Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k-CKDctyZqsJdwpE_eYjPw4QyVA.cer
File: k-CKDctyZqsJdwpE_eYjPw4QyVA.cer (raw, json)
Hash identifier: tFEl1teEsUYLN9Ry1guipH09E+hTF0mMSsDJUEjBGKw=
Subject key identifier: 93:E0:8A:0D:CB:72:66:AB:09:77:0A:44:FD:E6:23:3F:0E:10:C9:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC5A70F388961DC7EE7345037FFD23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/k-CKDctyZqsJdwpE_eYjPw4QyVA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.141.53.0/24
IP: 2a12:5c80::/29
Validation: Failed, certificate revoked on Thu 08 Feb 2024 07:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5a:70:f3:88:96:1d:c7:ee:73:45:03:7f:fd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93e08a0dcb7266ab09770a44fde6233f0e10c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:cb:f5:ef:a4:9b:c1:74:86:ee:2e:82:c6:
d6:2b:58:38:03:49:64:55:8c:35:1b:0c:bd:aa:b6:
a8:dd:cc:c1:71:a1:e7:15:87:32:d5:60:a9:ad:80:
ce:ee:2a:96:ff:d4:e1:96:b9:e9:c6:79:ae:15:58:
ec:2f:16:e6:8b:1b:6b:3f:48:31:66:81:b2:41:37:
50:31:4a:4f:18:2d:ed:dc:f7:19:9a:1b:e8:1f:3c:
21:c8:f9:7b:c7:cb:37:92:3d:45:f5:4f:30:4c:f0:
ed:ea:79:96:86:0e:c9:8e:61:47:5f:72:12:cb:0c:
b8:f2:8a:c6:cb:56:a0:c7:08:eb:1b:18:0a:4d:ee:
74:30:8e:f3:5c:96:69:a3:d9:df:74:0e:6d:24:08:
34:4c:15:22:9a:d6:27:13:98:bc:29:87:00:f5:08:
e5:1e:7f:da:e8:fd:a5:2d:32:c2:91:08:cc:b2:b9:
88:5a:95:06:d1:47:1a:47:3b:45:7e:6f:ea:01:e2:
dd:6b:6e:05:73:2f:b2:62:1b:89:50:80:c9:47:e6:
e6:9d:0d:af:8e:b6:6b:60:a9:e5:73:31:22:3e:0c:
ae:8d:da:bb:fb:72:97:86:3b:24:7b:a9:a4:b8:cc:
c2:49:54:a7:36:e4:71:49:40:d3:3b:2c:84:e1:6b:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E0:8A:0D:CB:72:66:AB:09:77:0A:44:FD:E6:23:3F:0E:10:C9:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/k-CKDctyZqsJdwpE_eYjPw4QyVA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.53.0/24
IPv6:
2a12:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
87:8e:e6:57:2c:48:47:77:09:14:63:53:72:09:4d:44:ba:b6:
3e:94:a7:2a:9d:0c:2d:fb:5a:2a:29:53:63:bc:c4:ea:86:c4:
50:e0:b5:84:99:03:9a:e8:ab:d5:7c:1d:d4:c9:4a:99:8e:46:
7b:87:6b:9c:91:75:64:e5:02:6f:bf:5b:c9:28:bd:97:1e:61:
9f:95:e0:0d:0b:40:9a:ff:63:de:46:4e:4f:7f:c2:fd:1b:93:
e4:9b:0f:fe:62:97:49:fe:8f:04:6a:31:67:9c:ef:4a:9c:ec:
33:ce:e9:36:84:38:23:ac:4b:8e:ee:09:5c:a4:dd:ff:5c:4c:
40:e3:6b:34:31:22:e4:a0:f6:7a:ff:00:05:a8:6b:39:3b:59:
18:87:40:7d:40:d0:ea:18:04:9e:23:2c:ee:e9:25:5c:01:48:
91:80:f2:0f:14:21:cd:24:72:5d:1a:7f:47:90:8d:37:eb:38:
b9:94:3a:3d:09:63:c4:68:58:4c:f8:d6:90:07:6b:1f:eb:8a:
16:9b:9d:6c:39:84:d4:d1:e9:b7:f5:86:51:72:4f:68:4b:6c:
16:43:8c:d6:1f:ac:77:fc:8f:1a:29:a3:03:6d:4e:3f:29:77:
f7:75:91:ca:b9:cc:57:51:6d:76:93:8c:60:37:f1:cd:e9:69:
10:e2:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:54 2024 by rpki-client on console-fra.rpki-client.org