Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
File: Z8_X-uINHTS3edq2abjw8HycNPg.cer (raw, json)
Hash identifier: gimGNqxjNKy3jtbrzUlljsgTZiYU2txV1hEdHsll9LY=
Subject key identifier: 67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571688BACB570C653652E7410C98BC9FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/Z8_X-uINHTS3edq2abjw8HycNPg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 207709
IP: 2.56.152.0/22
IP: 185.242.160.0/22
IP: 195.85.201.0/24
IP: 195.85.205.0/24
IP: 195.85.207.0/24
IP: 195.85.216.0/24
IP: 2a07:af80::/29
IP: 2a09:cfc0::/29
IP: 2a0f:3580::/29
Validation: Failed, certificate revoked on Fri 25 Aug 2023 02:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:8b:ac:b5:70:c6:53:65:2e:74:10:c9:8b:c9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:5c:c8:7f:60:a4:93:89:5b:33:16:90:92:
51:40:e7:0d:57:af:b8:e0:e7:ac:76:02:f0:f9:66:
b6:2f:9b:e7:41:dc:c7:cb:7e:a4:02:c3:77:9e:3c:
98:b5:31:cd:6e:8d:78:24:fb:60:3f:30:0c:e2:d7:
ee:4b:86:69:61:a9:d3:11:f7:e1:76:61:02:05:79:
b0:19:41:fc:11:54:d1:15:36:2a:c3:56:c4:9d:3e:
2d:01:7a:85:ed:0a:3d:97:23:1c:56:ee:6f:db:47:
52:b1:ce:26:24:f0:3a:9c:9f:37:bc:3f:e0:37:d7:
63:c0:28:dd:ba:4f:90:ed:ba:7e:45:af:5c:6d:0b:
ce:d7:41:0c:ce:a1:55:c0:c1:83:15:83:92:c4:61:
bc:7f:5e:6e:ff:98:06:b9:66:f7:02:2c:3b:3a:b9:
fd:bc:00:b8:98:3f:ea:9c:1a:1c:17:61:83:a2:d6:
2b:84:df:89:f5:d6:4c:b2:b8:b9:95:ef:98:9b:b7:
a4:3a:35:a0:bc:7d:1a:e7:04:a7:8f:11:3d:8e:9d:
ee:86:53:5d:93:9b:52:07:0f:3f:25:67:ca:19:32:
a6:b1:c1:99:f7:3c:0a:ae:00:40:89:05:d5:19:a4:
bf:af:ab:3e:32:a2:5a:12:23:d8:2c:04:34:9b:ba:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/Z8_X-uINHTS3edq2abjw8HycNPg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.152.0/22
185.242.160.0/22
195.85.201.0/24
195.85.205.0/24
195.85.207.0/24
195.85.216.0/24
IPv6:
2a07:af80::/29
2a09:cfc0::/29
2a0f:3580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207709
Signature Algorithm: sha256WithRSAEncryption
92:82:b7:71:9f:48:0c:9c:cd:d7:39:e7:64:6f:84:1b:e1:79:
15:23:ff:a0:ad:79:ef:08:8c:d4:aa:cd:3f:ed:14:9e:69:73:
50:5c:5f:d7:a3:6a:06:1e:c3:7c:16:92:58:4b:96:77:b7:91:
19:0c:75:67:e3:54:8a:1f:df:c9:3e:55:d4:d5:f4:8a:60:fa:
57:62:20:ae:f4:45:2a:d3:6f:f0:38:02:8b:d6:a4:4b:db:57:
a5:a7:c5:30:b8:ca:d5:ec:56:21:29:4f:92:23:f8:51:72:f0:
f6:ce:08:d2:15:f3:d3:e0:02:67:ce:06:fa:dd:39:ce:ad:ef:
2f:24:e7:21:31:70:29:da:7f:4e:54:20:95:00:a7:f7:5d:be:
bb:55:a8:9b:33:4b:79:75:bc:2f:23:24:e9:31:15:45:dc:1c:
3a:af:48:23:7d:ae:bd:c9:3d:38:f6:2a:52:38:c4:b1:ac:81:
a7:df:c7:b2:e9:f4:2b:ec:2b:1d:74:20:51:e0:93:3b:45:83:
0a:6f:da:ec:bb:3e:cb:8c:98:e6:16:42:15:e1:c2:5b:3f:85:
f8:ab:92:d1:3d:7c:67:ed:80:5a:87:3c:36:56:c9:67:5f:0a:
b4:68:57:3b:2f:76:1f:6e:ff:a0:99:b4:cf:02:45:d0:00:f8:
e7:c5:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:08 2024 by rpki-client on console-ams.rpki-client.org