Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
File: Kc_ykaA7rauF42R6ojUPE8XyZmE.cer (raw, json)
Hash identifier: UxyE/j9EO35YzGoc2r9OwEXd0dtoDyV1Ep9lIF3H/+g=
Subject key identifier: 29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42551464267506681F20A16380BC117
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.64.121.0/24
IP: 2a14:3500::/29
Validation: Failed, certificate revoked on Mon 29 Apr 2024 08:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:51:46:42:67:50:66:81:f2:0a:16:38:0b:c1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29cff291a03badab85e3647aa2350f13c5f26661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:0e:7b:0d:b0:55:14:bb:9f:b3:cc:bf:97:
33:24:8a:c6:fd:35:48:42:5e:1a:81:cf:c2:25:e8:
ab:ba:0d:bf:7f:1d:03:1a:0a:74:65:df:3f:21:d5:
fd:81:58:3b:4a:90:38:be:1c:e6:2c:64:a1:52:69:
02:3a:a5:ed:48:f3:60:21:71:03:ac:69:ab:c4:1d:
22:d9:5f:13:e5:2e:d7:6d:19:88:a4:9f:a9:02:05:
d4:a5:43:92:a1:e6:82:c0:09:3c:d9:a7:c9:61:47:
07:0b:40:be:e1:cf:c1:52:bb:fd:be:d9:96:44:67:
a2:b2:06:c5:83:05:fd:a3:89:0c:d7:79:78:8b:f2:
51:b7:31:ec:d1:3b:c2:6d:06:2b:35:5e:69:74:9e:
0c:c7:1c:12:84:b6:14:1a:78:16:ec:6f:d9:21:29:
8d:34:00:82:38:43:ad:38:1f:f4:5e:91:30:7e:9b:
26:83:1c:7c:96:c6:9b:3e:60:d5:bd:c0:a7:e9:9b:
ac:2f:7f:1f:a1:4c:48:73:fe:88:47:e1:3a:74:9f:
5f:ea:0f:19:0c:50:e6:93:fc:b7:ae:70:40:9a:98:
1a:67:e4:1e:01:7d:43:dc:45:10:5d:84:d7:fa:1c:
5b:9e:b1:18:15:c5:90:8f:eb:ce:08:eb:88:91:3a:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.121.0/24
IPv6:
2a14:3500::/29
Signature Algorithm: sha256WithRSAEncryption
50:4d:2f:0f:17:27:d7:ea:a4:44:61:a4:33:3c:0f:4a:be:29:
5d:ec:78:f7:19:88:5e:06:d5:c4:6d:17:72:5b:b5:5d:22:aa:
66:9e:f3:0a:c1:fe:9d:68:5c:6e:8e:a2:72:d8:0c:5b:19:51:
b5:f9:e4:97:74:51:23:03:51:62:fe:cf:0f:fb:3d:56:5d:8f:
5f:ec:86:6e:45:d1:d3:17:6c:cb:ff:1d:45:af:d1:04:9a:95:
7a:6f:0c:4c:10:f9:f7:be:31:ad:ac:72:77:15:46:f1:b5:4f:
06:b1:38:46:64:7b:a9:b5:48:99:5a:87:fa:64:8a:19:78:82:
fb:ab:8a:17:68:78:4b:1d:d0:5d:08:32:b4:68:b6:1b:31:ed:
be:c5:7d:47:17:12:43:d0:14:3c:7d:ee:8a:c7:fb:94:6a:c4:
38:52:bc:d9:1f:a3:19:96:4b:d0:38:a0:9a:63:7b:98:3a:bb:
b6:dd:88:88:f9:dc:b3:f7:46:9f:41:f4:f3:cd:4c:16:fb:82:
b9:0d:ff:dd:40:18:97:db:65:0f:21:f5:32:15:a6:dd:c0:46:
f1:db:e6:15:a5:8f:77:f6:6c:c3:ef:20:c0:24:60:39:42:aa:
80:9e:79:9a:30:5c:b7:0b:44:d8:66:b7:47:b7:81:18:fb:fa:
9a:b9:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:29 2024 by rpki-client on console-fra.rpki-client.org