Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
File: knVdes6gANSuZhAaxf36yBxnfvw.cer (raw, json)
Hash identifier: jkSCfLCkHDFGQui1ySsiaOvLJ2iKdZ2SkTPmZ4Dcib8=
Subject key identifier: 92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B635470061EA643731A08A69AB9DC92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.144.156.0/22
IP: 185.159.72.0/22
IP: 185.181.8.0/22
IP: 185.227.108.0/22
IP: 185.247.116.0/22
IP: 193.168.172.0/22
IP: 194.37.80.0/22
IP: 2a07:3b80::/29
IP: 2a0a:b880::/29
IP: 2a0c:a600::/29
IP: 2a0c:c040::/29
IP: 2a0d:be80::/29
Validation: Failed, certificate revoked on Tue 17 Oct 2023 11:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:54:70:06:1e:a6:43:73:1a:08:a6:9a:b9:dc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:79:36:10:69:b1:25:cd:9d:4c:c4:be:eb:
d0:e6:dd:0c:95:32:88:ef:d5:8d:e0:10:06:74:ea:
39:24:d0:95:02:bc:67:35:9c:e8:c3:04:05:59:ee:
17:32:0c:bc:1b:b1:65:d5:4b:fb:60:e4:df:34:9a:
fb:f8:02:a4:23:fe:ec:81:47:69:5a:7b:06:34:f8:
9c:17:ae:b6:bb:c1:5d:3a:52:66:3c:b0:ea:37:79:
e4:5b:9d:8c:97:bd:ba:40:42:2e:6f:69:29:50:5a:
b0:70:62:ab:c7:ee:7f:2e:32:63:6f:8d:3f:1a:5a:
ca:f0:8e:3f:32:72:7b:be:5e:9b:48:6b:e7:a4:13:
e1:e3:3b:18:96:23:c8:73:73:2a:91:c6:9f:e2:a4:
90:96:f4:09:fb:c8:4f:c2:95:82:fc:e8:5c:ef:56:
b5:0e:f2:be:c0:91:fe:fd:1c:0d:33:e5:5c:d3:c1:
ee:b5:ad:7d:0f:20:30:67:d4:1c:18:f1:d5:ca:3b:
de:4b:e3:03:6e:f4:0f:4f:76:08:33:65:1a:f2:c2:
d5:e5:eb:09:5e:14:4c:02:c2:39:aa:b0:43:a4:70:
01:1c:66:16:1f:bb:74:ee:a2:43:91:36:57:47:62:
ec:44:ee:91:f2:12:66:94:07:cd:0d:c3:68:00:73:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.156.0/22
185.159.72.0/22
185.181.8.0/22
185.227.108.0/22
185.247.116.0/22
193.168.172.0/22
194.37.80.0/22
IPv6:
2a07:3b80::/29
2a0a:b880::/29
2a0c:a600::/29
2a0c:c040::/29
2a0d:be80::/29
Signature Algorithm: sha256WithRSAEncryption
91:12:6d:13:5b:ee:48:28:a1:bd:db:b5:47:81:84:e3:20:79:
90:10:a2:1e:d8:db:2e:3b:a9:e0:03:7d:ed:32:7a:16:93:b3:
3a:dc:08:7e:9e:85:c7:84:c8:5b:04:4b:f2:4d:4c:a2:74:5e:
8a:91:27:e1:e3:d3:fb:87:10:0e:59:30:a0:43:0c:6e:8e:d1:
85:3b:89:52:09:ad:27:29:10:e0:58:b8:8f:3c:52:c9:e8:cf:
96:eb:61:e6:5f:39:92:30:e8:d1:18:5c:53:0d:dd:85:52:c6:
7f:50:eb:38:6e:c0:51:0d:68:87:02:09:f4:fc:34:14:7b:3c:
36:14:e0:e5:95:b2:7d:4e:76:e5:66:45:c8:ed:c1:9e:50:e9:
c9:fa:a0:53:96:67:32:e3:a3:5a:39:f6:69:f0:02:59:b9:1f:
a3:cf:0f:4a:60:f7:76:ed:38:1e:97:14:da:68:af:17:37:5d:
63:9e:0d:3b:00:de:95:28:62:9b:be:5d:a4:cf:93:45:61:ae:
d3:5f:8f:61:36:a6:09:9a:da:0a:31:f2:1e:32:f9:48:bd:31:
40:36:06:3e:3e:9e:dc:23:89:fd:91:be:80:71:19:ea:1b:48:
f0:fc:b9:1d:30:57:82:31:c5:67:03:ea:8c:8d:7f:ba:80:8a:
f4:f3:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:01 2024 by rpki-client on console-fra.rpki-client.org