Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RZI62UargKlHQA4U2y5sSWIMPY8.cer
File: RZI62UargKlHQA4U2y5sSWIMPY8.cer (raw, json)
Hash identifier: r3ggyJauTQd1gf+41KnyTsLTfVv7Q1yZkmbA7NYuSiY=
Subject key identifier: 45:92:3A:D9:46:AB:80:A9:47:40:0E:14:DB:2E:6C:49:62:0C:3D:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570F95FEF030144B34C62D01F942DBF4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/661070-b3a9-4e56-850d-659a1c282ebe/1/RZI62UargKlHQA4U2y5sSWIMPY8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/661070-b3a9-4e56-850d-659a1c282ebe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:34:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.242.0/24
IP: 2a11:8c40::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 07:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f9:5f:ef:03:01:44:b3:4c:62:d0:1f:94:2d:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:34:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45923ad946ab80a947400e14db2e6c49620c3d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:b3:2f:52:8e:c7:5c:8f:7a:96:20:62:e3:
60:58:6a:d1:dc:9a:25:72:93:4c:57:5b:23:09:25:
e0:c6:55:b9:bf:06:50:23:84:ed:15:b1:d9:19:8e:
3b:8e:d2:57:b7:39:03:60:77:e3:eb:55:9f:bc:0e:
51:63:8a:b2:aa:30:8c:6e:d6:04:9a:dc:8e:b3:9b:
46:c8:4f:5e:c6:86:b0:a3:08:1c:2f:75:9b:1d:34:
1e:a0:1d:f2:33:4d:38:57:45:0b:4d:ff:53:78:87:
0f:20:f9:6a:45:51:ad:a2:0d:cc:16:a8:51:ac:e3:
83:51:60:a0:30:09:31:c9:09:7c:22:a7:66:ed:22:
ec:81:f7:d7:1c:3c:59:57:80:04:ed:d3:f8:ce:7e:
8d:14:8f:a1:85:a5:f6:de:45:0b:1d:6f:5b:3f:a5:
0e:c4:55:ae:b0:67:76:ba:b8:72:3f:bc:58:eb:1a:
9e:ab:fe:f1:8f:c0:19:c9:19:62:45:57:fa:19:33:
a9:a9:4c:49:4d:5a:3e:dc:32:4a:59:cb:3e:20:19:
d8:c2:f8:f8:6f:66:dc:c4:2f:b3:16:2c:12:83:a5:
4d:c2:e0:78:d7:9a:46:67:93:d3:66:6e:3a:6a:2d:
e1:d1:39:30:32:bb:0e:85:19:1e:3d:98:3e:c7:47:
1f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:3A:D9:46:AB:80:A9:47:40:0E:14:DB:2E:6C:49:62:0C:3D:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/661070-b3a9-4e56-850d-659a1c282ebe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/661070-b3a9-4e56-850d-659a1c282ebe/1/RZI62UargKlHQA4U2y5sSWIMPY8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.242.0/24
IPv6:
2a11:8c40::/29
Signature Algorithm: sha256WithRSAEncryption
08:27:93:2e:1d:19:90:f0:27:10:95:80:89:a5:f4:8e:d0:a2:
ef:40:2c:91:7b:88:e8:4e:04:8b:7b:50:9b:73:69:d6:43:6b:
bb:25:42:9e:c9:c5:2b:29:6d:1e:12:49:2b:f5:be:bc:39:ae:
d8:cb:4c:e1:94:3e:98:4e:76:d8:b6:4b:28:43:d5:50:63:06:
13:b1:2f:b2:a6:e2:81:16:21:24:80:ca:d1:03:e8:42:02:99:
71:53:a8:89:bf:17:f5:d2:46:38:de:c7:f9:87:81:0f:02:24:
b0:25:c5:4c:aa:3d:a0:9a:cc:48:36:02:d9:3f:79:fa:82:62:
93:ae:c8:36:00:90:2d:cf:92:ef:c3:f4:d5:21:d7:c1:4e:29:
24:88:cb:7c:47:e7:8e:b7:95:b0:87:74:d3:cb:b0:0e:8a:f4:
e3:73:3e:b3:79:6c:2e:5e:d7:42:1d:da:4a:57:e3:5e:1b:09:
95:d3:a9:74:69:2d:48:63:71:d9:6b:86:f6:97:4e:77:e1:7e:
7a:99:be:1e:49:ac:e6:b4:d9:10:5f:a4:7d:b8:d3:03:7b:17:
f0:79:3e:c9:96:52:27:79:55:1d:d6:81:e6:76:d9:52:b9:26:
bb:ab:74:33:73:bb:1d:64:f0:39:e8:99:32:6f:44:eb:a7:d3:
16:8a:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:36 2024 by rpki-client on console-ams.rpki-client.org