Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
File: KxRai98ryhUPJe1Uone49lPv2z4.cer (raw, json)
Hash identifier: fMC5IfbWLTEgWGIHy9MHegUISp2t3MYEnenLQg5wu0E=
Subject key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EF64C8E18602EE23A4FBDF6487A7B07D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 Apr 2024 12:19:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.88.144.0/22
IP: 45.155.64.0/22
IP: 62.122.76.0/22
IP: 160.19.92.0/22
IP: 185.239.244.0/22
IP: 185.242.108.0/22
IP: 185.244.104.0/22
IP: 185.246.236.0/22
IP: 185.254.16.0/22
IP: 193.37.72.0/22
IP: 212.46.37.0/24
IP: 2a14:4240::/29
Validation: Failed, certificate revoked on Mon 22 Apr 2024 13:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:4c:8e:18:60:2e:e2:3a:4f:bd:f6:48:7a:7b:07:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 19 12:19:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:0b:1d:cc:d6:31:99:58:15:d3:2e:08:12:
54:29:73:70:6c:5b:84:fa:f3:0a:f0:bc:7c:4b:ae:
6e:27:00:16:7e:9a:e6:6a:ec:42:73:a3:a4:ee:52:
d1:3f:6b:90:00:a7:12:53:99:56:3a:1e:a9:87:af:
74:cf:a9:8b:5d:cf:23:b3:bc:90:4a:20:45:5f:af:
66:b7:af:8c:4e:25:ef:07:ab:92:d2:dc:45:5b:e1:
1f:dd:17:75:35:92:0d:c1:02:e3:58:e9:42:1c:01:
8c:f1:29:db:07:04:cc:36:1e:c2:ea:19:76:bf:ae:
5b:1a:57:9a:5f:da:34:3f:c7:9a:fc:96:64:b7:95:
c2:27:9d:16:d5:4b:f1:1b:de:fc:db:a2:1e:55:94:
d0:87:b4:2e:3a:86:f4:17:9c:91:fe:e2:8a:a9:33:
04:e0:c5:9f:10:42:ec:58:43:b6:eb:23:01:05:cb:
0f:af:5c:d4:ca:de:17:83:88:5a:5f:04:e7:85:8b:
be:11:f2:35:9d:94:5f:f0:a7:03:05:fd:1d:09:62:
c0:34:9c:77:98:fd:47:11:cd:6b:80:0a:4f:8d:0b:
84:1e:4b:29:28:a9:fe:f3:9a:ad:ec:4c:5f:09:84:
54:1b:c4:07:b8:bf:de:d4:dd:5c:1e:c2:36:0b:73:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/22
45.155.64.0/22
62.122.76.0/22
160.19.92.0/22
185.239.244.0/22
185.242.108.0/22
185.244.104.0/22
185.246.236.0/22
185.254.16.0/22
193.37.72.0/22
212.46.37.0/24
IPv6:
2a14:4240::/29
Signature Algorithm: sha256WithRSAEncryption
9d:b2:e9:bd:d6:e6:3d:f3:63:17:2b:a2:fa:f9:3c:7d:8f:98:
d9:61:f6:22:c0:55:48:c3:74:71:e0:e9:7a:ff:1e:a6:ed:ac:
23:c7:5f:be:d0:26:1f:b7:ed:3a:77:4e:e0:32:8a:80:0c:18:
dd:75:89:2f:54:4d:8a:ea:ee:d7:3d:74:cc:5f:9e:2a:0b:1e:
81:0a:46:51:bb:f7:7b:29:03:9b:f1:49:4b:0c:27:cd:48:b0:
78:5f:cb:21:78:d6:2c:48:ab:6d:57:33:26:d7:5f:c5:6d:eb:
a1:f4:7a:a2:fc:48:57:80:0d:53:35:10:6a:94:2f:64:e0:ec:
73:9e:96:a2:f9:0c:b8:e7:93:e4:c0:8d:e4:0f:16:6c:0b:b7:
e9:bc:52:71:3a:4e:65:28:b6:9a:3b:b8:19:d1:18:e8:2e:31:
46:d0:48:a1:33:2f:b1:49:43:fc:b9:26:9d:fd:d6:23:da:72:
0d:1f:3d:2d:25:85:c9:36:4a:56:d9:f8:5e:27:85:4f:85:bb:
7f:97:55:52:ef:40:d9:21:e2:05:59:32:58:d5:c7:c6:2a:df:
2c:99:9d:3c:91:ec:0c:d3:7b:0b:a5:03:8b:e8:14:5f:52:38:
57:b1:1d:36:d8:1b:15:1f:f5:8d:46:d9:33:70:8d:36:6e:ac:
1b:3f:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:27 2024 by rpki-client on console-ams.rpki-client.org