Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer
File: JzwqOZg7zQNVGFNEeEfB4YYexzI.cer (raw, json)
Hash identifier: 0Nb1fFw7kwlgQ+UeYvAawd4jqy/yoWrxVWM3KzWr5lE=
Subject key identifier: 27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D6FD6535E88558D6893768833A7D88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JzwqOZg7zQNVGFNEeEfB4YYexzI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 42313
AS: 48510
AS: 202821
IP: 79.106.0.0/16
IP: 185.1.73.0/24
IP: 185.171.144.0/22
IP: 217.24.240.0/20
IP: 2001:7f8:a4::/48
IP: 2a05:fdc0::/29
Validation: Failed, certificate revoked on Thu 06 Apr 2023 11:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:fd:65:35:e8:85:58:d6:89:37:68:83:3a:7d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=273c2a39983bcd03551853447847c1e1861ec732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:40:03:ec:1e:84:26:2a:6b:9d:d7:05:07:
c7:2c:7d:8b:21:ed:73:cb:e5:95:d9:5c:50:2b:c2:
34:2c:82:f4:dc:26:91:bd:fa:7b:00:15:1d:88:b8:
37:43:54:40:99:c2:a6:5c:8f:89:bf:44:f7:2b:17:
cd:d2:aa:db:37:1d:79:ad:7c:f2:c6:98:69:82:b4:
1d:e3:e0:92:f4:99:23:29:38:3e:1f:5c:3b:8a:66:
64:07:a3:f5:2c:fa:5f:46:61:1f:d2:58:92:7c:7d:
cf:5c:a5:16:be:df:a9:7e:ea:53:dc:07:22:6f:7b:
ad:a8:24:02:2f:c2:7c:27:3f:ab:3e:1f:dd:ef:c2:
c0:82:c1:30:f5:a3:a6:49:cf:db:03:da:7e:b3:b8:
77:23:b3:c3:e4:37:20:d5:36:76:1a:6b:05:d1:df:
09:0d:24:04:82:fa:db:3e:d2:66:41:c8:5e:ea:ae:
3f:0d:2f:61:25:1a:de:bd:67:36:2d:5d:96:c8:f7:
bf:69:3c:8d:39:e9:17:75:c4:9c:18:ab:a0:92:eb:
37:b2:fa:66:9a:ff:ab:49:3f:ca:bb:34:d6:bf:dc:
ab:8e:f1:ab:87:4d:f7:f7:d3:f7:06:72:f4:87:8a:
cd:20:01:b8:ee:12:2a:81:21:e9:d4:67:ba:d1:6b:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JzwqOZg7zQNVGFNEeEfB4YYexzI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.1.73.0/24
185.171.144.0/22
217.24.240.0/20
IPv6:
2001:7f8:a4::/48
2a05:fdc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42313
48510
202821
Signature Algorithm: sha256WithRSAEncryption
a5:d5:6e:f1:66:ef:97:3b:ee:09:7b:21:55:88:13:b5:c2:4f:
0d:a4:15:0f:ad:e3:94:9d:79:d7:b8:d1:6b:be:cb:bb:c0:53:
55:7b:4b:e3:a3:f3:f9:37:f8:f4:4f:5b:e8:15:3d:6a:de:9b:
64:ef:38:ae:ac:3f:a6:6d:d0:40:18:d1:18:ad:de:1d:37:f2:
7d:13:ac:b9:76:cf:ba:2b:48:87:d5:9b:bd:91:1d:b7:18:5d:
9e:8f:b4:aa:fa:7a:10:b5:d9:43:b0:29:fb:fd:80:c3:01:fa:
00:d3:11:c1:11:b2:6c:9c:dc:e6:26:d0:1f:9a:a7:76:70:73:
02:2f:28:31:ce:c0:be:a0:e9:1e:7b:28:df:cf:de:37:30:c7:
35:28:4e:fe:38:9f:72:02:fd:ff:7e:a3:63:b2:0b:0a:6b:d4:
8e:8b:07:48:22:e2:e5:c6:1b:ed:11:38:a8:86:8d:57:d5:24:
45:96:88:d1:ec:18:29:f3:11:87:af:b5:01:10:fd:0f:c2:9d:
e2:45:ab:a2:5c:36:ad:13:d2:ad:79:2d:c8:d4:20:76:29:05:
26:73:28:9b:2e:e1:76:f0:ed:62:46:4e:56:fb:79:b2:53:87:
b3:dd:d4:ed:dd:d2:b4:8c:8b:38:a9:69:f2:f5:fb:d7:9d:39:
29:7a:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:42 2024 by rpki-client on console-fra.rpki-client.org