Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kc3T6mojnUhtxBMEDhJCKJVPxNM.cer
File: kc3T6mojnUhtxBMEDhJCKJVPxNM.cer (raw, json)
Hash identifier: zqGkHwPdIaIanCDwWVKvDG4nliRFFrm0FkPXoBdITUM=
Subject key identifier: 91:CD:D3:EA:6A:23:9D:48:6D:C4:13:04:0E:12:42:28:95:4F:C4:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3489729B6084C577F6DAD973854FD53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/838124-173a-43d1-9b95-422b3f1dd761/1/kc3T6mojnUhtxBMEDhJCKJVPxNM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/838124-173a-43d1-9b95-422b3f1dd761/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.105.88.0/24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 09:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:97:29:b6:08:4c:57:7f:6d:ad:97:38:54:fd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91cdd3ea6a239d486dc413040e124228954fc4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:37:f6:0b:cc:cd:a6:d7:f9:25:e5:0e:a2:
26:69:91:11:29:2a:dc:09:9d:a4:8f:9c:a2:6c:a4:
41:95:4a:a5:ba:c6:f8:08:4a:58:9f:87:45:3a:2f:
76:9e:57:5b:a6:46:88:69:24:11:c6:a6:18:67:e2:
1b:94:b5:53:ca:ba:1d:cf:f7:b5:8c:8e:a2:43:f0:
49:f3:a4:41:a8:bf:ba:af:fc:21:11:cc:9f:f5:8f:
2f:09:ed:38:82:60:57:70:40:e8:3e:6e:6a:7c:3d:
8a:87:71:90:c6:52:a4:c6:fd:c4:af:92:6c:1d:9e:
fe:ed:06:f4:da:dd:df:dc:91:67:2f:84:ea:d6:88:
1e:3d:0a:7a:1b:a2:29:a4:8a:fb:14:d0:3c:e7:9a:
3d:d4:a3:16:36:d6:5b:3c:0d:45:72:78:01:a8:b1:
0d:ee:57:d8:7d:2a:76:30:df:c7:78:59:4c:8b:17:
b0:f0:93:8c:6c:07:bd:28:c4:92:97:8b:5f:b2:68:
f2:29:1d:06:e0:8d:64:04:06:ea:3f:70:64:8c:9c:
b8:e2:c0:18:6c:90:41:9c:f9:02:60:18:09:b1:8f:
2a:02:0f:3e:62:47:73:6b:81:0e:34:bb:6b:d5:27:
cc:e7:7b:56:bc:ac:73:24:85:28:ea:95:33:d0:aa:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CD:D3:EA:6A:23:9D:48:6D:C4:13:04:0E:12:42:28:95:4F:C4:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/838124-173a-43d1-9b95-422b3f1dd761/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/838124-173a-43d1-9b95-422b3f1dd761/1/kc3T6mojnUhtxBMEDhJCKJVPxNM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:51:46:50:04:60:af:de:b0:60:fe:84:74:b1:11:9c:c4:bc:
14:fd:7b:50:bc:79:19:0c:1b:60:03:1f:01:ab:59:a1:fc:be:
18:be:f0:2c:6b:16:6a:d4:25:27:dc:86:ba:e5:a5:ff:c1:9a:
f5:9e:c1:75:dc:ff:84:4d:60:d5:de:2b:57:98:a5:08:82:1e:
eb:31:3b:22:7c:4e:f7:30:21:b6:b5:35:ec:2f:1a:d1:14:ac:
1b:c0:c8:e2:5b:22:bf:d2:a7:60:fa:c3:af:11:d0:ce:24:fe:
69:71:7e:91:9b:e7:34:90:8a:f8:9c:59:c8:99:34:22:01:80:
a8:06:67:45:17:27:c5:c0:f2:d7:0c:40:55:89:5d:5f:9b:1f:
3e:bc:ac:64:59:14:c8:49:3d:4e:28:11:de:d4:bd:86:06:1b:
ea:6b:8b:2a:e1:8e:a0:9a:7b:f5:62:f7:d3:95:24:01:26:a6:
9a:a6:c5:44:ee:ab:2e:c0:60:c3:47:0c:17:1d:e3:85:ae:95:
ac:af:62:18:ad:b3:96:a6:fb:46:8a:d0:90:77:51:56:2a:26:
19:d5:27:49:28:21:e3:b2:c6:06:c6:90:d7:84:6d:be:de:5d:
76:0d:44:27:0f:c1:59:11:4d:76:b0:8c:8f:85:f4:64:3e:c1:
99:75:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:11:52 2025 by rpki-client