Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer
File: ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer (raw, json)
Hash identifier: /wI2tOydDTvJZH73dEV7RhjNorarq6z6yRgb6rzAnPs=
Subject key identifier: 64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB0991645D03E1FE33EA2CA8D6161DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 77.75.224.0/24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 09:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:99:16:45:d0:3e:1f:e3:3e:a2:ca:8d:61:61:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647512ad1bb888a7242a584c6f2964988f5c87d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:84:41:87:c4:01:69:05:97:ca:f0:d3:de:
fe:07:a3:fb:4f:67:67:db:95:7e:10:90:0f:6f:5f:
df:62:bd:ad:61:14:29:e1:dd:07:88:ba:11:54:59:
e9:9a:c7:0f:78:81:8d:28:57:2a:85:cc:77:7c:da:
af:eb:86:4d:36:c7:94:18:cb:53:63:9f:06:3c:94:
fe:12:3e:ad:74:34:94:d7:a6:f9:f5:d2:a3:d1:55:
00:1e:86:31:c6:7c:3c:99:00:d3:a9:7d:3b:67:46:
8f:86:52:04:01:16:b7:3a:0c:a8:1e:b2:51:4a:ea:
f7:79:ec:60:50:f1:eb:43:a8:2c:bc:b2:72:07:a0:
7a:da:49:41:b5:05:74:2c:07:96:6b:14:e8:7c:e4:
61:34:b9:58:8f:ce:df:65:1d:cf:c0:8f:fb:1b:7d:
ce:bc:7c:a2:d8:35:92:57:46:a1:72:23:f9:d0:a6:
12:c8:ff:e7:5e:1a:c3:a5:02:ef:d4:f0:3a:e7:dd:
81:00:fd:5d:6d:cc:d8:c0:83:6a:ef:bc:ce:79:4b:
c7:24:b5:77:3a:c1:6a:55:a5:32:d5:67:11:7c:7a:
bf:a8:c1:c0:e3:51:52:51:ae:12:e0:c9:87:9b:bc:
e3:5f:0a:59:34:73:ab:ec:8c:e3:55:93:3b:7c:d1:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7f:72:bf:0d:28:c3:ae:1f:ff:a1:df:06:f2:24:b7:9a:5b:
22:9f:06:46:b4:c9:26:b0:07:28:b8:99:c7:6d:30:1b:dc:42:
71:29:e4:61:a9:d5:79:7b:bf:1d:70:4b:8f:c8:26:d4:d9:73:
5a:03:47:cb:89:cd:18:0a:fe:61:31:a3:71:8a:00:fd:01:a7:
d6:a8:d3:4a:c7:fb:f9:69:38:58:97:1c:00:78:2d:9c:62:5a:
0c:24:f4:37:c3:63:b5:bf:27:cb:25:92:78:57:b5:17:98:45:
f5:a4:72:ad:b3:ad:b0:c3:d2:70:5a:b3:79:ac:30:da:17:85:
be:10:61:bd:91:00:6c:5b:01:20:cf:0a:4c:0c:b4:49:b4:64:
7f:9b:98:9f:78:8a:54:0f:98:db:57:85:ea:5c:e1:24:c0:31:
da:09:06:45:27:9d:29:af:f7:66:0a:46:42:9a:6f:6e:27:e5:
b5:fd:46:43:52:e1:e8:fd:6f:53:4f:1d:6a:8e:a7:44:2f:78:
5a:36:bc:16:c5:b7:97:0c:e5:b0:4d:b1:a0:d5:bc:70:fb:f3:
96:14:87:41:b8:42:b3:8b:ae:c8:2e:bd:df:8a:fa:8f:3c:e1:
d8:79:61:c2:bf:24:45:ea:60:53:eb:4f:7a:0a:39:77:41:70:
32:23:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:11 2024 by rpki-client on console-ams.rpki-client.org