Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KBF9-rPlTTi1UzJZPMbJcUjVlVw.cer
File: KBF9-rPlTTi1UzJZPMbJcUjVlVw.cer (raw, json)
Hash identifier: bdx43mFY5256E3Pi59bd03m9a0ZQghevGJC82deXtZQ=
Subject key identifier: 28:11:7D:FA:B3:E5:4D:38:B5:53:32:59:3C:C6:C9:71:48:D5:95:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019661652837C400F6A8BDCD6B235B1E14DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Apr 2025 06:45:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205252
IP: 143.20.0.0/16
IP: 185.208.0.0/22
Validation: Failed, certificate revoked on Wed 23 Apr 2025 13:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:65:28:37:c4:00:f6:a8:bd:cd:6b:23:5b:1e:14:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 06:45:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28117dfab3e54d38b55332593cc6c97148d5955c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:67:b1:71:93:9d:fb:01:fd:15:c4:d4:c1:
52:9a:3d:a5:46:df:42:f9:59:ff:0d:13:4e:c0:8d:
2d:62:8c:a3:f0:96:bf:b4:9e:2d:2c:fc:29:64:2b:
e8:04:d0:a4:cb:84:43:34:83:5c:a8:b6:31:e5:10:
a4:ad:c2:90:ba:d6:1a:8c:63:46:dc:d3:f6:a9:0a:
f1:7d:3c:0b:21:70:4b:35:fc:bb:65:ff:8a:6e:0a:
a8:d5:79:e5:44:11:66:ab:87:75:96:d0:2f:ff:aa:
10:4f:57:c8:fa:c8:c5:f5:c4:67:9b:7f:62:99:5c:
be:cd:2c:68:0c:7b:10:68:d9:5f:71:8c:a4:bf:15:
b8:2e:c2:4b:94:5e:17:3c:da:5d:a3:44:da:2c:b5:
11:23:ea:de:f9:07:e6:0e:cb:ea:f7:17:99:dd:52:
c1:0f:8f:8c:95:3f:4b:c1:c5:a9:ad:59:9f:16:46:
81:bc:ce:7d:38:3c:8f:98:40:3e:ad:c8:ab:6f:a4:
9b:7b:9f:ac:48:3b:5e:7f:0c:91:2e:3b:5e:fe:de:
1f:4c:f5:5b:d5:87:ee:bb:8b:7e:04:37:0b:48:7c:
f1:23:ee:2e:d1:3f:c1:87:61:df:08:c5:e2:5b:26:
48:72:32:77:29:75:63:10:bc:66:03:32:2a:d4:f5:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:7D:FA:B3:E5:4D:38:B5:53:32:59:3C:C6:C9:71:48:D5:95:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.0.0/16
185.208.0.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205252
Signature Algorithm: sha256WithRSAEncryption
81:e7:ca:1f:25:a4:e1:93:81:7e:f6:e7:5d:c5:d5:4d:4f:fd:
63:b8:fe:5f:77:99:8a:c7:ae:f7:2b:c4:e8:d7:20:3d:da:53:
50:a7:c6:2a:56:8e:5d:77:7f:12:fe:26:76:31:3b:ba:25:dd:
4b:36:08:f1:82:93:ed:59:67:c6:e6:e1:0f:d4:a0:0f:05:3d:
95:59:31:bc:26:43:58:6b:c4:cc:78:a3:aa:48:a0:00:fc:13:
1b:ad:d9:fa:6e:8b:a1:43:f3:12:5f:77:cf:e2:97:7f:69:33:
d7:d2:8a:ee:46:f3:a0:58:19:4f:51:7c:42:f8:0c:d0:d8:f8:
66:e6:ee:06:e5:4a:95:ce:05:f2:a8:a7:26:bf:73:91:9b:53:
d3:b3:7d:bb:59:e1:18:c5:5f:e6:4e:76:d3:78:ae:a9:cc:d1:
62:00:a1:ed:ab:ee:cb:34:28:3b:8e:7e:9c:84:5e:0b:9f:54:
d0:77:dc:19:17:fe:ff:20:80:be:5a:79:8e:61:af:c0:d9:4a:
f7:92:c4:7e:23:f0:c1:57:68:4f:c2:84:1b:59:31:c9:10:47:
4c:2d:3e:0d:fe:44:3f:53:c1:77:fd:48:57:ee:d1:3a:d8:f8:
de:a3:b9:f1:53:84:b9:6f:36:a7:3d:fe:47:3a:fd:bf:c0:9e:
bd:86:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:52:51 2025 by rpki-client