Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZH9geFS-UZbKNzogJ_ZYmTElDWE.cer
File: ZH9geFS-UZbKNzogJ_ZYmTElDWE.cer (raw, json)
Hash identifier: G8Mc69oLxEkIpwcxr7Y5ck98bKjl7mofSm8AjabjpH0=
Subject key identifier: 64:7F:60:78:54:BE:51:96:CA:37:3A:20:27:F6:58:99:31:25:0D:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F420B24544FFE4B628E02E5744976C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/ZH9geFS-UZbKNzogJ_ZYmTElDWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.233.56.0/24
IP: 2a11:a540::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 06:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:0b:24:54:4f:fe:4b:62:8e:02:e5:74:49:76:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647f607854be5196ca373a2027f6589931250d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:74:a1:eb:78:54:4d:dc:8f:92:f7:ee:02:
4e:8b:26:fe:52:7d:26:3c:44:40:9f:55:33:e8:14:
66:dd:02:32:73:cf:a6:71:f3:71:ea:9a:6f:46:8f:
c8:a9:c4:b9:a4:e3:17:5a:7e:f7:f6:71:59:4c:0b:
24:b6:34:ad:a8:d1:c2:d3:79:86:53:74:3d:e5:01:
fd:b7:b0:41:df:cf:95:1f:46:9c:34:cf:f5:fc:fa:
31:9a:d1:f2:ae:c2:45:18:2e:a7:64:db:0b:9c:6b:
34:82:e6:f0:ad:59:c1:55:c9:97:8b:1f:ca:80:d4:
d8:65:cc:47:d8:65:ef:03:81:63:b4:0d:d8:2a:73:
d7:bb:db:81:3d:bd:09:3d:ce:35:49:50:ed:95:b6:
f4:62:a8:eb:34:ac:0c:24:02:db:e3:d9:0b:1c:d1:
87:98:ee:4c:89:0f:3c:0c:95:2f:18:d9:f7:a8:92:
36:77:1b:46:56:f0:24:82:01:bd:be:21:d1:22:a3:
51:82:2e:b7:a7:dd:2d:a8:fb:1e:cc:fd:ff:58:3f:
4d:f4:e9:23:82:fb:f1:e9:69:a3:0c:3b:1d:6d:9f:
ae:c8:a4:5d:d9:f3:30:e5:77:ea:2c:ba:f4:28:db:
aa:f2:f8:8b:a2:f4:91:12:de:5f:2e:58:35:59:d3:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:60:78:54:BE:51:96:CA:37:3A:20:27:F6:58:99:31:25:0D:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/ZH9geFS-UZbKNzogJ_ZYmTElDWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.56.0/24
IPv6:
2a11:a540::/29
Signature Algorithm: sha256WithRSAEncryption
6b:23:2c:56:09:c6:7b:31:49:54:0d:b8:c2:10:ee:95:d0:ce:
de:ea:37:fc:ce:b2:f7:d2:51:62:b3:d0:78:59:4e:f9:d3:9c:
4f:63:3a:86:8b:c5:3a:d4:a7:f8:d2:e8:d6:39:63:d6:ea:b4:
65:48:21:9b:92:2b:f3:a1:67:de:1a:1c:08:da:a7:49:82:94:
83:62:3d:e6:cf:9c:bd:26:57:ed:86:39:59:2c:46:90:79:4a:
22:05:4b:e1:c0:9c:9b:4b:87:69:a9:78:a0:b9:ba:96:6e:d6:
8e:6f:67:b2:e0:8f:78:0a:6e:b4:29:a0:c1:f5:f8:21:bb:62:
7d:dc:58:21:50:78:31:e4:ce:6d:74:46:6b:e0:1b:16:80:61:
2b:4d:6d:97:28:2b:6d:e7:fe:83:3c:c7:69:70:92:08:2e:30:
bd:6c:7b:d1:97:1a:90:d5:ed:03:cb:3d:f4:2d:83:12:56:c8:
b2:5d:3f:e7:ec:3e:0e:84:65:aa:29:8d:cb:cb:27:14:08:48:
61:1d:85:09:67:e1:93:83:37:75:29:e4:1f:f6:d0:65:f4:70:
f3:10:75:e9:14:2a:7a:89:e4:75:e4:8e:bb:dc:a7:2a:b5:b0:
4a:ac:9d:9c:2d:54:73:e5:52:fd:bc:20:fd:28:45:b6:d1:17:
fd:cc:43:cc
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVvQgskVE/+S2KOAuV0SXbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjEzNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDdmNjA3ODU0YmU1MTk2Y2EzNzNhMjAyN2Y2NTg5OTMxMjUwZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SV0oet4VE3cj5L37gJOiyb+Un0m
PERAn1Uz6BRm3QIyc8+mcfNx6ppvRo/IqcS5pOMXWn739nFZTAsktjStqNHC03mG
U3Q95QH9t7BB38+VH0acNM/1/PoxmtHyrsJFGC6nZNsLnGs0gubwrVnBVcmXix/K
gNTYZcxH2GXvA4FjtA3YKnPXu9uBPb0JPc41SVDtlbb0YqjrNKwMJALb49kLHNGH
mO5MiQ88DJUvGNn3qJI2dxtGVvAkggG9viHRIqNRgi63p90tqPsezP3/WD9N9Okj
gvvx6WmjDDsdbZ+uyKRd2fMw5XfqLLr0KNuq8viLovSREt5fLlg1WdORjwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGR/YHhUvlGWyjc6ICf2WJkxJQ1hMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzczMjU1
NS04ZWI1LTRkYmQtYTA4Mi02YjgzN2VlMmVjZWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvNzMyNTU1
LThlYjUtNGRiZC1hMDgyLTZiODM3ZWUyZWNlYy8xL1pIOWdlRlMtVVpiS056b2dK
X1pZbVRFbERXRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAPuk4MA0EAgACMAcDBQMqEaVAMA0GCSqGSIb3
DQEBCwUAA4IBAQBrIyxWCcZ7MUlUDbjCEO6V0M7e6jf8zrL30lFis9B4WU7505xP
YzqGi8U61Kf40ujWOWPW6rRlSCGbkivzoWfeGhwI2qdJgpSDYj3mz5y9JlfthjlZ
LEaQeUoiBUvhwJybS4dpqXigubqWbtaOb2ey4I94Cm60KaDB9fghu2J93FghUHgx
5M5tdEZr4BsWgGErTW2XKCtt5/6DPMdpcJIILjC9bHvRlxqQ1e0Dyz30LYMSVsiy
XT/n7D4OhGWqKY3LyycUCEhhHYUJZ+GTgzd1KeQf9tBl9HDzEHXpFCp6ieR15I67
3KcqtbBKrJ2cLVRz5VL9vCD9KEW20Rf9zEPM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:22 2024 by rpki-client on console-fra.rpki-client.org