Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
File: ksccIHipHnbA5abTAJaHLJIsnNw.cer (raw, json)
Hash identifier: hvBBHZYe5fw9oclepU83ePakt+hyyi9QhyN6coXlSgE=
Subject key identifier: 92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019192BBDA0A9A669D2488A4DE30F75A3A13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Aug 2024 07:27:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50564
IP: 45.131.28.0/22
IP: 94.158.252.0/22
IP: 185.44.24.0/22
IP: 185.95.124.0/22
IP: 185.104.236.0/22
IP: 185.143.136.0/22
IP: 185.182.124.0/22
IP: 185.184.0.0/22
IP: 185.208.20.0/22
IP: 185.213.48.0/22
IP: 2a04:9900::/29
IP: 2a07:3580::/29
Validation: Failed, certificate revoked on Thu 03 Oct 2024 09:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:bb:da:0a:9a:66:9d:24:88:a4:de:30:f7:5a:3a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 27 07:27:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:f0:8a:2b:73:89:99:aa:ba:25:4e:00:20:
6c:0e:4c:c9:fe:42:c3:65:af:90:2c:8c:41:f3:86:
95:7c:40:21:80:7d:24:d3:f4:f3:e1:8e:4b:f2:e3:
2c:a2:66:04:f7:13:42:1f:b2:cb:72:f1:84:2f:46:
9c:ed:8a:db:76:04:bb:2e:c4:49:a1:90:68:27:66:
7f:d0:73:e3:08:00:cb:13:d7:3e:66:df:a2:eb:fe:
d9:17:0d:4f:23:e6:62:ac:eb:52:87:42:b1:f0:62:
9d:17:d7:54:f3:99:06:58:3b:65:ea:57:50:f8:65:
60:86:26:4e:2f:17:d8:2b:66:9f:cd:ea:6d:89:ec:
5a:af:89:88:4c:6f:43:3c:09:66:1e:3a:38:d6:02:
7a:aa:60:a7:4a:e3:8f:51:ec:c5:37:55:c8:88:01:
a5:91:68:2f:77:ab:65:f0:47:49:2d:e9:fb:19:25:
b8:32:a6:ab:05:1a:ec:74:61:00:21:63:6f:f6:21:
40:63:b0:40:0c:c9:17:a7:0c:c3:73:36:bc:2b:0b:
3f:7b:bc:6f:2e:de:89:fa:ac:59:19:46:4e:9d:2d:
65:4a:46:e7:ac:e2:a0:66:e4:65:ed:a1:10:a5:a1:
df:23:02:ee:d5:1d:a8:e3:77:d8:22:a1:d7:44:d3:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.28.0/22
94.158.252.0/22
185.44.24.0/22
185.95.124.0/22
185.104.236.0/22
185.143.136.0/22
185.182.124.0/22
185.184.0.0/22
185.208.20.0/22
185.213.48.0/22
IPv6:
2a04:9900::/29
2a07:3580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50564
Signature Algorithm: sha256WithRSAEncryption
9e:df:73:c2:2b:fb:ec:73:04:9d:b7:10:13:f4:61:26:8a:e9:
ee:b6:60:8b:12:99:ac:68:41:ac:af:41:88:29:a5:e7:f0:ca:
de:65:14:e0:68:b4:8a:48:92:89:96:3d:27:c4:4a:04:aa:45:
27:f1:ac:7c:95:f5:fa:59:64:37:71:b9:46:08:a6:98:24:a7:
52:19:40:aa:e8:19:2f:ba:ab:b7:00:54:f5:0b:18:03:83:f9:
8c:5e:7b:7d:2c:f8:cd:ca:d5:4e:51:9a:ca:49:72:91:6b:ac:
ad:39:bb:48:8d:89:78:34:a1:94:ea:9e:21:1f:e9:de:95:aa:
1d:59:ad:6a:9f:00:55:9d:70:4e:d6:50:a5:e7:df:19:46:3b:
92:65:8e:3a:cf:92:7d:43:aa:81:07:c9:cd:6b:1e:08:34:26:
65:8c:83:c1:63:21:aa:60:8e:33:91:f6:a5:87:90:94:84:e1:
a9:06:a5:ae:fc:e6:ec:66:e3:43:45:a5:4c:ca:5c:56:fa:56:
f7:cb:43:ee:85:a5:f4:fd:72:24:d3:0e:de:39:f6:7f:3d:0c:
ef:c6:c2:ab:b4:ff:aa:a7:29:c4:d6:d9:f3:0e:7c:9e:35:22:
1c:92:cd:4b:58:35:4d:12:d8:94:de:23:e5:01:c1:3e:59:f1:
97:d2:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:31 2025 by rpki-client