Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kEVn9uZ1VmO9maPu8N7VOkIAQZM.cer
File: kEVn9uZ1VmO9maPu8N7VOkIAQZM.cer (raw, json)
Hash identifier: 3JHy+E4otm2403ppDoKeOA9Fb3EBWEj6M49EML+D2fY=
Subject key identifier: 90:45:67:F6:E6:75:56:63:BD:99:A3:EE:F0:DE:D5:3A:42:00:41:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC474631496098A405BBACBE782F51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/kEVn9uZ1VmO9maPu8N7VOkIAQZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.91.149.0/24
IP: 2a12:6380::/29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 07:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:47:46:31:49:60:98:a4:05:bb:ac:be:78:2f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=904567f6e6755663bd99a3eef0ded53a42004193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:34:55:35:0e:37:9c:2b:3a:d6:d5:23:36:
b4:75:0b:dc:d5:6e:61:0c:6f:e2:a4:d8:1b:95:dd:
b7:e3:00:3a:dd:c3:5a:aa:67:bf:98:3f:a5:36:0e:
64:79:52:d3:b2:9e:64:09:dc:c6:f7:4c:9a:a7:40:
1f:9e:39:24:de:e3:6f:1b:04:7f:ae:71:f9:09:eb:
46:8b:55:e7:1b:b2:a5:58:09:16:c7:b2:d9:2f:c7:
0e:40:3e:91:9b:b7:a1:a8:a5:e3:ea:eb:f7:16:4b:
88:24:d8:b1:ba:8f:76:6b:94:ff:b5:8f:c2:99:98:
6d:9a:2a:b6:e8:bb:09:7e:f1:8e:4c:6f:02:77:54:
2d:7e:b2:f5:e7:f0:b6:fd:60:6e:49:52:e8:90:00:
bf:9e:b0:4c:da:95:fa:bc:39:66:06:12:45:56:75:
82:63:ef:70:4a:15:3b:c0:e7:6f:9c:b5:a2:bd:f3:
86:3b:73:14:4f:cf:2b:7b:f6:c6:1e:22:5f:29:ba:
ac:c1:09:26:61:df:3a:db:96:8d:23:04:17:4f:27:
58:c9:3d:5e:35:11:1c:15:8b:02:d0:0f:e4:63:37:
7a:92:f2:79:b4:c9:04:4a:9a:f6:2b:58:e3:e2:19:
b6:29:74:7f:ab:95:7c:57:a1:67:0a:a1:fd:7e:63:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:67:F6:E6:75:56:63:BD:99:A3:EE:F0:DE:D5:3A:42:00:41:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/kEVn9uZ1VmO9maPu8N7VOkIAQZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.149.0/24
IPv6:
2a12:6380::/29
Signature Algorithm: sha256WithRSAEncryption
94:c0:76:50:57:a2:b9:ce:51:ad:59:99:17:bf:dc:27:6d:38:
c9:2f:32:dc:53:32:e9:88:e0:bd:28:f5:79:3d:80:56:63:ca:
7e:6e:1d:e9:85:22:20:6c:9e:00:4d:e9:1d:3d:7d:1b:4d:5d:
a9:2d:d2:0d:75:52:fb:b5:8b:e4:be:ab:a1:5e:a9:8d:ff:1e:
9c:d1:0d:a1:91:12:ae:97:1a:58:97:ab:cc:58:f5:6b:17:e5:
60:e9:fe:05:86:69:95:81:ed:30:72:37:74:55:48:4b:d0:40:
b9:d5:de:6e:6d:dd:ac:2d:9d:9a:0c:9a:07:85:00:3e:14:7b:
19:3f:9b:60:72:f4:a6:b8:c7:b9:cf:f4:b0:ed:ad:97:fd:83:
36:9e:91:b4:8c:57:47:87:69:b4:46:cd:d8:86:1a:36:32:aa:
d4:0d:62:c7:f3:83:c5:1d:59:d7:56:23:ac:1b:3a:aa:8e:0e:
b5:7c:8b:36:71:2e:d5:92:d9:dd:90:6b:df:9f:eb:47:74:0f:
cb:4c:9a:c3:32:22:9f:b6:57:0f:44:84:4a:6e:26:03:63:1a:
fa:09:cb:75:e8:10:5d:43:8e:16:91:c6:cb:f6:c5:dd:90:8f:
f4:1b:26:0d:15:d0:8e:9f:9b:4d:c0:63:c8:df:bf:7e:bd:e1:
28:3a:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:12:45 2025 by rpki-client