Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kapXS1EcKRt8-ukZW90J4AOGAsA.cer
File: kapXS1EcKRt8-ukZW90J4AOGAsA.cer (raw, json)
Hash identifier: h9GT097sT7z6/juh5h7ntWr6CIousxGy+qyBIx26RY0=
Subject key identifier: 91:AA:57:4B:51:1C:29:1B:7C:FA:E9:19:5B:DD:09:E0:03:86:02:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7CBF82E6309E9C46F686275BB83ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/kapXS1EcKRt8-ukZW90J4AOGAsA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.225.0/24
IP: 2a11:a8c0::/29
Validation: Failed, certificate revoked on Tue 17 Oct 2023 10:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:cb:f8:2e:63:09:e9:c4:6f:68:62:75:bb:83:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91aa574b511c291b7cfae9195bdd09e0038602c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:66:d9:4e:90:bf:10:8e:68:54:93:ef:47:
e6:6a:8e:ec:4d:93:35:b4:28:8f:4e:21:eb:79:a2:
c9:d7:40:95:2f:8f:e5:82:7e:44:8c:90:c1:ca:3c:
40:0e:8c:7a:da:6e:ec:96:a2:d8:33:15:af:fb:f7:
fb:9c:f2:b9:13:cd:6d:4e:dd:ce:71:65:03:b8:cc:
59:b3:db:b3:7f:31:dc:b2:4e:1b:b5:4a:83:72:71:
9f:46:45:ea:c8:da:99:45:44:6c:94:98:8e:00:eb:
77:54:e5:d0:89:a0:75:36:0b:a5:42:46:ac:80:e6:
73:c2:37:21:2b:bf:b2:94:3d:9a:15:bc:06:6e:0a:
30:07:18:0e:9d:c4:cd:09:f2:d1:38:9d:2c:46:a7:
1c:62:7f:1e:43:a5:6b:13:dc:86:19:3f:c3:ec:6d:
00:56:2a:30:bd:f7:7f:6f:79:e5:cd:c8:80:fc:40:
e1:8f:2e:c5:89:c0:ea:37:28:7e:3c:20:52:b7:ad:
a6:98:78:f2:34:1f:ec:b6:84:ab:e7:96:22:06:00:
c7:58:75:01:2e:e2:16:3c:ce:0f:14:41:7e:9a:5b:
d0:4c:e3:8c:59:6e:bf:f9:08:6d:20:61:70:fe:ae:
0a:b1:9b:ef:6e:cb:17:1c:99:4d:83:77:a4:73:cb:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AA:57:4B:51:1C:29:1B:7C:FA:E9:19:5B:DD:09:E0:03:86:02:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/kapXS1EcKRt8-ukZW90J4AOGAsA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.225.0/24
IPv6:
2a11:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
57:67:19:48:50:82:2d:23:09:a7:9a:df:8a:09:f7:7b:68:b2:
61:93:f0:d7:d5:8c:9e:ae:7c:00:1c:f8:03:b3:a4:0c:5c:da:
3f:0d:93:dd:db:5d:9a:d5:78:6d:0d:f5:2a:d2:cf:90:82:9a:
62:4c:d6:ee:97:52:3e:87:c3:d9:cf:f7:6b:4f:d2:50:c7:0c:
59:2b:8b:0c:e8:e6:0f:43:14:12:bd:b0:af:6c:b6:86:7d:db:
c9:b1:be:bd:d5:d7:d7:ea:9e:0e:c8:79:ee:0e:75:b9:7f:9f:
c2:b3:4b:7e:7a:9a:4e:a0:a9:d3:4f:21:39:1a:08:f0:61:3a:
92:8f:94:de:73:bd:16:01:7d:bb:78:6e:2c:53:f9:7f:56:10:
f3:04:4d:de:f9:41:7f:48:ec:3e:25:c1:b2:d1:74:50:f3:97:
a2:b4:b8:33:8b:15:78:c4:05:59:56:b9:39:b1:6a:f1:e8:7d:
8e:e8:2c:d3:1f:a4:b2:e9:b9:73:4f:62:ad:74:2c:1d:02:ac:
be:af:78:da:16:d4:77:af:59:b1:25:c2:5d:ec:2c:3f:5a:46:
ab:3e:79:ed:b3:99:9d:01:47:29:ee:16:b8:77:2f:72:68:eb:
27:ca:de:75:7d:69:ae:da:c3:9b:db:3e:b0:49:a9:0a:5d:a0:
1f:13:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:53 2024 by rpki-client on console-ams.rpki-client.org