Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kt80tkeC2G43Hj_qAlv1qh3qLps.cer
File: kt80tkeC2G43Hj_qAlv1qh3qLps.cer (raw, json)
Hash identifier: 3Z6r4SZed3zrsPw/q+/Il9uz8mE9qn/ek7E66wfhab8=
Subject key identifier: 92:DF:34:B6:47:82:D8:6E:37:1E:3F:EA:02:5B:F5:AA:1D:EA:2E:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF5123CAA909953EE4D02B0AB081E89
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/kt80tkeC2G43Hj_qAlv1qh3qLps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:04 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.35.230.0/24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 09:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:12:3c:aa:90:99:53:ee:4d:02:b0:ab:08:1e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92df34b64782d86e371e3fea025bf5aa1dea2e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:04:fc:47:d8:63:1e:00:d5:57:42:b6:c0:
0b:8e:5d:26:c4:96:a1:a9:6e:e8:35:0b:43:b1:1f:
24:f0:b1:04:49:ea:ee:b4:6a:45:ac:05:bd:49:8a:
38:2e:ed:06:c9:3e:89:aa:b3:dd:62:7b:4d:ca:b1:
e8:7e:08:81:d2:ee:d5:c5:13:04:c8:8d:6d:de:12:
be:7b:0c:93:2f:88:a0:bf:9e:37:40:6c:76:2d:30:
4e:53:f1:f3:35:8b:3b:da:e3:77:93:bf:58:0e:87:
b2:f2:85:54:09:ed:aa:a2:98:1e:13:7d:b4:b1:83:
b2:bf:0b:73:07:c0:f4:65:ba:3b:89:da:dd:12:ca:
08:91:fc:1f:02:45:f9:dd:39:8f:80:96:84:99:f9:
57:2f:0c:c6:44:28:18:48:da:20:84:0b:8a:ab:ba:
dd:39:45:2c:e9:1a:60:b4:64:52:eb:96:8b:15:7d:
43:3d:e0:a2:a7:ba:f3:21:b2:01:44:e6:3b:95:f0:
58:c8:34:8b:55:4b:24:da:19:01:64:97:0f:1c:82:
87:d1:ff:c4:4d:3b:45:e6:c0:cd:8a:22:49:8d:da:
be:83:fa:11:67:c5:ef:b1:64:52:4d:a6:c6:08:f2:
a8:e7:a3:ee:3d:45:58:0b:de:4e:b5:6a:85:27:35:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DF:34:B6:47:82:D8:6E:37:1E:3F:EA:02:5B:F5:AA:1D:EA:2E:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/kt80tkeC2G43Hj_qAlv1qh3qLps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ba:9c:c8:65:94:43:00:71:4e:29:c8:a5:6f:75:db:7b:42:
70:61:93:7c:ad:47:f1:6d:4d:93:22:f3:92:10:99:88:fb:d1:
34:a5:76:bf:f2:3c:c6:1b:c5:44:82:10:bf:e3:ff:e0:55:50:
8b:5d:c6:90:34:d0:29:7e:5e:fb:95:b2:d1:0d:a0:d6:a8:e1:
ca:d1:32:85:63:7d:f7:95:48:95:9f:ef:16:c0:f6:3c:69:71:
91:05:b9:31:81:9f:f5:2f:67:cb:01:d7:c2:af:79:15:5f:9b:
4f:cd:d5:ca:73:5a:14:a6:dd:93:e1:8f:bb:38:9e:b7:ea:1a:
6a:98:af:8e:09:19:ed:52:5b:e0:45:71:5d:96:56:89:d8:b1:
02:50:34:af:aa:93:ce:61:3f:87:2b:dd:c8:13:01:d6:09:d7:
7d:9c:f6:c8:6d:97:04:e1:57:08:4b:62:d6:d0:04:a1:fc:95:
98:c0:89:69:e4:e0:38:27:02:1b:b8:e3:8f:2f:3f:d1:47:bd:
56:66:53:69:4f:2a:2a:30:3d:ff:76:e3:6b:f5:46:48:c4:4b:
5a:f2:80:23:3c:32:eb:58:9c:28:34:39:fc:e4:1b:d2:55:3f:
66:51:11:c8:00:84:08:e6:a5:c4:38:32:e3:9b:c4:8c:07:88:
aa:75:1f:0f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVq9RI8qpCZU+5NArCrCB6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmRmMzRiNjQ3ODJkODZlMzcxZTNmZWEwMjViZjVhYTFkZWEyZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MgE/EfYYx4A1VdCtsALjl0mxJah
qW7oNQtDsR8k8LEESerutGpFrAW9SYo4Lu0GyT6JqrPdYntNyrHofgiB0u7VxRME
yI1t3hK+ewyTL4igv543QGx2LTBOU/HzNYs72uN3k79YDoey8oVUCe2qopgeE320
sYOyvwtzB8D0Zbo7idrdEsoIkfwfAkX53TmPgJaEmflXLwzGRCgYSNoghAuKq7rd
OUUs6RpgtGRS65aLFX1DPeCip7rzIbIBROY7lfBYyDSLVUsk2hkBZJcPHIKH0f/E
TTtF5sDNiiJJjdq+g/oRZ8XvsWRSTabGCPKo56PuPUVYC95OtWqFJzXFAwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJLfNLZHgthuNx4/6gJb9aod6i6bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzM2NWVj
OS02NzkzLTQxODgtYWI1YS00ODQ1NGEzZjRhYmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvMzY1ZWM5
LTY3OTMtNDE4OC1hYjVhLTQ4NDU0YTNmNGFiYS8xL2t0ODB0a2VDMkc0M0hqX3FB
bHYxcWgzcUxwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwSPmMA0GCSqGSIb3DQEBCwUAA4IBAQAEupzI
ZZRDAHFOKcilb3Xbe0JwYZN8rUfxbU2TIvOSEJmI+9E0pXa/8jzGG8VEghC/4//g
VVCLXcaQNNApfl77lbLRDaDWqOHK0TKFY333lUiVn+8WwPY8aXGRBbkxgZ/1L2fL
AdfCr3kVX5tPzdXKc1oUpt2T4Y+7OJ636hpqmK+OCRntUlvgRXFdllaJ2LECUDSv
qpPOYT+HK93IEwHWCdd9nPbIbZcE4VcIS2LW0ASh/JWYwIlp5OA4JwIbuOOPLz/R
R71WZlNpTyoqMD3/duNr9UZIxEta8oAjPDLrWJwoNDn85BvSVT9mURHIAIQI5qXE
ODLjm8SMB4iqdR8P
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:57 2024 by rpki-client on console-ams.rpki-client.org