Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iz8WbYNgbB1084iiXZ9QpXNSum4.cer
File: iz8WbYNgbB1084iiXZ9QpXNSum4.cer (raw, json)
Hash identifier: kDzN685Tf1Xn9LGY2ir8pxpomDqg0qvloyFXA4YqRnU=
Subject key identifier: 8B:3F:16:6D:83:60:6C:1D:74:F3:88:A2:5D:9F:50:A5:73:52:BA:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C2F8BE924AAF9E7D11CB1F60AF85D53FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.rp.ki/repo/clonoth/1/8B3F166D83606C1D74F388A25D9F50A57352BA6E.mft
caRepository: rsync://rsync.rp.ki/repo/clonoth/1/
Notify URL: https://rrdp.rp.ki/notification.xml
Certificate not before: Sun 03 Dec 2023 11:59:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 57196
IP: 2a13:7a40::/29
Validation: Failed, certificate revoked on Sun 03 Dec 2023 21:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:8b:e9:24:aa:f9:e7:d1:1c:b1:f6:0a:f8:5d:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 3 11:59:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b3f166d83606c1d74f388a25d9f50a57352ba6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:d7:e6:17:6f:0e:cd:77:09:5d:aa:9a:e8:
81:ed:8e:e1:b8:dd:d4:c8:71:47:75:a3:95:18:f2:
4e:0f:70:f7:ea:07:34:4d:b3:ea:f2:b5:a7:6f:b3:
31:77:cf:a1:ef:e2:fe:fd:09:a9:19:1d:60:60:44:
3a:67:af:4c:f5:2f:87:d0:f9:c4:01:79:89:95:e7:
4e:fa:06:41:bc:0b:db:ef:e4:a0:b3:cd:2a:48:1c:
cb:b9:19:c0:d1:0a:93:a7:01:fb:ed:3a:01:7b:4f:
50:ee:fe:c5:aa:16:d2:2f:41:cc:42:52:e2:18:79:
40:82:c6:de:45:c0:a1:da:79:e5:d6:ca:f7:94:ae:
78:e7:28:27:e6:80:3b:20:ca:86:e0:3c:95:79:a7:
aa:bf:a0:a7:a5:ed:80:8f:36:31:96:db:87:07:8a:
ea:88:0d:4e:b5:36:b4:98:93:41:63:7b:aa:47:19:
51:b5:0e:5c:86:12:8e:33:2e:34:cb:5f:c1:39:19:
bc:37:d0:a1:55:0b:8c:83:9c:40:74:67:e0:b2:6a:
c3:ee:11:86:f7:88:f2:40:bb:bd:95:db:79:cc:42:
db:49:da:06:0e:49:4e:d3:df:4d:5a:45:78:00:b3:
63:c2:ca:25:a5:e6:58:e0:07:2e:9c:a9:41:ca:4c:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3F:16:6D:83:60:6C:1D:74:F3:88:A2:5D:9F:50:A5:73:52:BA:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.rp.ki/repo/clonoth/1/
RPKI Manifest - URI:rsync://rsync.rp.ki/repo/clonoth/1/8B3F166D83606C1D74F388A25D9F50A57352BA6E.mft
RPKI Notify - URI:https://rrdp.rp.ki/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57196
Signature Algorithm: sha256WithRSAEncryption
ab:00:3d:46:59:f5:28:c3:43:f0:4f:3b:e9:61:86:ec:47:a7:
62:d7:43:67:0a:4c:e8:e8:02:e4:98:58:7e:13:93:3b:82:81:
36:86:54:30:31:3d:04:aa:76:85:ce:99:81:c4:61:c8:62:66:
92:f5:99:70:c2:43:cf:79:b4:cf:f7:6c:1e:ee:f2:ca:f8:c6:
e1:18:a8:19:79:e0:c4:00:58:85:35:5f:76:11:f2:be:20:fc:
20:0a:a0:5e:cb:cb:5c:a4:dd:a4:da:f4:f0:a7:0e:43:44:8d:
b1:ce:02:9a:ca:a8:c4:e5:fc:ee:9d:ca:97:70:ff:72:8e:c3:
2a:cf:e7:88:1b:bb:df:9c:6f:4e:25:52:50:56:3d:a0:c2:16:
c9:78:d8:2c:21:d9:91:99:86:30:92:59:b0:c1:14:94:65:d2:
38:7b:c8:b7:33:8e:1f:b1:d1:71:3b:f5:a2:27:fa:bd:9e:ab:
14:02:3a:bf:cb:0d:e9:af:52:ab:47:ab:29:5c:b5:bf:10:ad:
eb:6f:d3:2d:16:ee:74:e5:aa:71:62:45:46:4c:0c:ad:07:42:
2d:39:71:bf:14:c7:33:be:c3:66:ba:ed:2f:e5:6b:cc:9d:15:
e4:66:1d:c8:6e:2e:2b:d9:6b:f5:76:28:f2:4f:9d:0a:ba:07:
16:04:35:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:33 2024 by rpki-client on console-ams.rpki-client.org