Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kcCKH7-8XdVXqYk6RlYFfZ3GuDc.cer
File: kcCKH7-8XdVXqYk6RlYFfZ3GuDc.cer (raw, json)
Hash identifier: 44wvQpRDr2Oz0IZicXSe9pnnk9xnu7FO8OuuBFkhn2g=
Subject key identifier: 91:C0:8A:1F:BF:BC:5D:D5:57:A9:89:3A:46:56:05:7D:9D:C6:B8:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190A419EAFDE5DE42B6F009D51BC73AE606
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae1184a3-fa2b-4f84-843d-195123eb056d/0/91C08A1FBFBC5DD557A9893A4656057D9DC6B837.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae1184a3-fa2b-4f84-843d-195123eb056d/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 11 Jul 2024 23:21:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215956
IP: 2001:67c:688::/48
Validation: Failed, certificate revoked on Sun 25 Aug 2024 14:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a4:19:ea:fd:e5:de:42:b6:f0:09:d5:1b:c7:3a:e6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 11 23:21:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91c08a1fbfbc5dd557a9893a4656057d9dc6b837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:d0:de:22:31:0d:76:54:9c:1c:49:4e:02:
0b:6b:1f:8d:50:9d:94:dc:e3:c3:b2:a8:a5:ce:c3:
dc:22:ee:b6:22:28:ad:6b:91:7f:9a:4e:0b:d0:23:
5a:72:c7:58:86:2f:fb:a4:9b:33:c7:10:31:90:ec:
3d:5e:16:b7:89:c3:02:57:d6:d4:f6:28:9d:58:4f:
ee:66:ce:9b:17:5f:47:ed:c2:f6:af:28:fc:9f:7c:
04:b4:3c:40:d2:06:8f:d3:32:75:e7:d2:55:78:77:
19:4a:d4:96:71:ed:6f:dc:90:7b:17:ff:64:9b:b8:
dc:df:4b:f2:b7:8d:a1:e8:5d:13:df:2f:4e:f0:32:
47:e3:59:91:ca:3a:38:9c:cc:85:07:9b:aa:4a:27:
a6:3b:dc:b8:51:8b:18:38:ee:39:32:3a:79:f0:b2:
53:86:81:a5:ef:8d:ef:bc:51:ce:64:2f:3d:e8:e2:
9c:c5:0c:62:0a:e6:e7:13:51:f8:d5:e0:98:2b:80:
70:10:65:24:36:88:82:09:3f:0e:ff:f6:33:6c:f7:
7b:b8:3e:d6:95:1c:a0:a0:47:09:58:18:df:cc:9c:
81:78:50:ad:00:ea:74:33:d3:91:cf:aa:3f:57:7a:
35:00:2e:2d:47:50:1e:24:28:c9:72:57:a9:ee:0b:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:8A:1F:BF:BC:5D:D5:57:A9:89:3A:46:56:05:7D:9D:C6:B8:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae1184a3-fa2b-4f84-843d-195123eb056d/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae1184a3-fa2b-4f84-843d-195123eb056d/0/91C08A1FBFBC5DD557A9893A4656057D9DC6B837.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:688::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215956
Signature Algorithm: sha256WithRSAEncryption
56:14:50:41:d0:e4:4e:58:e8:8f:73:b1:7c:ae:1d:5a:07:67:
df:a0:da:74:ce:33:61:22:7e:27:7e:0e:72:a0:df:50:cc:3b:
e9:74:e4:2e:e9:47:7d:13:14:74:97:b1:6e:cd:7e:2d:a7:93:
a1:d4:73:08:16:69:1e:c7:5e:82:c2:18:36:fe:9a:34:aa:74:
06:66:05:c0:99:b9:b5:f4:8e:b1:21:46:e5:91:af:d8:34:8c:
f5:ec:10:f8:00:8a:bc:2c:90:f5:7a:ee:e5:be:d9:4c:70:ce:
6c:7b:d9:62:2a:f6:14:6f:e5:b2:96:36:ea:94:26:6b:d9:c4:
4c:ac:ce:eb:48:85:81:cc:dc:c5:d2:02:dc:3c:cc:4b:95:67:
d2:9a:a6:e8:a6:76:82:63:15:94:14:77:b8:4b:6f:5b:66:76:
68:90:59:f6:9f:a0:0b:11:2e:3e:2d:a5:97:0b:d0:6f:73:a2:
96:91:90:71:7a:d9:b0:9e:dd:24:fc:89:ab:f1:5b:e5:d7:2c:
25:4f:a5:cb:b5:2b:23:4a:48:19:b6:a6:fd:48:36:09:e7:14:
e4:e8:64:09:01:38:79:33:cf:d4:3d:06:e3:aa:6f:0a:a6:ba:
fd:39:10:2f:e3:2f:52:c8:8e:0f:83:6a:4b:1b:95:30:53:15:
83:7a:b0:96
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 25 17:41:48 2024 by rpki-client on console-ams.rpki-client.org