Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.cer
File: ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.cer (raw, json)
Hash identifier: wQgEiZSO5rhXtsakwWhwkKYLoOwt0LFMypizgachGzw=
Subject key identifier: 64:A6:05:B9:08:32:BB:15:6A:F5:E4:B2:BE:06:27:C3:96:6C:0D:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BE63BF78A2132E75E851BDBFE570A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/b31f26-4132-4421-a14d-1ab191b694e0/1/ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/b31f26-4132-4421-a14d-1ab191b694e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.216.217.0/24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e6:3b:f7:8a:21:32:e7:5e:85:1b:db:fe:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64a605b90832bb156af5e4b2be0627c3966c0d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:d8:72:60:62:23:32:d2:4b:21:c4:ae:fc:
46:7d:85:d7:28:b4:a9:e0:5f:9a:2e:00:81:2b:95:
85:42:4a:52:ed:87:e4:30:38:ac:13:d5:68:0a:e0:
d0:f2:3f:b1:63:55:c1:31:39:cc:55:6e:93:3a:bd:
e0:79:66:e2:61:d7:94:d3:58:d7:1b:00:6a:d0:ec:
33:8b:26:22:6f:25:82:32:e8:47:89:42:df:cc:c9:
82:62:3b:5a:93:da:0a:3a:21:9a:7d:62:37:17:2f:
06:cb:c6:30:ea:20:0f:5e:41:c6:4e:67:fe:bc:3e:
c0:9c:08:54:10:9a:6c:3a:39:6f:c2:ae:d4:a6:27:
39:16:da:cb:85:c6:56:25:b2:2e:53:be:f8:f7:fe:
f1:96:aa:73:65:32:43:82:1b:84:35:2b:e4:60:8a:
6b:91:90:43:f1:26:fe:34:47:67:55:f6:49:04:00:
29:e9:3b:29:e4:26:2b:a7:ce:23:30:c8:8d:7d:55:
1b:22:20:70:51:ae:56:c3:77:a2:47:c7:61:ec:cd:
5d:e0:97:94:f8:49:51:a2:b7:65:ad:a3:e0:a0:1f:
23:cf:ca:b9:67:03:4d:83:ab:9e:42:ae:d9:e5:f4:
d2:ef:01:01:1b:26:e8:58:70:38:37:b4:55:57:df:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A6:05:B9:08:32:BB:15:6A:F5:E4:B2:BE:06:27:C3:96:6C:0D:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b31f26-4132-4421-a14d-1ab191b694e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b31f26-4132-4421-a14d-1ab191b694e0/1/ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.217.0/24
Signature Algorithm: sha256WithRSAEncryption
22:92:d9:ce:af:3d:d1:a8:73:de:f3:d6:2e:2c:93:36:13:f5:
88:8f:3b:f6:6f:c1:2a:0f:d6:e9:a1:3d:11:46:cd:91:cc:48:
53:d9:3c:4a:8c:4f:44:0c:39:59:01:e3:6d:5b:16:73:7d:d6:
f0:2d:7e:1a:be:38:41:bf:ec:0a:8c:0b:14:18:67:74:7a:b9:
a7:74:69:09:5d:75:f1:3d:2f:f4:84:63:c1:ca:79:2f:16:c7:
8d:76:77:2b:d8:7a:eb:05:61:eb:78:5b:03:94:68:b1:91:ad:
09:6a:23:ce:da:3f:3c:ed:f8:b7:6d:36:46:3b:96:34:66:c2:
b5:a8:22:34:10:2d:40:f8:4b:77:63:30:47:a6:48:42:2d:82:
f1:a2:c3:97:d5:43:3f:a8:87:90:00:52:aa:e3:55:78:fd:6a:
ba:05:c6:f1:7e:8e:26:74:6e:3c:0b:85:9a:d9:40:17:69:4d:
e8:25:79:27:d2:4d:af:cc:59:95:58:1e:23:ef:f2:dc:16:ed:
d6:31:65:7f:e6:c9:ce:d0:9b:14:f1:93:74:18:46:34:4a:70:
30:17:d5:68:10:24:7d:d3:06:dc:84:64:b4:08:d1:a8:51:9c:
d1:65:93:b6:6d:02:bf:d8:bd:98:88:6d:5c:d7:2b:5c:ed:6e:
bb:2a:b9:81
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzKK+Y794ohMudehRvb/lcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzNTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGE2MDViOTA4MzJiYjE1NmFmNWU0YjJiZTA2MjdjMzk2NmMwZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjPYcmBiIzLSSyHErvxGfYXXKLSp
4F+aLgCBK5WFQkpS7YfkMDisE9VoCuDQ8j+xY1XBMTnMVW6TOr3geWbiYdeU01jX
GwBq0OwziyYibyWCMuhHiULfzMmCYjtak9oKOiGafWI3Fy8Gy8Yw6iAPXkHGTmf+
vD7AnAhUEJpsOjlvwq7Upic5FtrLhcZWJbIuU7749/7xlqpzZTJDghuENSvkYIpr
kZBD8Sb+NEdnVfZJBAAp6Tsp5CYrp84jMMiNfVUbIiBwUa5Ww3eiR8dh7M1d4JeU
+ElRordlraPgoB8jz8q5ZwNNg6ueQq7Z5fTS7wEBGyboWHA4N7RVV99FOwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGSmBbkIMrsVavXksr4GJ8OWbA16MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2IzMWYy
Ni00MTMyLTQ0MjEtYTE0ZC0xYWIxOTFiNjk0ZTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvYjMxZjI2
LTQxMzItNDQyMS1hMTRkLTFhYjE5MWI2OTRlMC8xL1pLWUZ1UWd5dXhWcTllU3l2
Z1ludzVac0RYby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9jZMA0GCSqGSIb3DQEBCwUAA4IBAQAiktnO
rz3RqHPe89YuLJM2E/WIjzv2b8EqD9bpoT0RRs2RzEhT2TxKjE9EDDlZAeNtWxZz
fdbwLX4avjhBv+wKjAsUGGd0ermndGkJXXXxPS/0hGPBynkvFseNdncr2HrrBWHr
eFsDlGixka0JaiPO2j887fi3bTZGO5Y0ZsK1qCI0EC1A+Et3YzBHpkhCLYLxosOX
1UM/qIeQAFKq41V4/Wq6Bcbxfo4mdG48C4Wa2UAXaU3oJXkn0k2vzFmVWB4j7/Lc
Fu3WMWV/5snO0JsU8ZN0GEY0SnAwF9VoECR90wbchGS0CNGoUZzRZZO2bQK/2L2Y
iG1c1ytc7W67KrmB
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:33:03 2025 by rpki-client