Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZBfK6V1xFCEKss1HUyi8hwQn5es.cer
File: ZBfK6V1xFCEKss1HUyi8hwQn5es.cer (raw, json)
Hash identifier: e9CTo+nYQY0l0rXKxmoU5PiolZMXoCnhGyAf+gsmU6E=
Subject key identifier: 64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF6DB0CF61A35F796B279CEA4C26FF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/ZBfK6V1xFCEKss1HUyi8hwQn5es.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:32:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.5.0/24
IP: 2a12:b600::/29
Validation: Failed, certificate revoked on Fri 17 Nov 2023 07:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f6:db:0c:f6:1a:35:f7:96:b2:79:ce:a4:c2:6f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:32:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6417cae95d7114210ab2cd475328bc870427e5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:2c:af:f1:a8:fb:ec:cb:2a:78:1c:4e:bf:
62:1e:e1:71:69:b5:ef:48:70:a5:10:a8:fc:a6:c6:
d9:0d:82:80:e8:bd:61:14:ff:a1:c9:60:c4:39:ca:
08:1d:14:4c:47:0b:cc:a6:39:23:e2:a8:62:05:d1:
ed:59:d5:ab:57:af:86:03:7d:8d:de:85:51:81:1d:
6a:9f:2c:71:4b:50:82:7f:12:db:fa:a4:6e:79:14:
d6:6f:c0:6a:d2:a8:6b:57:25:6a:b6:8a:73:c0:b0:
93:0a:76:de:59:7c:7a:7f:4f:4e:98:a7:a7:e9:5f:
bf:6d:0c:63:c5:c6:ef:9a:3d:77:c0:79:00:34:34:
b0:36:ba:a3:33:ab:8e:ba:dc:5d:a2:7c:b0:bd:ce:
51:1c:44:d0:e8:61:eb:0e:b2:fe:5b:60:cc:69:ac:
5b:7e:63:e9:2e:63:dc:1d:0a:5b:43:64:55:36:9f:
09:18:53:10:77:49:d9:ba:30:4f:34:fc:5e:85:07:
13:22:90:9d:47:a3:7e:13:97:86:e2:dd:db:0b:f1:
a3:f9:6f:2b:a8:c0:1a:65:20:1b:88:df:ca:88:ca:
13:95:b9:d0:43:4f:65:66:05:b9:11:bb:bf:04:9b:
29:69:15:08:ef:b6:bf:ac:c9:c1:1e:27:ba:6b:41:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/ZBfK6V1xFCEKss1HUyi8hwQn5es.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.5.0/24
IPv6:
2a12:b600::/29
Signature Algorithm: sha256WithRSAEncryption
a0:9d:de:c3:9f:d6:82:bd:c2:c8:75:1a:a3:e4:11:9b:75:2d:
32:0a:96:9f:95:07:04:f8:ba:90:7d:4b:4b:0d:c3:0f:54:5e:
17:ee:b9:67:0e:bf:ee:db:d4:5b:7a:2c:37:78:b6:e0:e2:67:
42:28:f5:08:95:1b:2f:b2:39:94:6e:d0:0c:b1:33:bb:6d:ec:
1f:a9:f9:5d:0d:92:46:f0:7a:3e:35:a5:e5:bd:69:31:a6:43:
6d:52:62:54:74:5e:d6:92:fc:52:7b:7e:8a:ca:43:37:97:79:
1a:dc:5c:72:65:17:c7:92:1f:a0:a4:bf:3f:04:a1:cd:46:11:
f7:0c:b3:93:bf:2b:f4:e9:b6:f2:89:67:e3:94:16:62:99:c4:
b1:25:7f:51:1b:9a:d2:c1:28:8b:f0:18:cb:a4:cb:9a:22:6a:
32:a9:e6:3a:68:4b:1c:1f:0f:75:c1:1e:bc:e7:b7:9b:3f:17:
df:3a:9a:42:07:06:f1:95:68:80:0e:a0:55:1c:b7:b9:f9:ff:
9a:a1:f4:5c:b6:09:53:35:de:e2:0c:65:40:5f:a1:50:46:5c:
6e:dd:91:a8:2c:ab:5c:3e:76:5d:0b:97:eb:9d:d3:51:84:47:
a3:30:a5:46:e5:dd:da:75:2a:da:e5:e9:20:c6:76:e6:bd:1b:
17:1b:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:21 2024 by rpki-client on console-fra.rpki-client.org