:79:ce:82:37:67:
f8:b2:a4:6a:05:97:15:63:cd:b6:38:c6:78:d0:4c:58:b8:eb:
8e:8f:67:51:f1:8e:5e:d4:e7:29:96:c4:82:6d:d0:6f:a7:5f:
d0:4e:4c:ad:fc:b0:da:ac:54:fe:51:1a:16:94:73:5d:d1:0e:
12:42:cd:1a:82:57:00:00:4a:2d:98:05:d8:7a:5c:33:fe:ef:
f1:e3:cb:33:14:de:e7:f3:13:67:41:75:33:62:08:3d:79:ae:
f5:6d:04:1d:a0:77:31:77:88:56:9d:d9:d3:d5:13:ba:47:2c:
19:be:84:7e:3f:80:be:48:41:2a:60:11:b3:df:e9:7d:29:69:
69:10:63:0a:eb:a5:ee:7c:5a:27:06:5a:21:24:b5:f8:4d:0b:
cd:78:81:2c:37:47:71:d3:01:6d:2a:d9:58:fa:41:2d:9a:67:
dc:8b:8c:5f:b6:83:e5:e0:2b:cc:a0:4e:d3:d2:83:22:92:17:
93:08:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:35:25 2025 by rpki-client