Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
File: ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer (raw, json)
Hash identifier: esFHrXmYi3xzLbcTtcGRAdk661WFkbCD5sKoj9DFYnw=
Subject key identifier: 64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B95750BC37E41E1B35A0CE6F72CA35850
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Nov 2023 13:52:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.253.1.0/24
IP: 2a14:f00::/29
Validation: Failed, certificate revoked on Thu 23 Nov 2023 11:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:75:0b:c3:7e:41:e1:b3:5a:0c:e6:f7:2c:a3:58:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 3 13:52:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:87:f8:98:af:b9:94:d9:ae:22:d7:f8:2d:
a9:ba:c2:95:4b:0e:5a:3b:08:7f:42:cf:e6:f8:e8:
3e:08:4b:71:fc:a1:c8:a3:f0:93:e4:48:a1:c3:f2:
73:12:82:23:64:e5:2c:b4:a1:15:f0:bb:43:11:ec:
f6:6d:b3:f1:3a:19:2f:e4:22:6c:3f:16:72:3d:96:
5a:2d:d9:92:31:46:b8:4a:76:31:8c:4d:f2:77:db:
64:e7:be:8d:68:98:5a:04:04:f5:2e:4e:ab:40:d1:
35:91:47:56:84:e9:fe:62:3e:f8:da:7a:7f:4a:df:
a3:32:bc:dc:03:76:ea:bc:f0:43:28:1c:2b:6f:cd:
cb:44:36:39:ec:87:28:c4:23:bf:4a:da:73:17:e0:
45:70:ec:0f:95:77:a9:59:84:8b:a2:53:80:ba:d0:
1e:a1:b3:6c:cc:2b:10:e7:8f:77:3f:64:b3:b0:db:
ce:4c:10:c9:7b:b0:9d:7a:b4:55:9e:df:72:96:e1:
17:24:e3:2c:c1:e6:8d:85:5d:61:22:e7:a0:8e:4f:
2e:03:14:47:0f:fe:0e:e4:a7:b5:67:54:07:47:7b:
d1:e6:a3:15:80:8d:3a:e2:5b:b7:87:5c:e5:8a:d2:
da:af:e4:b9:7b:f7:57:7b:ae:47:0d:b7:19:a9:2f:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
IPv6:
2a14:f00::/29
Signature Algorithm: sha256WithRSAEncryption
6c:e0:c1:3f:92:eb:0c:45:20:8e:53:f9:81:ee:f4:93:01:78:
e0:1f:78:a3:4c:9a:00:34:54:ff:0a:f5:c7:d5:bf:02:e5:f4:
e3:64:63:a0:98:ff:3e:99:92:9f:ce:a0:7a:cb:41:93:17:67:
18:9e:06:a1:53:37:9b:e8:eb:90:5e:45:a1:3a:2b:7c:03:aa:
ab:c3:22:05:3d:7d:5f:9e:a4:cf:55:41:21:8c:47:83:ef:74:
af:4d:ab:8d:0f:09:f2:a9:b8:77:5a:11:10:d1:4b:24:b7:64:
b9:40:f9:42:59:ba:40:74:90:9a:ba:7a:6b:12:c9:dd:75:07:
ba:48:74:02:d6:e3:2c:5c:79:1e:1e:05:fa:13:45:24:49:7c:
fd:0a:c5:85:45:4b:68:4a:97:41:16:12:59:60:cc:f4:5a:36:
1c:b4:25:b9:5d:b3:d4:47:33:a5:a9:68:7f:a5:f4:09:6b:99:
b5:87:d0:58:5f:3a:b4:24:e6:4c:8c:3b:cd:07:a9:05:aa:e9:
0e:f2:71:11:f0:e7:d0:e2:9c:52:24:4c:89:e2:8b:c1:44:ca:
36:c3:3a:18:cc:60:09:a4:db:01:f9:46:75:85:42:2f:71:4f:
59:3e:54:e1:75:6e:35:07:c2:c3:d1:0b:83:6e:ab:df:1e:3e:
ae:2b:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:12 2024 by rpki-client on console-ams.rpki-client.org