Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PZtrfMeAqwMBkcGWkK_3D-G-70U.cer
File: PZtrfMeAqwMBkcGWkK_3D-G-70U.cer (raw, json)
Hash identifier: 99bskNLyieOujtVe0UOrq2/JFaUwLuHSawVody7ddMk=
Subject key identifier: 3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65D5C096262BB26BABA3731B0D1B72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/PZtrfMeAqwMBkcGWkK_3D-G-70U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:34:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.252.0/24
IP: 2a11:89c0::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:d5:c0:96:26:2b:b2:6b:ab:a3:73:1b:0d:1b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:34:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d9b6b7cc780ab030191c19690aff70fe1beef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:c0:26:c0:cc:96:d7:29:9b:11:9c:34:5b:
8b:f9:95:9c:0e:4b:6d:4b:f2:5e:53:e0:a0:04:67:
31:72:64:0a:22:14:0a:3c:73:72:09:60:1b:a0:68:
a4:a6:75:78:44:62:cc:4f:7f:6c:69:6f:fe:8f:f5:
76:c3:82:94:9f:4b:22:c5:7b:bf:26:f2:ef:6e:83:
76:40:03:6d:af:21:54:56:c7:d3:84:78:07:47:5e:
c2:74:2b:45:c7:15:b0:40:95:03:98:6f:96:98:c4:
e1:15:a1:3b:78:b6:5d:b4:4f:bc:d6:08:02:f9:62:
61:53:dc:95:42:b3:56:ba:11:51:83:1b:c8:4c:73:
cd:4b:38:bf:20:e7:c6:99:61:b0:e5:5f:49:ef:c4:
3e:24:a9:50:44:f0:23:7b:a7:e0:e0:16:17:f9:fe:
78:06:a2:20:09:c5:f3:20:ad:3f:00:01:63:6b:ff:
6e:0e:51:10:be:2e:33:a2:49:5d:26:85:f8:63:21:
d6:f5:50:ff:25:8d:8c:b6:1d:cd:9f:aa:d6:e7:a2:
e6:69:f0:13:cb:e8:00:72:42:ae:8a:76:6f:76:dc:
a0:44:d6:d7:ab:7c:d3:8b:66:78:72:30:a4:20:f3:
e5:7d:00:77:1e:38:af:75:f9:dc:08:c1:9f:21:ed:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/PZtrfMeAqwMBkcGWkK_3D-G-70U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.252.0/24
IPv6:
2a11:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:20:78:27:bf:f7:41:36:65:de:d5:77:10:17:ac:33:c7:81:
21:fc:32:22:5e:92:a9:df:c5:20:25:3c:2e:c3:94:2b:62:9e:
e1:f6:31:ed:e2:c4:3f:a0:34:ce:b3:b0:e2:6e:0c:e2:fa:b6:
59:d5:9f:9c:08:67:f6:5d:ec:2f:f3:57:71:92:4c:bc:49:05:
bc:7d:6c:2e:cc:d7:5a:36:81:29:d2:47:42:d8:6f:6f:37:fc:
1e:8a:0c:fd:16:50:7b:35:ed:20:51:2e:94:4d:b3:dc:fb:21:
68:75:ad:6e:75:6a:74:af:ec:39:7d:39:7e:25:25:a2:af:08:
73:a9:cb:eb:e1:a2:64:b6:4d:60:cd:17:87:f2:69:06:ef:c2:
87:f8:5a:1f:20:7b:c9:33:ca:f0:d5:39:53:18:11:aa:33:be:
8f:45:0f:be:ba:0f:30:02:9e:22:b1:3b:d6:53:c5:72:be:e6:
e7:16:03:08:f9:9c:58:42:52:8e:74:d4:26:c9:d8:9f:99:bb:
33:b2:46:88:de:ac:ed:30:b3:bb:1f:88:3e:8b:82:8d:00:6c:
3f:4d:93:99:fe:dc:4d:19:ae:fd:9f:56:95:82:57:27:2a:cd:
be:88:4f:7d:99:be:7f:b1:c8:2b:ad:a1:f2:06:58:d5:14:af:
3c:4e:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 12:39:52 2023 by rpki-client on console-ams.rpki-client.org