Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer
File: kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer (raw, json)
Hash identifier: Ih6wu8UnbXUBg+yG8WT/wzVakHocjs3gb7KzdgYg7AQ=
Subject key identifier: 92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701DE73B667B7EC04FE2C28CC6D725B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.178.156.0/23
Validation: Failed, certificate revoked on Fri 30 Jun 2023 04:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1d:e7:3b:66:7b:7e:c0:4f:e2:c2:8c:c6:d7:25:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9237925190bfea65e92f829e4f67f7f8a46d2ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:87:d6:36:69:83:64:0f:71:27:bd:84:9b:
72:d8:9d:e8:10:2a:35:d3:70:51:39:75:77:d3:6d:
6f:b0:5d:18:06:e5:cf:17:81:91:a5:85:d9:2e:aa:
bc:1b:2d:ea:b5:62:cc:bf:8c:b3:38:ec:a9:da:2b:
7a:67:64:68:26:5c:f2:ad:09:05:89:0f:cc:e5:19:
24:16:af:5a:8e:97:89:7c:27:79:1f:bd:50:65:ef:
56:da:5d:b9:6a:ea:49:17:97:27:73:5d:80:56:72:
6f:1c:e4:bc:36:6e:bf:50:5d:6a:57:ae:70:e3:48:
cf:03:b2:aa:79:70:e5:14:2d:a9:11:4e:d4:0d:ae:
ff:7a:94:34:a8:ed:61:9b:45:e6:86:de:90:0c:4c:
fe:60:5e:b0:fa:ae:58:e2:b4:10:6e:14:e8:ff:58:
ea:77:17:23:56:8a:4e:2b:69:77:0a:cf:6c:de:2d:
1b:07:c1:02:15:a5:e4:6e:6f:5e:33:d2:b9:ce:dc:
86:91:35:30:cb:ef:f9:1f:85:32:e3:72:60:1d:22:
d8:b3:df:de:3e:f1:d6:b2:6c:7f:85:06:ec:0a:58:
82:24:43:cd:3e:80:11:e0:09:f1:ef:d7:8a:2f:58:
c6:55:10:3b:8c:5a:21:0e:3b:5d:e3:3a:ae:40:29:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.156.0/23
Signature Algorithm: sha256WithRSAEncryption
54:21:85:cb:2b:8c:68:da:9c:cf:e4:89:9f:d7:e3:fa:df:64:
18:7d:ab:99:41:6c:a5:15:6b:0e:63:ac:cd:58:f0:6a:ca:42:
6b:6e:6d:88:7f:71:2a:6f:cf:55:db:1b:4a:6c:5d:a9:ae:ca:
80:72:e7:33:ab:13:7c:fc:fa:c9:e7:b6:6c:8c:66:11:5e:a9:
36:9c:c5:3c:73:c9:05:c2:a8:10:e6:1f:cf:f2:18:44:d2:ac:
c6:9b:5e:1b:d7:a7:da:48:51:c9:fc:66:f8:e2:b4:07:f2:44:
4d:a1:45:58:db:13:a1:0b:c8:bd:17:f4:5b:3e:42:f2:56:e3:
cd:4f:23:9e:11:ce:ed:4d:06:5b:c7:a3:36:6a:bc:74:a1:8f:
d3:91:87:a4:c7:8d:bc:3b:e0:ea:7a:67:36:0d:c3:8c:cf:8f:
61:c6:c7:cd:69:90:07:05:0a:6d:7d:6e:d8:3b:a0:df:07:1e:
3b:d3:90:c3:15:72:e3:25:9e:dc:b9:95:e1:6e:10:e4:67:0b:
aa:a7:8a:fb:c6:9a:fc:2e:9b:0d:f9:6c:26:c3:d5:32:1a:ea:
60:9b:59:ad:7c:e0:fa:c0:34:79:8b:bc:83:8c:3f:48:d0:34:
e2:71:87:64:71:a0:dd:69:63:86:6b:6b:0b:06:00:b7:eb:88:
f0:86:d6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:00 2024 by rpki-client on console-fra.rpki-client.org