Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
File: khwusBZMGDkAMMXnBcSjR5FQ354.cer (raw, json)
Hash identifier: iKQ7gv94VukCL1IMZUv84GSpScVmQzEsYys/C9vgaGo=
Subject key identifier: 92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708C23D4D065BBE819888F4ACFD97D70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:35:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.62.88.0/24
Validation: Failed, certificate revoked on Sun 18 Jun 2023 13:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:23:d4:d0:65:bb:e8:19:88:8f:4a:cf:d9:7d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=921c2eb0164c18390030c5e705c4a3479150df9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d1:80:76:c0:47:85:ea:df:f3:20:31:6c:09:
d2:86:97:be:de:5e:b4:d0:0b:36:25:3f:f4:54:88:
20:ab:36:0c:29:0b:0a:42:01:19:f1:be:05:b8:fe:
b2:94:90:3b:7d:eb:64:f0:7f:b3:08:c2:13:3d:23:
06:fb:68:82:26:01:c4:df:0e:b4:30:7f:4b:b0:29:
ff:06:4f:03:14:0f:f0:45:8c:67:5a:f6:36:f5:72:
79:c8:c1:81:49:a1:29:f8:83:12:a4:22:f7:21:f7:
ca:6c:dd:d5:af:9b:da:0f:ab:3e:16:d8:41:4c:11:
46:ea:91:10:9e:ef:bf:2f:c1:a5:76:de:9f:9d:ad:
17:5a:57:81:c1:08:3b:62:87:41:47:2d:c8:3a:48:
35:d2:7f:45:24:b3:96:3e:0f:29:de:51:db:37:fc:
6d:fb:c0:7b:23:36:2d:6a:9f:00:bc:2b:0f:a7:dd:
33:54:6d:9f:80:db:0a:aa:0d:fd:db:dc:01:e7:4a:
f5:b6:67:fb:10:dd:24:1d:10:fa:2c:ea:85:20:d3:
07:69:d2:c7:63:05:b6:a6:66:f9:3f:47:d7:98:94:
68:df:64:d5:e7:ad:7f:7d:d7:be:ac:e9:2c:1f:be:
57:9f:0e:da:b3:2d:d3:07:2a:5b:b8:74:1f:03:2c:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a4:a2:d5:8f:b5:9e:7b:5b:a0:48:20:b1:a7:47:df:93:9b:
88:7c:26:eb:86:16:5b:fa:a3:97:72:80:8f:c0:cf:0c:18:a1:
f4:c9:3d:f6:2b:20:30:1a:70:4c:fb:2a:17:9f:3b:ab:78:6e:
15:f4:22:30:27:1f:8a:ab:cc:52:93:ca:13:d3:c4:dc:f1:c3:
e1:a5:41:7f:59:9a:99:c0:41:0c:60:8c:de:2e:a5:0d:1e:5e:
de:d6:90:4d:80:9a:b5:ca:26:36:b2:df:c1:da:bb:1f:ec:52:
0a:a7:a2:85:13:22:18:58:f8:57:cf:58:f4:1f:6e:bc:cb:4a:
6d:a6:a4:47:6e:86:9f:87:a1:aa:9e:ce:c6:d4:b0:f4:e6:62:
ae:7f:5c:ea:9a:2b:82:f5:39:66:66:fb:12:8f:0e:98:07:01:
7f:dd:3a:c6:20:f0:75:eb:ca:4e:4e:b3:9c:33:a2:61:7c:82:
d7:21:a0:43:fb:25:30:22:91:72:16:24:3c:14:33:48:20:40:
5d:0a:6a:eb:c2:f5:4d:76:9b:b2:1e:54:ad:f7:c4:f1:26:da:
13:0b:a4:55:8d:7b:0e:91:8d:79:98:13:f8:97:f9:5f:dc:6e:
f1:00:b9:29:30:79:47:ac:5d:13:49:ff:52:fd:8b:ad:e3:0c:
56:62:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:54 2024 by rpki-client on console-ams.rpki-client.org