Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KTN_2NuGS_Pr_L55nYr5ojBEmxo.cer
File: KTN_2NuGS_Pr_L55nYr5ojBEmxo.cer (raw, json)
Hash identifier: Vq+pWxplc6N/ktIjYT6xTPd5zIsVTQToShb2fpWITkw=
Subject key identifier: 29:33:7F:D8:DB:86:4B:F3:EB:FC:BE:79:9D:8A:F9:A2:30:44:9B:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D89913619DE4927E39292C2FB634838
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/KTN_2NuGS_Pr_L55nYr5ojBEmxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.5.128.0/24
Validation: Failed, certificate revoked on Wed 22 Mar 2023 18:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:91:36:19:de:49:27:e3:92:92:c2:fb:63:48:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29337fd8db864bf3ebfcbe799d8af9a230449b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d4:ef:94:4f:1c:01:fd:b7:1d:07:8e:d1:8f:
f3:86:3c:4b:6e:fa:8c:1d:02:57:3a:a1:de:e7:e1:
e1:d9:8f:67:5e:ad:22:76:22:43:17:31:27:9c:ef:
d4:35:67:d2:26:38:9e:6d:18:d3:41:3b:ef:21:36:
8e:ec:ba:9a:fe:28:0c:7c:d3:58:ec:60:0f:1a:6f:
fb:0b:7d:07:df:09:19:11:15:60:7f:da:dd:ba:93:
2d:de:e5:4e:37:79:58:83:4d:6e:a9:71:76:b8:20:
67:18:ef:06:d5:c8:b6:f3:db:46:f9:58:d9:b1:93:
c0:5e:66:1e:5d:28:7f:77:2b:4f:05:d2:dc:db:1d:
fe:8f:dc:71:1b:0f:26:12:5f:e6:df:8a:14:c2:d5:
9b:c8:7c:d2:9f:2f:4c:46:d9:96:64:17:3c:50:f9:
b5:e7:9e:5b:ca:ac:72:10:3e:a6:b6:15:be:61:d7:
29:96:6c:5e:52:0d:77:7a:73:e5:58:3a:2f:eb:c2:
4f:9e:0a:ce:ec:67:95:57:4f:2d:0d:84:0e:08:f3:
28:1e:24:3c:23:40:00:e4:4b:a8:c1:4f:c1:79:ec:
94:1b:24:36:a0:62:02:0c:e7:77:82:35:0a:0d:3b:
72:04:8f:a7:a9:3d:53:53:c6:84:bd:95:65:a9:c5:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:7F:D8:DB:86:4B:F3:EB:FC:BE:79:9D:8A:F9:A2:30:44:9B:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/KTN_2NuGS_Pr_L55nYr5ojBEmxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:59:99:04:7c:41:f3:ef:92:1c:39:71:ad:ae:e4:85:a6:12:
1b:a0:7b:61:84:d3:72:8b:9f:b6:0c:49:eb:96:95:ea:e7:30:
1c:7d:29:41:09:78:94:d2:2c:d3:cf:0c:5e:02:80:6c:9d:6d:
06:65:cd:20:f5:3f:e5:76:d1:31:80:e7:73:3d:be:ed:fc:b8:
94:cb:43:04:9f:15:c3:01:6d:3b:ee:f0:c7:0d:47:fa:e3:93:
4e:1e:0d:3d:a7:25:fe:92:2d:56:9c:1e:45:bd:4c:fe:9f:42:
60:dd:b4:26:ea:2d:34:36:51:66:33:29:89:f7:4f:60:d0:c9:
cd:b2:20:a5:c1:f4:54:87:ab:09:5a:23:ac:56:04:44:c1:1e:
6a:35:2c:e9:24:f3:68:ae:70:22:25:91:71:cc:e7:3c:96:06:
9d:63:0a:41:49:b7:ca:1c:af:ad:79:2d:f6:7d:24:62:dd:be:
a7:f2:84:84:ab:31:2c:6c:d4:7f:2d:19:bb:5e:31:54:45:96:
0b:29:7c:85:ac:54:91:96:10:dd:ed:98:86:ed:c2:61:80:7d:
a6:61:ff:9d:27:04:25:b6:ae:23:fe:b8:fe:0f:84:2f:86:0c:
fb:6e:03:0d:5c:ff:07:fd:f3:79:52:02:de:84:1e:1e:58:37:
7e:4b:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:18 2024 by rpki-client on console-ams.rpki-client.org