Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kte28PZRjYLhK5vcN2YCsjthKZQ.cer
File: Kte28PZRjYLhK5vcN2YCsjthKZQ.cer (raw, json)
Hash identifier: z/jzVRxhf6kOGgzjO4/gcS9LJrJZieL4oxFf+ZsufN4=
Subject key identifier: 2A:D7:B6:F0:F6:51:8D:82:E1:2B:9B:DC:37:66:02:B2:3B:61:29:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018794ACB8E4ED22037EE1AF2E2A34BC77C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/Kte28PZRjYLhK5vcN2YCsjthKZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Apr 2023 14:02:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60458
AS: 205193
AS: 207046
IP: 45.131.80.0/22
IP: 45.143.148.0/22
IP: 45.146.188.0/22
IP: 45.151.192.0/22
IP: 91.199.90.0/24
IP: 91.199.102.0/24
IP: 91.199.108.0/24
IP: 91.199.123.0/24
IP: 185.37.228.0/22
IP: 185.100.72.0/22
IP: 185.125.76.0/22
IP: 185.156.216.0/22
IP: 185.162.168.0/22
IP: 185.167.24.0/22
IP: 185.202.144.0/22
IP: 185.215.114.0/24
IP: 185.217.140.0/24
IP: 185.226.152.0/22
IP: 195.8.48.0/23
IP: 195.8.118.0/23
IP: 2a00:eda0::/32
IP: 2a06:b980::/29
IP: 2a07:a180::/29
IP: 2a0b:3600::/29
IP: 2a0b:e000::/29
IP: 2a0e:6240::/29
IP: 2a0f:5d40::/29
IP: 2a0f:b000::/29
IP: 2a10:1840::/29
Validation: Failed, certificate revoked on Fri 30 Jun 2023 12:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:ac:b8:e4:ed:22:03:7e:e1:af:2e:2a:34:bc:77:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 18 14:02:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ad7b6f0f6518d82e12b9bdc376602b23b612994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:d9:aa:f9:02:fa:8a:88:f3:e4:4f:60:2a:
e7:15:37:17:10:e0:1a:23:d3:44:48:6a:c5:9f:bd:
b6:6c:cd:62:03:63:03:2f:56:d7:02:5d:13:b9:1c:
49:f7:5e:a6:7c:59:d7:23:a3:3c:c6:ef:74:47:89:
de:be:d2:f9:a2:e3:2c:dc:bc:0c:d6:e0:24:9c:4b:
71:a9:98:e2:7e:ab:5d:71:7c:c6:02:a6:db:28:18:
76:38:65:57:11:61:b3:44:c8:00:2d:d4:a0:83:80:
df:b0:70:ac:9f:ee:ba:59:3b:37:60:ca:3a:a0:23:
16:f7:4f:dd:f6:00:10:4a:2c:49:4c:c9:8b:9c:6b:
12:b0:0b:97:f7:a7:75:5a:a7:bb:c4:8a:dd:e6:1c:
7e:df:7e:1e:5b:a4:2a:89:03:60:7c:ad:2a:44:bd:
3c:e5:97:3f:53:9d:d0:af:d6:dd:94:23:1c:2c:a6:
69:82:04:7e:88:b6:e8:91:ea:a6:c3:db:46:94:96:
71:9d:d4:32:c7:d9:2e:ed:ef:ba:a9:03:b8:a8:79:
21:cb:47:3d:ac:2b:48:e6:b4:1f:5f:cd:8e:98:4f:
cb:7c:25:3e:46:c7:f9:f8:97:49:9c:1d:c3:84:05:
f7:d4:11:a8:2b:17:5a:cd:ef:d2:20:bd:8b:5c:a4:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D7:B6:F0:F6:51:8D:82:E1:2B:9B:DC:37:66:02:B2:3B:61:29:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/78e7e0-7b9d-4d80-b107-cb9b1acf3a6c/1/Kte28PZRjYLhK5vcN2YCsjthKZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.80.0/22
45.143.148.0/22
45.146.188.0/22
45.151.192.0/22
91.199.90.0/24
91.199.102.0/24
91.199.108.0/24
91.199.123.0/24
185.37.228.0/22
185.100.72.0/22
185.125.76.0/22
185.156.216.0/22
185.162.168.0/22
185.167.24.0/22
185.202.144.0/22
185.215.114.0/24
185.217.140.0/24
185.226.152.0/22
195.8.48.0/23
195.8.118.0/23
IPv6:
2a00:eda0::/32
2a06:b980::/29
2a07:a180::/29
2a0b:3600::/29
2a0b:e000::/29
2a0e:6240::/29
2a0f:5d40::/29
2a0f:b000::/29
2a10:1840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60458
205193
207046
Signature Algorithm: sha256WithRSAEncryption
74:e8:de:ac:ab:6a:88:b8:81:ce:d4:84:7d:6d:f4:0a:10:37:
96:0c:d7:ea:6a:e4:18:d7:46:33:c5:c8:fd:7f:db:b4:96:ae:
da:13:8a:19:98:af:5c:ef:22:0b:c0:26:8e:c4:8a:40:5c:d4:
ee:1d:12:b5:b9:c1:ac:b3:02:1a:66:51:5f:4e:f8:24:6a:5a:
d6:a7:e0:87:43:c1:1d:2e:60:cc:45:29:02:de:73:ae:5b:cb:
41:96:7d:e3:de:8a:dd:8b:9c:ab:1f:47:63:b4:3b:bb:78:be:
bd:09:65:f1:88:3c:34:41:1f:b7:83:86:0b:4f:da:ed:49:12:
34:97:f1:57:06:24:5e:a9:a4:a3:18:47:29:90:73:56:ad:d1:
25:7a:ed:93:af:3d:df:66:6f:3e:0b:31:b8:c8:59:0f:6a:72:
67:55:b0:65:41:57:67:db:a6:b6:78:e9:c8:44:c1:44:f2:36:
3f:a6:80:ff:d5:bd:36:b9:d7:48:03:b4:4d:f7:af:62:47:fc:
b0:16:53:f9:d5:27:99:4c:1f:0f:9a:05:0e:db:5c:4b:e1:d8:
8f:3d:32:7f:5c:09:04:b0:a9:1b:da:b3:84:37:a1:43:c0:10:
8d:04:24:23:36:84:c1:a6:f6:e1:6a:1e:da:7c:63:3a:b3:4b:
4a:a5:40:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:26 2024 by rpki-client on console-ams.rpki-client.org