Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ktP600SgFD9Ksyjp61-LeJX51nI.cer
File: ktP600SgFD9Ksyjp61-LeJX51nI.cer (raw, json)
Hash identifier: 4WYlqVTqwbqaljLcVhJaTZNErXVx4cggPPnnpDo48RY=
Subject key identifier: 92:D3:FA:D3:44:A0:14:3F:4A:B3:28:E9:EB:5F:8B:78:95:F9:D6:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED2CF358D6FD2BC36D5767EF268191A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/ktP600SgFD9Ksyjp61-LeJX51nI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:33:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.231.168.0/22
IP: 2a0c:6f00::/29
Validation: Failed, certificate revoked on Fri 27 Oct 2023 13:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d2:cf:35:8d:6f:d2:bc:36:d5:76:7e:f2:68:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:33:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92d3fad344a0143f4ab328e9eb5f8b7895f9d672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:47:16:cf:96:f9:36:02:77:dd:e8:d0:26:
86:52:68:83:5c:69:44:e8:28:d3:d9:6c:e4:38:5a:
d8:07:94:13:9b:b1:1e:d8:84:15:de:d5:35:7f:be:
2f:3a:6e:2c:a4:69:24:ec:89:fb:b0:f4:ce:a3:91:
74:b4:af:78:29:ed:e9:93:0f:b6:dc:9a:93:4b:ca:
27:f8:3e:83:b8:fc:1f:17:02:6d:6c:80:0a:13:49:
d1:fe:13:8d:5e:1c:46:d0:46:93:ed:e9:6b:c4:da:
30:57:88:60:a1:4f:23:f4:4b:78:ac:38:de:96:94:
61:11:32:bd:8c:12:69:45:dd:cf:78:1c:fd:a4:50:
74:b1:a6:21:b5:42:55:15:d8:5f:44:fa:13:0f:be:
6c:d4:c1:e8:03:3e:31:b1:21:04:3c:30:ad:10:35:
9e:5d:42:e0:b4:ec:f0:6d:3f:e4:a8:ab:20:af:ca:
32:dc:b8:24:55:68:19:4a:06:a9:24:df:43:c3:47:
f7:9b:98:d7:7b:25:c6:3a:b1:c4:f6:a3:b9:d7:44:
06:70:95:4c:8a:d7:76:d8:63:1a:54:50:46:3a:b7:
bb:e9:d4:8b:8b:56:8a:7e:81:d2:30:58:eb:8a:06:
7c:8e:6a:65:98:49:b2:3d:51:e3:5d:45:4d:81:c7:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D3:FA:D3:44:A0:14:3F:4A:B3:28:E9:EB:5F:8B:78:95:F9:D6:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/ktP600SgFD9Ksyjp61-LeJX51nI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.168.0/22
IPv6:
2a0c:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
8b:ef:d6:7a:df:c0:5d:bc:1f:d4:e7:fc:c9:12:11:92:cc:52:
a2:07:68:d4:9d:3e:d3:cc:2b:59:30:7f:8b:29:33:05:49:0b:
e3:97:78:e6:78:ce:97:ba:77:c2:77:e0:6c:2c:f2:e1:72:f9:
83:8f:30:69:ee:27:c6:3b:1e:fe:1e:c8:d8:c7:8d:bd:39:67:
1a:99:96:95:06:fd:d1:47:33:88:fe:79:d9:10:d3:24:06:91:
ac:48:e4:43:e0:9b:ca:d8:fc:90:27:b3:e2:a1:bc:50:7b:f8:
e3:39:6d:a9:39:04:d3:3b:72:aa:58:81:4d:41:1d:38:40:79:
b9:e5:e9:84:68:1f:d5:56:2a:20:c3:01:f8:6d:f4:b6:98:75:
6e:48:7d:c1:12:fe:44:49:7a:4f:d2:f3:ea:8b:0b:ce:1f:85:
6e:ac:81:8f:d7:02:72:3d:2c:56:9e:2f:49:b5:51:b5:c7:96:
08:e4:e5:fa:b3:60:97:17:dc:f2:30:ca:a6:04:9d:3d:83:a2:
2f:09:b2:56:05:78:b1:ab:e5:48:13:fa:9d:db:b1:e8:f8:9d:
fb:72:cd:d1:9f:8c:b0:09:9b:24:16:70:90:61:20:3a:00:91:
24:c8:ed:ca:c6:f4:f1:7b:1c:8f:fc:76:79:1c:be:3b:8b:0d:
a6:c7:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:01 2024 by rpki-client on console-fra.rpki-client.org