Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
File: 1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer (raw, json)
Hash identifier: c5oowSgOspcog3ZLHrYGOL0CBJjDEi7A3IGrI7rlOHI=
Subject key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B7817340E7D25F39AA2C075E568E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51185
IP: 94.124.64.0/21
IP: 178.248.48.0/21
IP: 185.45.208.0/22
IP: 185.187.156.0/22
IP: 2a02:2890::/29
Validation: Failed, certificate revoked on Tue 26 Mar 2024 15:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:78:17:34:0e:7d:25:f3:9a:a2:c0:75:e5:68:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:71:5c:e6:20:71:a5:c0:1d:82:1a:ba:fa:
27:34:40:9a:9a:40:69:14:1d:c5:0b:41:b5:c7:f3:
90:e6:34:b1:18:ef:f6:59:28:27:b3:83:2b:2f:0c:
6d:31:80:bf:f2:38:62:57:0c:13:86:a0:e0:9f:c4:
e8:85:7a:78:17:44:a4:fb:51:be:52:cc:f8:ec:8a:
11:d6:fe:86:87:4f:a5:ac:9c:fd:fb:54:10:ca:d7:
a7:24:f0:a5:2a:cc:ae:dd:23:aa:7f:db:4c:d1:94:
4c:fe:cc:09:a5:a5:22:04:0d:b1:c3:b5:90:fd:f0:
57:80:37:fb:3d:9d:f8:eb:48:e1:1d:35:2d:0c:ce:
9c:a3:c4:a1:ed:80:16:1e:05:ea:17:b8:b8:d3:38:
c3:e7:40:63:57:48:cf:f5:a2:12:36:08:65:b0:9b:
49:09:f6:0f:e9:f5:58:7c:71:83:3e:59:de:46:fe:
68:71:7b:b9:e4:36:79:a9:18:10:7d:0d:98:e4:c8:
d5:b8:35:08:b3:01:c3:f2:ab:4b:50:31:16:4b:fe:
32:4f:e4:a4:b0:6f:99:45:b9:78:c4:01:49:36:44:
11:df:2a:e2:b3:2a:45:46:32:3d:54:58:21:0f:cf:
57:be:7a:d2:3c:b5:20:7c:23:c7:b0:2e:ea:dc:5e:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0/21
185.45.208.0/22
185.187.156.0/22
IPv6:
2a02:2890::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51185
Signature Algorithm: sha256WithRSAEncryption
44:42:a8:78:f4:38:8b:c6:92:ad:2b:a5:19:3d:e4:cc:18:22:
fd:17:6a:94:80:f7:a7:16:4e:89:21:04:c3:51:53:a1:a5:66:
a9:12:3e:7b:72:2f:43:98:9f:8f:af:90:ad:8b:c9:bb:f0:58:
0f:75:b7:25:e8:05:e6:77:6f:aa:04:a2:ee:e0:82:e2:0d:5a:
7d:43:fa:a4:33:24:2c:d8:58:0f:ca:01:1d:ce:71:71:3c:9b:
30:e2:ff:37:18:e4:c7:9a:09:06:bc:2d:a9:85:a1:0b:fc:a6:
80:51:3c:c9:a8:24:f9:a3:0d:9f:90:ed:e8:1b:4b:f5:ba:e8:
ac:f1:a7:71:52:86:b4:25:e0:43:3c:2f:a6:e2:d8:fc:56:35:
24:68:0b:75:0c:2f:04:f6:62:32:ce:39:8c:15:70:d8:b9:9d:
c0:85:81:71:96:17:b5:7c:f9:66:60:23:50:14:38:41:69:a4:
2b:25:45:41:c6:38:ae:27:28:8d:13:a6:f7:32:83:33:df:90:
4c:97:e0:e6:21:3e:ad:c0:8f:6d:8d:e7:85:01:33:f8:8b:05:
7c:ba:0b:a0:72:6f:91:8e:e4:14:aa:89:f1:18:e7:90:a8:5e:
44:2a:09:d8:33:8e:00:3a:7d:82:16:ea:74:72:c1:17:48:50:
bc:53:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:20 2024 by rpki-client on console-fra.rpki-client.org