Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kGS2CFSSI5KMaefdP8Eljaeky6c.cer
File: kGS2CFSSI5KMaefdP8Eljaeky6c.cer (raw, json)
Hash identifier: b9ko9B4fzV1hzHJ4s+FOYz5TMG/GrL0Fd5SJHVSl8DY=
Subject key identifier: 90:64:B6:08:54:92:23:92:8C:69:E7:DD:3F:C1:25:8D:A7:A4:CB:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC5C6993CE8F49791C08D25EF35A97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/kGS2CFSSI5KMaefdP8Eljaeky6c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35407
IP: 2001:678:d8::/48
IP: 2001:678:b80::/48
IP: 2001:678:b88::/48
IP: 2001:678:b90::/48
Validation: Failed, certificate revoked on Tue 13 Feb 2024 13:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5c:69:93:ce:8f:49:79:1c:08:d2:5e:f3:5a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9064b608549223928c69e7dd3fc1258da7a4cba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:65:08:e5:a8:c3:f8:5e:17:1a:c8:a1:e3:
b8:47:ee:04:a3:3b:5b:be:18:e0:a5:81:d5:b9:fd:
9f:3e:8b:a7:0d:a0:90:b0:ec:52:41:28:87:2e:a0:
ef:b7:4a:ee:8b:4d:45:1a:63:4d:e2:dc:70:f7:b1:
c1:fa:45:d2:e8:55:eb:e1:4e:83:e8:e2:24:c9:a9:
38:f6:54:54:2e:ee:03:c4:6e:81:e2:a2:eb:71:20:
6e:a9:2d:7d:07:84:d6:ef:f5:8e:96:e0:40:5d:26:
09:76:3d:4b:fc:8d:07:3f:b0:bf:8a:ef:d0:80:66:
f9:11:63:b4:77:ba:8b:b8:f5:73:bf:50:6e:55:a4:
17:46:72:a3:dc:85:0f:e8:e4:a2:e7:0d:1b:a9:bb:
63:19:f3:22:5b:4c:43:16:cc:b7:3b:5f:1e:81:26:
a7:74:07:a4:6e:ca:94:f5:8c:7d:e0:f4:9d:70:8e:
c0:61:09:57:47:0c:50:86:33:e0:6b:86:b8:63:00:
3d:00:5a:ba:46:ab:f2:9c:44:1c:53:b3:66:82:79:
f9:a2:b4:89:45:88:e8:02:20:ee:71:3d:0a:c0:dc:
1f:50:f2:b1:05:f1:c9:62:b3:91:78:3c:f5:58:73:
6f:c2:00:5e:66:6a:b1:e5:47:45:95:2b:d0:95:84:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:B6:08:54:92:23:92:8C:69:E7:DD:3F:C1:25:8D:A7:A4:CB:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/kGS2CFSSI5KMaefdP8Eljaeky6c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d8::/48
2001:678:b80::/48
2001:678:b88::/48
2001:678:b90::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35407
Signature Algorithm: sha256WithRSAEncryption
a7:e6:59:78:3b:a0:21:37:51:0f:59:d8:4e:3d:93:0b:c2:d1:
e1:be:e7:f1:87:50:cb:73:5e:5f:e6:64:2c:8a:35:47:a3:0d:
7d:96:83:82:79:8b:4f:53:07:67:ef:28:0a:93:a2:5e:b5:68:
19:68:c2:31:07:85:3a:59:77:40:22:62:bb:74:d6:d4:87:51:
09:81:1b:1b:e9:f0:63:1a:c4:38:3f:50:5a:67:92:2e:a8:7a:
00:a1:3a:24:7e:fe:ed:d5:52:c3:30:9a:fb:f4:9d:3d:f1:18:
3e:95:83:ce:2d:de:1e:1c:96:21:76:16:00:5e:a0:b9:73:88:
ef:95:22:f0:47:61:8e:93:4b:06:3f:ea:d4:7b:ff:ea:6b:b8:
91:53:9f:f1:72:9e:7c:9c:50:12:54:77:7a:9e:02:c3:07:6b:
4c:aa:10:a0:fe:81:02:26:b4:e3:68:40:1e:79:6a:14:49:eb:
ed:46:75:31:6d:d5:cd:8c:85:d1:5b:32:9b:f2:b1:0c:24:4c:
e1:49:c2:27:ef:96:7c:9f:49:56:2b:e3:2c:4c:19:43:36:4f:
03:9f:1e:e8:34:11:87:e8:22:fd:5b:c1:5d:63:35:7d:45:fe:
89:55:fd:86:fd:43:29:c8:f9:f2:e5:a7:e1:46:a0:31:cd:98:
e2:f3:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:48 2024 by rpki-client on console-ams.rpki-client.org