Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kr6lTwNlHKFbCa-eTSly4t8EAlo.cer
File: Kr6lTwNlHKFbCa-eTSly4t8EAlo.cer (raw, json)
Hash identifier: LUNXZkO3CpBKolJgEyK5C2dsKspH40YMKQReahDp2iU=
Subject key identifier: 2A:BE:A5:4F:03:65:1C:A1:5B:09:AF:9E:4D:29:72:E2:DF:04:02:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A86E9FE3371AA768C44D07E0FA9A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/Kr6lTwNlHKFbCa-eTSly4t8EAlo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.241.57.0/24
IP: 2a11:6b80::/29
Validation: Failed, certificate revoked on Mon 11 Sep 2023 07:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:86:e9:fe:33:71:aa:76:8c:44:d0:7e:0f:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2abea54f03651ca15b09af9e4d2972e2df04025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c3:db:e7:ff:20:3f:b3:6b:ab:70:c2:04:17:
8e:fb:87:ae:cd:e6:ce:a9:ed:3c:4f:ea:72:2f:3c:
52:d0:9d:14:63:ac:f4:73:40:1e:02:13:77:cb:e1:
83:84:82:95:09:6c:27:15:9c:7b:0a:f1:95:37:35:
f3:ec:d0:6e:8e:3e:31:d9:32:09:74:49:bf:39:d2:
db:38:e4:20:46:a7:de:a5:ae:d7:c7:95:5d:6a:da:
9d:e6:04:fd:8b:c8:ee:44:5c:8a:ae:f5:85:ac:88:
88:c2:aa:46:af:8c:d3:7e:94:dc:b5:76:96:4e:07:
53:da:4f:06:0e:07:1b:b5:58:ea:f3:92:50:2c:87:
86:ca:58:a6:b3:56:20:b0:a8:fa:33:57:3c:6a:33:
56:b2:14:20:2f:24:2c:a5:d4:f1:c0:ab:fc:66:2e:
13:e8:0d:40:e2:1c:e7:0d:39:45:d7:c7:87:dd:a7:
b5:c8:bc:94:ff:20:72:ca:2a:f4:30:b5:69:f4:ca:
a9:9a:f7:62:32:2f:c3:bc:1a:83:d9:47:12:82:8a:
cb:82:da:76:d8:2a:cd:4c:af:63:b8:18:e8:75:34:
6d:81:40:2e:c0:45:c2:a6:ca:69:78:40:21:57:ef:
82:d4:f1:d7:40:f8:cb:d5:e4:26:2b:6e:b3:13:72:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:A5:4F:03:65:1C:A1:5B:09:AF:9E:4D:29:72:E2:DF:04:02:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/Kr6lTwNlHKFbCa-eTSly4t8EAlo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.57.0/24
IPv6:
2a11:6b80::/29
Signature Algorithm: sha256WithRSAEncryption
00:2e:f9:11:de:8f:53:b9:2a:7d:95:58:b2:43:8a:48:3a:30:
8d:2a:3e:ae:9c:30:bf:12:41:2e:1e:6f:f0:61:b6:1f:68:1e:
f8:b9:4d:c6:b0:06:aa:48:a3:6c:08:4a:4e:7e:5f:5b:da:90:
e0:b1:07:35:29:ab:92:0d:b5:3d:03:34:70:ab:f8:46:0e:9f:
2c:e4:5a:84:ef:e7:f0:ba:44:8d:4e:0f:30:52:f4:1a:27:9c:
7e:c6:88:df:cf:1f:03:ec:4a:e6:31:19:50:7d:9e:1a:0c:0a:
dc:4a:50:e7:3d:8b:bd:50:c3:af:8e:ba:70:07:81:a3:7c:eb:
46:d9:c8:ea:84:2d:96:49:eb:b2:84:7d:8b:c5:0f:f7:d2:70:
ea:ce:63:23:5e:d5:87:a9:f9:44:76:1a:52:f7:49:32:70:bb:
eb:8b:e4:03:85:14:fe:e2:b1:e1:e7:2a:af:56:0f:38:11:b4:
66:46:31:b7:31:23:7c:a4:f3:92:0f:8e:00:6f:04:6f:8c:eb:
61:c9:ff:53:f8:51:0e:e2:52:b5:8b:a3:82:0c:bd:c5:f4:10:
49:f0:c4:75:97:40:ae:ce:ad:6a:41:5f:c5:42:e4:e1:5f:b2:
5f:7d:c9:bf:85:d9:b5:b0:89:bd:1f:11:28:ab:35:1a:6b:4a:
cf:8d:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:25 2024 by rpki-client on console-ams.rpki-client.org