Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zjlPx0l_QqyINPMdYDW5HR9tvJM.cer
File: zjlPx0l_QqyINPMdYDW5HR9tvJM.cer (raw, json)
Hash identifier: FB/delzI4ALbzxMNsZiiIm3mIZk+YTAn0MgTp3fdhnI=
Subject key identifier: CE:39:4F:C7:49:7F:42:AC:88:34:F3:1D:60:35:B9:1D:1F:6D:BC:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7C352DC735276851B51ADF4A439BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/0ae0fc-1ae5-452a-a910-ea1bae2cb855/1/zjlPx0l_QqyINPMdYDW5HR9tvJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/0ae0fc-1ae5-452a-a910-ea1bae2cb855/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 89.33.107.0/24
IP: 89.42.108.0/23
IP: 89.43.79.0/24
IP: 185.128.96.0/22
IP: 185.197.149.0/24
IP: 213.170.208.0/22
IP: 2a06:cec0::/29
Validation: Failed, certificate revoked on Wed 13 Dec 2023 10:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:c3:52:dc:73:52:76:85:1b:51:ad:f4:a4:39:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce394fc7497f42ac8834f31d6035b91d1f6dbc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:db:02:8d:70:58:6f:ee:f0:ef:24:2c:d4:
c8:54:86:cf:fd:32:3d:2e:9d:83:c1:bf:25:dd:84:
43:02:11:62:15:70:94:ca:cc:d7:5b:44:07:62:1a:
63:c7:7b:72:de:7c:73:19:e1:8d:15:86:fb:18:23:
de:2e:a3:32:48:5b:fd:70:17:e8:f8:37:12:86:be:
a3:55:d8:2a:e0:ee:bb:42:f5:f1:4d:c0:5c:a4:b8:
f4:48:87:21:48:2b:80:7a:42:25:4b:1d:16:c9:e8:
61:b1:5f:8f:4c:0a:8d:cd:58:f5:5f:9e:b8:fc:d6:
cc:94:c9:65:d4:e8:0a:ee:ca:24:45:82:de:06:8e:
40:a4:27:9c:21:d7:ce:5a:4d:5d:0f:05:11:10:22:
49:a7:ff:7d:23:24:9f:44:4e:47:c0:14:e3:bf:c9:
9b:f1:22:53:83:c4:36:26:ae:4d:49:f7:ce:67:e0:
db:c9:ff:53:ed:81:b4:18:17:d5:b5:3e:64:ca:9d:
33:d1:a8:bf:24:89:26:2b:9e:61:59:05:f4:dd:e1:
b0:c0:de:1e:20:2c:73:52:b6:21:6c:e2:2a:0b:81:
06:d9:93:f4:ee:0e:39:03:0e:58:a3:60:d7:a4:3a:
00:3c:75:8f:29:bd:c4:dd:79:6e:00:91:e4:88:ac:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:4F:C7:49:7F:42:AC:88:34:F3:1D:60:35:B9:1D:1F:6D:BC:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0ae0fc-1ae5-452a-a910-ea1bae2cb855/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0ae0fc-1ae5-452a-a910-ea1bae2cb855/1/zjlPx0l_QqyINPMdYDW5HR9tvJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.107.0/24
89.42.108.0/23
89.43.79.0/24
185.128.96.0/22
185.197.149.0/24
213.170.208.0/22
IPv6:
2a06:cec0::/29
Signature Algorithm: sha256WithRSAEncryption
08:2b:a4:57:aa:6c:6e:cd:f0:2b:d9:66:7d:c2:13:a5:f8:54:
54:fb:2c:89:b0:c6:72:7f:f5:4d:60:cf:f4:e2:e3:34:6b:63:
89:0d:ae:00:85:8b:ca:55:89:f1:1a:cf:02:00:31:f8:94:98:
ca:ea:62:a3:6f:a8:e4:74:6a:a7:8e:e5:cd:23:fb:b1:f2:31:
c1:d6:e7:5e:64:5f:ae:c9:2b:a4:68:f3:05:2f:6e:ac:2d:c4:
9c:42:ca:03:cb:a2:44:79:97:01:c0:f3:cb:02:27:7f:29:f8:
71:db:6f:ce:25:8c:d1:bd:b9:49:2e:27:f2:6e:56:f7:2c:79:
da:d5:b6:aa:9d:24:72:97:e1:25:27:de:08:58:fb:8c:21:7e:
01:f7:be:2e:16:5d:9b:16:0a:be:13:35:93:b7:90:ee:b3:ea:
20:30:6a:21:f6:ec:0f:2b:db:c3:30:10:11:ca:9d:8e:4b:26:
75:bd:80:29:8c:98:c0:a7:54:2a:0a:fa:3b:86:30:bc:d4:db:
3b:bf:b8:4e:f5:29:89:ef:a8:29:ec:d2:1a:97:f9:19:ef:1f:
ca:88:65:0e:39:73:23:a1:fc:0b:95:43:df:93:e5:4e:34:f2:
3a:85:db:29:9e:03:ea:3b:ef:fe:50:90:35:ae:d7:16:88:e4:
e2:2d:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:45 2024 by rpki-client on console-ams.rpki-client.org