Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kvsocWXNMI8Ch96YTSGyFjzQMSw.cer
File: kvsocWXNMI8Ch96YTSGyFjzQMSw.cer (raw, json)
Hash identifier: 23+C9xtLboratCnHfxHE2xWk3xi3YR5WjPS4/uLGT/U=
Subject key identifier: 92:FB:28:71:65:CD:30:8F:02:87:DE:98:4D:21:B2:16:3C:D0:31:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708AA9CA3D5A9DDF81EEBB81C4DA82AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/kvsocWXNMI8Ch96YTSGyFjzQMSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:33:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.161.88.0/21
IP: 193.161.248.0/22
IP: 194.187.0.0/20
Validation: Failed, certificate revoked on Mon 26 Jun 2023 10:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8a:a9:ca:3d:5a:9d:df:81:ee:bb:81:c4:da:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:33:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92fb287165cd308f0287de984d21b2163cd0312c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:ef:cc:38:5a:08:e8:4b:c5:18:d0:a9:6c:
ec:28:7e:1e:67:5b:ce:b5:f4:04:49:a5:f2:3c:8f:
cd:7a:05:b7:29:63:06:2b:d8:12:ef:4d:06:11:4c:
f1:ee:8f:09:0c:1c:4e:a6:8e:66:32:17:0b:5a:9a:
f9:9d:e0:6a:89:d8:84:67:8e:69:2a:cd:a3:2c:b1:
6d:6a:f3:70:32:33:78:6c:63:03:60:49:67:28:92:
bb:58:31:2d:fe:36:16:0f:d2:ee:ce:11:c9:ce:05:
2a:a1:e8:f8:22:a4:93:a2:ff:1b:9d:1b:0d:f0:ba:
f5:6f:86:ec:c9:54:12:b1:a8:f0:49:7b:85:01:db:
53:ed:0e:a7:b6:01:96:4a:60:21:78:fd:6c:ed:4f:
60:62:c2:0a:46:2f:ee:98:0c:32:27:18:fa:b4:75:
23:24:de:a5:38:27:c5:15:e3:ba:39:de:7a:e0:e7:
a5:1f:b6:b4:aa:a4:aa:5a:93:40:cc:7a:3d:60:6e:
2d:92:47:b9:d2:43:2d:a4:10:35:72:e7:52:8f:85:
22:79:d0:7e:e7:08:96:69:9b:c4:cc:0f:6a:23:65:
42:5a:96:ed:7a:ac:41:06:28:c0:2f:53:09:a2:22:
a1:60:de:d7:fa:90:43:29:b2:55:2f:c0:78:3d:5e:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:28:71:65:CD:30:8F:02:87:DE:98:4D:21:B2:16:3C:D0:31:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/kvsocWXNMI8Ch96YTSGyFjzQMSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.88.0/21
193.161.248.0/22
194.187.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:ba:b6:c3:89:8e:6c:c8:07:1b:ff:e5:89:24:b8:f1:ad:55:
0f:ec:1a:bc:c9:c6:ea:9c:4d:b2:9d:71:50:70:59:54:33:a7:
03:8d:4b:c6:e8:54:9a:83:ed:2b:f6:55:36:27:15:53:88:71:
c4:2f:2e:96:cf:65:71:37:1e:ea:4c:ca:63:1a:fb:66:53:ff:
13:65:cf:90:ef:9a:12:bf:13:3b:df:6d:c7:33:d4:29:cf:f1:
47:69:b9:0e:c2:38:22:24:61:e7:e3:33:7a:c0:5c:bd:c8:4d:
87:f5:d8:0b:be:a6:55:1f:4f:f7:e2:a6:25:31:fa:de:0d:da:
f2:75:2a:a5:ea:72:33:15:c5:02:e2:19:90:f0:e8:4e:4b:64:
6a:fd:3e:98:21:36:c6:0e:c7:c4:8c:af:ab:cd:f9:68:f6:ea:
4e:91:9a:46:22:7f:9c:c6:9b:96:34:08:d1:7b:66:6a:13:73:
fb:30:f8:d2:ed:ec:72:e7:b5:5c:9e:3d:41:21:a1:82:62:a4:
c4:40:8c:b9:4d:88:63:e1:b8:f1:30:cd:3d:41:32:74:fb:56:
e5:5e:a4:e8:7c:50:e6:b5:c5:d8:7a:d5:8c:b9:97:f4:4e:0c:
69:29:f7:f2:33:50:de:cd:4b:15:5d:bf:35:e7:bc:0a:b4:a3:
0c:03:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:02 2024 by rpki-client on console-fra.rpki-client.org