Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
File: 2ZfQbto2HZNViOQn89mDP499HSA.cer (raw, json)
Hash identifier: IjN7eW6akC8E+d1xGbKM8F9UIkXL6pri8NK+Ob9pUL4=
Subject key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0EAC6B2DB73E3FCA8612941800532
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 48800
IP: 84.252.112.0/22
IP: 185.163.124.0/22
IP: 194.146.126.0/24
IP: 194.147.44.0/24
IP: 194.147.47.0/24
IP: 194.147.67.0/24
IP: 2a09:5f00::/29
IP: 2a0b:b800::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:ea:c6:b2:db:73:e3:fc:a8:61:29:41:80:05:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:82:8d:07:30:30:7e:6b:bc:e1:7b:36:29:
2a:19:47:34:28:ba:64:86:e2:8e:58:7e:af:41:c8:
26:6b:47:8f:00:ee:3f:44:c3:3b:84:aa:0a:5f:7d:
44:d1:16:10:1b:74:1e:f5:28:fb:79:a7:da:00:13:
73:10:88:d5:4f:d8:59:4f:b3:3b:4d:1e:88:7b:25:
1b:5f:71:75:32:1a:78:bd:7e:77:63:79:24:36:f5:
4f:2f:3e:fe:4a:1e:e0:9a:f6:f2:51:48:1c:80:3b:
b1:71:1f:57:a9:68:b5:36:6b:f7:61:d6:c4:97:b1:
2e:e8:9f:9a:7d:a3:47:ec:a4:a0:ad:ca:b2:56:0d:
3b:dd:82:2f:14:be:d8:7e:c1:8f:68:2b:f1:b4:b6:
9a:04:b6:aa:8b:ab:5f:f3:01:ca:ad:99:2c:b5:bf:
21:ee:fd:b9:83:7a:a2:a7:d7:61:b1:64:50:86:5b:
dd:15:34:bd:35:26:f5:03:92:5b:22:1f:60:6d:5b:
03:2d:13:08:33:0a:94:66:e3:8e:df:a4:31:ad:26:
b0:c5:22:73:de:e5:f0:b6:81:fa:7b:fa:1d:8a:72:
5b:84:4f:3a:58:85:66:13:03:56:52:50:d9:7e:11:
9d:a2:f0:ee:ba:0e:f7:a6:32:fc:e0:90:99:7e:da:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.112.0/22
185.163.124.0/22
194.146.126.0/24
194.147.44.0/24
194.147.47.0/24
194.147.67.0/24
IPv6:
2a09:5f00::/29
2a0b:b800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48800
Signature Algorithm: sha256WithRSAEncryption
88:b8:4e:d4:74:58:56:22:37:70:07:e5:71:ca:b8:85:bd:1a:
f9:37:cf:8c:76:79:a6:01:9b:ea:74:2d:c5:e6:fd:90:eb:41:
35:77:f1:67:5a:ce:5a:61:d2:25:13:8c:f8:65:21:0b:28:e5:
dd:e1:b1:5c:bd:a4:5d:b7:20:29:d8:26:d7:9d:fa:d9:ed:12:
54:57:5d:f9:2b:c2:fc:9a:70:3e:4c:47:d0:0a:56:31:db:de:
d8:6f:84:fe:99:8f:d1:23:bb:fd:3f:57:a5:1b:00:3a:f4:1b:
9b:64:fa:f2:a9:b1:83:2c:1b:93:3d:e6:25:be:1d:3b:a7:4f:
f8:29:f7:b9:d5:6f:8e:94:fd:15:c4:0f:98:9e:76:8d:f1:48:
27:c4:83:dc:45:ef:b3:e2:5e:8a:9d:fe:8c:80:62:b7:e4:a6:
b2:1d:29:73:04:10:96:00:60:66:9a:be:0e:8b:80:11:d2:37:
63:55:32:43:b3:8a:22:44:07:a0:7f:57:68:60:a8:7c:87:d7:
0d:f3:34:1a:59:70:0b:1f:06:63:02:d2:42:09:fe:57:23:6b:
6a:d7:78:48:40:2a:84:2e:e5:55:af:23:00:08:78:e2:5a:7a:
09:66:b3:fe:47:0d:bd:78:e5:fb:74:49:95:a5:da:a1:2c:53:
a7:a4:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:32 2023 by rpki-client on console-ams.rpki-client.org