Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sKNxxYMduXBj4MwEvOC06bAGbM0.cer
File: sKNxxYMduXBj4MwEvOC06bAGbM0.cer (raw, json)
Hash identifier: mYeMrloqtfjGWgb2u/tpUAQlUsGJef33zp/j+rsleYo=
Subject key identifier: B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B88907D65BBA090ED9363348BD88CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/sKNxxYMduXBj4MwEvOC06bAGbM0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 93.177.107.0/24
IP: 2a11:fec0::/29
Validation: Failed, certificate revoked on Thu 08 Feb 2024 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:89:07:d6:5b:ba:09:0e:d9:36:33:48:bd:88:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0a371c5831db97063e0cc04bce0b4e9b0066ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:a6:db:df:67:92:b7:be:8d:2a:bb:28:20:
b7:fa:e2:cf:15:2c:ee:71:22:82:65:7b:b6:42:03:
06:0e:a4:be:53:6d:27:f2:2f:ea:e6:66:9d:38:62:
30:5b:a4:53:6c:1b:8e:ce:30:a2:bd:54:bb:de:3c:
41:71:de:e4:56:a5:09:17:f0:d6:5b:7d:73:bd:ca:
81:19:46:f8:88:0e:0c:f5:23:0e:1b:21:d5:1f:22:
65:9f:59:e5:9f:8f:94:fd:55:d0:6d:20:bf:d2:ce:
35:15:ec:0a:26:7f:43:af:3e:df:95:32:f9:0f:73:
7f:1c:6c:e7:0a:41:08:a6:04:82:32:3e:00:2c:47:
fe:fb:a9:ba:34:af:76:ac:16:c2:f3:f7:50:ab:dd:
fa:20:e8:0f:70:ea:fd:9b:22:a8:4a:5a:7c:ca:2a:
4b:c2:75:de:01:8c:14:81:35:ca:91:b7:41:7a:32:
ed:d9:f6:c8:d9:20:0f:55:39:05:b2:e0:d2:c0:48:
42:05:0c:07:b1:77:e4:c9:da:ed:17:d5:3b:4a:5a:
70:5d:58:c3:fa:7a:c6:ee:56:06:aa:05:38:9d:bc:
55:76:22:53:77:de:b9:3a:01:e2:75:3b:13:30:df:
3e:9f:e9:ce:5e:20:2b:f4:4a:18:ae:6a:97:0a:cf:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/sKNxxYMduXBj4MwEvOC06bAGbM0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.107.0/24
IPv6:
2a11:fec0::/29
Signature Algorithm: sha256WithRSAEncryption
05:26:c9:56:17:3a:22:6d:b7:7f:86:8b:a7:68:54:0d:64:e0:
51:5f:f9:1a:f9:1a:e5:ee:d3:58:2c:88:f8:f2:61:a2:08:9f:
33:3a:c6:df:09:b0:e8:b8:99:92:9a:3c:32:73:1b:2c:a5:ef:
59:9b:1f:62:cf:16:f0:26:25:a7:1d:6f:c0:f8:a7:58:af:d9:
b1:ce:9d:00:b3:6b:41:fe:0f:f8:d7:05:84:51:f8:1d:dc:34:
b7:9a:de:57:8d:15:2d:29:a3:19:58:e1:e7:cb:50:aa:4f:c2:
2a:4b:68:f4:23:74:9e:78:f9:a9:0f:be:6b:0d:d3:20:f9:c3:
f1:4c:01:dc:01:31:f2:4c:fc:ad:9d:ac:46:9e:ae:4f:c2:b4:
65:d3:bd:41:da:cb:22:05:68:e6:0f:b6:52:9b:29:fa:32:ca:
cd:d3:ca:7a:a1:51:01:c1:10:5c:d5:4b:59:05:47:f4:b9:45:
33:71:61:da:b8:42:57:41:54:ed:32:fd:e7:db:90:56:a9:70:
9d:53:78:cc:8a:2e:e3:80:e0:39:63:ce:3a:6f:76:27:02:7f:
83:e3:74:18:52:18:36:39:a0:f4:31:25:b1:6d:2d:bd:68:80:
a0:5c:b1:8a:ff:26:f3:3e:8e:7e:ed:a3:40:5d:a4:66:eb:ff:
de:21:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:50 2024 by rpki-client on console-ams.rpki-client.org