Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cKTtAlNu4aKmyB6reDVUc9rycRQ.cer
File: cKTtAlNu4aKmyB6reDVUc9rycRQ.cer (raw, json)
Hash identifier: z5wryYPaclgLa6OJXVnnTh0DaCvhRDjFS4jxvSAeUFM=
Subject key identifier: 70:A4:ED:02:53:6E:E1:A2:A6:C8:1E:AB:78:35:54:73:DA:F2:71:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F0F9942ED25C73E062E5D2DE31347
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/cKTtAlNu4aKmyB6reDVUc9rycRQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.248.24.0/24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 06:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0f:99:42:ed:25:c7:3e:06:2e:5d:2d:e3:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70a4ed02536ee1a2a6c81eab78355473daf27114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:78:63:61:97:c1:c5:48:34:e3:ac:c0:31:
ea:a8:ea:11:58:30:a4:67:ea:75:e4:a4:6a:56:bd:
c6:dc:40:ab:e7:85:2d:d7:53:ec:90:8b:2e:1b:22:
f7:5e:7e:7b:f1:8c:00:df:17:2d:76:c7:4e:6d:10:
a0:41:66:cb:5d:a6:e7:7b:bd:01:8f:c3:c4:72:c1:
7e:f7:1f:94:6f:fd:e8:7e:fb:2a:75:2d:9d:e6:82:
c8:19:2b:cf:72:e7:45:43:8f:a3:a6:15:33:fb:31:
a1:65:12:c9:be:5c:84:31:28:42:d5:5b:49:00:3d:
e8:96:5c:51:ec:c8:e2:51:af:96:53:04:41:5e:87:
9d:fc:81:41:69:97:5f:75:9c:2c:10:3e:c9:bc:67:
f7:3a:1f:2a:b2:0e:e0:fd:b7:22:9e:21:c4:8c:93:
9c:59:f4:58:b7:af:ca:a4:37:4e:0c:dd:7f:57:88:
2c:92:05:17:05:3b:c4:3d:67:9f:f1:9e:45:ac:2d:
d5:cd:b5:75:3e:be:eb:05:41:27:74:63:17:13:a0:
0b:25:15:33:c4:cd:dd:73:46:60:03:0b:74:99:ce:
78:03:33:a6:41:2d:b3:cb:57:38:03:8e:14:f8:52:
dc:a3:3b:ad:ed:6c:b3:7b:e9:f5:98:54:c0:35:31:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A4:ED:02:53:6E:E1:A2:A6:C8:1E:AB:78:35:54:73:DA:F2:71:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/cKTtAlNu4aKmyB6reDVUc9rycRQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f0:4e:9e:21:ca:db:7a:5d:be:75:9c:26:15:d9:a3:62:22:
c6:51:3f:22:5c:0f:e4:2f:30:b4:99:1b:c3:09:e4:c9:ac:82:
7b:15:ac:97:da:6f:4f:46:de:5e:d5:cc:db:8d:f2:15:d2:88:
b6:39:2c:8f:72:de:e6:ca:75:96:be:a9:bb:10:a0:0e:cf:e2:
01:9f:53:f9:48:07:5c:05:0a:31:16:66:26:74:95:79:2c:98:
0a:9b:63:b9:cd:e6:84:a8:87:ce:6c:d5:b5:eb:1d:cb:0f:0b:
f1:58:82:93:87:18:0f:02:bc:27:9b:2f:eb:bd:70:6f:f8:c2:
cc:e5:4d:0b:57:3d:0f:6d:72:bc:3d:f2:1b:d1:ff:6d:e5:c5:
09:f7:ea:72:5a:d0:48:ee:31:b6:7b:4c:0f:94:61:9c:6e:30:
43:4a:d4:0d:d4:2f:6a:38:84:93:d0:db:be:9b:74:20:dd:3f:
a7:b3:4d:64:63:ae:b7:90:d7:d1:9c:a3:6a:78:ae:f2:e8:31:
96:70:27:43:b2:27:df:94:43:83:ae:85:7e:18:9f:c2:63:d7:
bc:fb:68:37:a3:0c:b4:b6:d0:1e:e4:40:9b:a7:82:ea:d4:28:
7e:9a:df:f4:7e:6d:85:51:e5:e3:aa:72:44:96:ea:c8:ed:92:
2e:8c:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:16:48 2025 by rpki-client