Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
File: kZvynhrKI6UV4R9mlgtOuVyAz7k.cer (raw, json)
Hash identifier: pqsM7qRbkGaY5OzUktjoSGzZMd/DK9ga/uhUlrn1+SQ=
Subject key identifier: 91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8010FACE43706CEEB306C0CDABFE21C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.51.120.0/24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 13:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0f:ac:e4:37:06:ce:eb:30:6c:0c:da:bf:e2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:0f:b5:d3:3f:df:c2:e0:23:4d:d2:f3:13:
11:36:d8:18:a7:53:23:2e:5e:66:3d:7d:ee:90:fb:
22:bd:13:9f:0a:4e:35:28:93:45:5c:3a:2f:c1:c4:
be:3f:76:b4:61:c2:94:fe:23:bd:d3:24:3c:16:e7:
97:05:85:b4:6f:e0:4f:b6:99:25:a4:25:77:43:09:
ab:28:02:1d:bf:f9:7c:15:d0:cc:de:fc:ab:5a:62:
ca:60:b5:d9:19:e3:05:be:2b:97:b8:cb:23:b9:52:
73:74:8b:aa:b0:55:c9:76:35:49:77:19:5d:72:95:
30:a6:21:5b:26:1a:11:7e:f4:0a:75:e9:bd:43:1d:
bd:38:6f:f0:a9:5a:3b:36:61:e6:69:55:4c:4f:7f:
90:6a:19:9e:9d:35:84:d6:2a:2b:f7:4c:04:48:6e:
66:b7:47:1f:11:1c:34:b4:c5:95:c8:5c:b6:af:11:
f5:11:d9:d0:a7:e3:5b:2d:ca:71:8a:10:44:dc:2f:
f2:fc:70:28:e9:27:a2:a3:dc:fe:01:7a:04:72:69:
17:d2:bd:9d:51:69:76:4b:a5:e6:83:0e:0c:6e:90:
95:b5:ab:69:cb:0d:f0:44:8d:7d:fa:43:85:6c:06:
0e:ba:a5:5e:06:ca:1d:7f:98:ae:89:ee:8a:91:b3:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e2:a1:92:51:bf:7c:d6:43:9d:f0:93:b6:df:45:d4:6b:5f:
73:a7:99:8d:01:f0:d0:df:c8:2b:d6:32:70:c3:d1:d8:fd:9d:
31:f9:a3:f2:f7:59:c8:9a:3c:cb:83:5a:24:15:65:70:58:dd:
69:07:d8:db:73:51:81:5f:2b:5a:b6:bf:89:e4:c3:9e:36:80:
03:c6:e0:14:64:80:65:a2:3b:54:3a:e5:19:a2:5a:86:dc:e5:
48:2f:fa:6c:43:e2:f2:7f:cb:cf:c3:5f:53:cf:a8:60:ed:32:
04:e3:a5:67:cf:87:3a:de:41:d6:71:c4:10:7f:c4:4f:ee:6b:
33:e4:d2:64:21:1b:8d:f9:92:bc:35:fd:c9:e0:2c:a6:0e:ad:
72:3d:03:f2:2c:78:70:19:ac:e2:6e:c4:6d:c3:8c:60:ba:63:
23:75:d9:ad:7a:d0:46:2a:23:f4:ee:18:58:3d:14:6c:f8:62:
d7:50:92:6d:6b:67:99:60:38:82:86:62:d6:e7:95:07:61:02:
de:e0:11:67:e7:44:e7:31:f7:5e:17:15:98:c5:5f:fc:c9:04:
a7:bd:56:66:ef:22:7c:02:68:7b:6d:52:98:59:20:fc:37:bf:
d3:d7:b9:1d:85:99:f1:e7:ef:1a:39:06:55:07:a7:25:c9:25:
c1:46:ed:d3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIAQ+s5DcGzuswbAzav+IcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTliZjI5ZTFhY2EyM2E1MTVlMTFmNjY5NjBiNGViOTVjODBjZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2YPtdM/38LgI03S8xMRNtgYp1Mj
Ll5mPX3ukPsivROfCk41KJNFXDovwcS+P3a0YcKU/iO90yQ8FueXBYW0b+BPtpkl
pCV3QwmrKAIdv/l8FdDM3vyrWmLKYLXZGeMFviuXuMsjuVJzdIuqsFXJdjVJdxld
cpUwpiFbJhoRfvQKdem9Qx29OG/wqVo7NmHmaVVMT3+QahmenTWE1ior90wESG5m
t0cfERw0tMWVyFy2rxH1EdnQp+NbLcpxihBE3C/y/HAo6Seio9z+AXoEcmkX0r2d
UWl2S6Xmgw4MbpCVtatpyw3wRI19+kOFbAYOuqVeBsodf5iuie6KkbP7WwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJGb8p4ayiOlFeEfZpYLTrlcgM+5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2U1N2Rj
Zi0zNmY5LTRhNGEtYWUzYy0wYmIzYWZmY2MyZDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvZTU3ZGNm
LTM2ZjktNGE0YS1hZTNjLTBiYjNhZmZjYzJkMy8xL2tadnluaHJLSTZVVjRSOW1s
Z3RPdVZ5QXo3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuTN4MA0GCSqGSIb3DQEBCwUAA4IBAQCM4qGS
Ub981kOd8JO230XUa19zp5mNAfDQ38gr1jJww9HY/Z0x+aPy91nImjzLg1okFWVw
WN1pB9jbc1GBXytatr+J5MOeNoADxuAUZIBlojtUOuUZolqG3OVIL/psQ+Lyf8vP
w19Tz6hg7TIE46Vnz4c63kHWccQQf8RP7msz5NJkIRuN+ZK8Nf3J4CymDq1yPQPy
LHhwGazibsRtw4xgumMjddmtetBGKiP07hhYPRRs+GLXUJJta2eZYDiChmLW55UH
YQLe4BFn50TnMfdeFxWYxV/8yQSnvVZm7yJ8Amh7bVKYWSD8N7/T17kdhZnx5+8a
OQZVB6clySXBRu3T
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:58:38 2025 by rpki-client