Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZyKHPollSQ8t4e2nSFmuLnhXn0o.cer
File: ZyKHPollSQ8t4e2nSFmuLnhXn0o.cer (raw, json)
Hash identifier: 0bDJwQ0SIdbAdxaS5Bd+LejhSFeo6AtXFiCN5LhjWzI=
Subject key identifier: 67:22:87:3E:89:65:49:0F:2D:E1:ED:A7:48:59:AE:2E:78:57:9F:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C521FDD5A6355903C9B60C82DDD5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/6722873E8965490F2DE1EDA74859AE2E78579F4A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.46.0/24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 14:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:52:1f:dd:5a:63:55:90:3c:9b:60:c8:2d:dd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6722873e8965490f2de1eda74859ae2e78579f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:5a:4c:77:1d:c9:cd:b1:84:f3:9d:da:db:
1b:f1:96:d1:b6:19:db:8e:63:73:9d:c2:a9:01:d4:
b2:30:e7:f9:ad:e7:4e:26:6c:b7:6b:54:fb:00:97:
1d:88:12:a2:4d:de:fe:f0:41:ca:ab:8f:30:6c:c0:
0e:a2:43:87:ca:b8:a0:b6:d2:ae:b1:53:70:d9:cb:
fb:b0:51:11:52:aa:f6:a9:c0:1e:11:cf:2e:81:33:
7f:82:fb:ad:46:f6:82:28:30:49:14:95:56:bc:80:
07:2d:0f:30:01:ec:97:47:ab:50:27:ec:39:5e:1a:
6b:cb:1b:d1:17:3a:d3:38:d5:61:21:55:dd:d1:b4:
0b:39:5f:fa:22:21:38:3d:78:4d:86:53:f1:49:d3:
04:e0:de:a1:7b:df:99:82:17:e4:16:98:d7:af:a7:
cd:4a:b3:dd:d1:f7:84:f8:ca:4d:66:3c:59:10:d5:
2c:b2:f5:55:ae:05:2d:6c:08:09:06:63:8b:04:05:
47:5e:21:6d:57:25:d3:68:23:d6:07:70:a0:a5:50:
16:ca:38:60:f8:a1:8c:39:4f:8f:70:0a:31:60:e2:
2a:70:84:e8:51:5e:58:ab:b9:b8:68:90:19:44:77:
60:0f:0f:3e:01:37:06:98:d6:55:d0:38:d9:f8:4e:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:22:87:3E:89:65:49:0F:2D:E1:ED:A7:48:59:AE:2E:78:57:9F:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/6722873E8965490F2DE1EDA74859AE2E78579F4A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.46.0/24
Signature Algorithm: sha256WithRSAEncryption
66:87:77:d1:18:d4:7a:e9:ba:c7:9b:70:cd:11:3d:24:6a:24:
b9:f6:d2:13:e1:39:41:60:0b:c7:8d:da:33:3c:c1:f2:0a:fb:
9f:8a:b6:e5:d1:92:ce:08:15:a1:fa:8d:8b:f9:1c:f2:55:79:
1d:f9:2e:0e:9f:10:8f:a3:85:5a:6a:a1:ab:82:73:be:9e:71:
99:d8:3b:ca:fd:1d:14:16:d0:a1:9b:8e:9c:be:52:32:8d:e2:
8a:23:91:c7:28:64:f6:7d:40:f0:66:19:49:3b:7d:c1:12:f9:
4f:61:ab:84:8a:48:c8:26:52:6c:48:70:16:59:c1:51:a6:9d:
94:3e:80:f8:9e:17:a9:6a:47:89:ed:66:b9:74:e4:2c:4e:3d:
a0:57:c9:46:2e:33:2f:54:38:0b:39:dc:20:6e:b1:93:f9:e0:
62:38:0a:c0:12:13:ca:48:ff:da:15:78:83:58:4d:d8:a3:4c:
4e:b8:2c:18:80:ea:6f:a8:71:48:10:f7:b3:de:2d:43:e1:0b:
cb:ab:6d:6c:50:52:ca:1c:ef:59:8b:97:8d:84:18:58:b6:c0:
d7:ea:83:a3:2d:16:04:ac:2f:34:b6:fc:7d:2b:38:36:df:b1:
f4:e1:8f:a5:80:b2:a9:8a:da:7b:40:43:59:f4:56:49:3b:a0:
5c:42:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:22 2024 by rpki-client on console-ams.rpki-client.org