Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer
File: KeUoQqbixQwOLA9duJHdLZZW-v0.cer (raw, json)
Hash identifier: iAwuAhi4FlbswxjjzZZul6+yBjQJpFRdKu3r22fk2U8=
Subject key identifier: 29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E83B1874F3A8C7DB92F40BDED455D52F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 Mar 2024 06:13:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61162
IP: 193.104.32.0/24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 11:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:83:b1:87:4f:3a:8c:7d:b9:2f:40:bd:ed:45:5d:52:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 28 06:13:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29e52842a6e2c50c0e2c0f5db891dd2d9656fafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:a7:04:53:4b:8b:02:cd:12:9a:2d:37:b5:
0a:04:fb:a6:5c:1e:c6:1d:e7:2c:62:7f:2d:a2:0d:
c5:68:b1:45:36:4c:41:3d:ae:85:d0:dd:8e:9a:e4:
96:ef:54:d5:33:c4:e3:a3:03:d3:16:d5:5f:61:5a:
93:72:58:20:db:cf:89:ad:ff:fc:3d:14:f7:09:d3:
40:50:5a:9a:f3:ff:11:05:ad:86:42:88:49:65:88:
db:e3:c2:4e:26:b0:b4:89:9f:7f:09:47:fe:a2:68:
64:1b:1c:de:65:88:9f:da:b6:75:a0:58:e3:e6:8b:
51:e8:01:df:d5:ec:ac:ab:e8:04:1d:dc:a9:62:92:
3c:a1:36:5c:dc:e3:37:31:f6:13:79:a1:bf:08:55:
50:6c:4c:01:eb:0f:f2:09:be:81:79:f5:7c:3f:56:
67:da:14:4c:22:a4:b4:d6:1a:4c:4c:39:1d:71:4f:
0f:ab:dc:70:4d:8c:a6:f2:b3:fc:95:69:92:15:30:
e6:07:d0:2b:61:b2:e9:84:34:b8:96:70:74:f5:38:
cd:7a:ef:f3:bb:72:5f:0f:0c:31:45:cd:04:e3:fb:
a7:b5:df:14:6d:2b:a5:03:97:f6:3c:6e:33:fb:d0:
68:36:51:87:7c:e5:56:83:96:25:bc:ec:4c:e5:e6:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.32.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61162
Signature Algorithm: sha256WithRSAEncryption
29:d4:84:9a:9e:cb:16:3c:4d:c7:19:0b:ab:a0:f5:f0:90:27:
91:df:c9:e3:ae:2b:78:30:e5:8d:3e:8e:ac:14:c8:22:16:57:
79:c3:85:1d:d6:8b:81:ad:ff:17:b0:17:72:5a:cb:42:3b:35:
7b:4f:87:49:c5:f1:37:17:0f:de:fc:1a:67:39:fd:9d:2e:e1:
7f:20:2f:d7:60:88:81:85:a4:38:1e:cd:55:04:01:b8:6f:ea:
31:29:2b:5f:68:b9:77:cf:12:ec:da:e9:66:15:cd:76:5f:64:
2f:db:54:c2:26:a6:94:4e:eb:39:c6:c4:19:f2:12:b7:84:5c:
ef:8e:02:ce:31:5a:b2:6e:d0:3c:b6:11:f1:18:00:c1:05:26:
e4:7b:e4:b8:04:27:51:cf:aa:8a:f3:30:12:f1:6e:8f:d3:90:
f0:a0:b3:5f:dd:99:ee:c6:f3:3f:0e:36:ba:2f:32:41:15:8a:
eb:4a:ab:85:5b:4c:cc:0f:f4:be:01:8c:23:49:41:26:a5:11:
3b:d3:6a:9b:ee:92:f3:6d:c6:0e:50:bb:d4:a4:70:5b:cb:a9:
8d:5f:51:ea:13:5f:b7:1b:27:80:b7:bb:1a:f2:8f:33:e2:de:
30:d0:02:fe:99:ff:eb:fa:6f:7b:40:ac:a1:9f:b6:66:95:a4:
44:81:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:03:26 2025 by rpki-client