Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZV2wQ0qRe7KYCYanyE41EsKola0.cer
File: ZV2wQ0qRe7KYCYanyE41EsKola0.cer (raw, json)
Hash identifier: JUOT4tbf1ivef8ABONNBj/q55OK107crhMBSILjTbzw=
Subject key identifier: 65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B63483D48CF80F21B20A7F5F4C06C2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/ZV2wQ0qRe7KYCYanyE41EsKola0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.70.234.0/24
IP: 2a11:ef40::/29
Validation: Failed, certificate revoked on Tue 14 Nov 2023 15:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:48:3d:48:cf:80:f2:1b:20:a7:f5:f4:c0:6c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655db0434a917bb2980986a7c84e3512c2a895ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:11:f9:91:d7:99:0c:00:f5:ac:41:12:c6:
36:3b:4b:0e:3b:6e:d1:46:9a:40:58:9e:f9:08:77:
30:a7:84:7a:8b:81:d5:71:dc:5b:9b:a8:e0:0b:a1:
e5:0f:13:79:d1:0c:9c:52:ba:6e:21:9b:f4:a3:3c:
78:07:aa:12:b1:10:9f:46:31:b8:21:36:24:aa:d3:
17:8c:ef:ec:8d:45:2c:46:a4:1a:3f:bf:d4:25:65:
f1:84:b2:4c:ff:cc:35:63:bd:73:ff:c2:8a:f0:c4:
12:52:b1:20:e6:9e:9c:6a:ad:21:b8:d6:19:75:1a:
5b:9a:b7:95:a1:1a:68:b8:09:82:f9:50:7d:7b:66:
9f:6d:20:fb:69:80:16:bc:d4:d9:48:83:d1:32:34:
8d:67:40:62:81:5c:b9:af:0a:4a:a5:2c:44:31:fd:
82:d6:3b:d0:15:8e:dd:65:4a:5b:4a:23:af:5e:8d:
1f:a2:1f:8b:be:32:b9:4b:57:44:85:cb:14:91:ef:
c6:1f:52:24:47:43:e5:31:c5:d3:16:37:12:00:81:
55:4a:ef:4e:29:b2:b7:87:2e:cc:55:2c:17:5f:6e:
33:fc:17:e6:bc:cc:7a:6c:f6:ca:64:91:35:83:ad:
c5:07:19:d1:06:1c:70:4a:6e:5a:d3:46:77:f4:69:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/ZV2wQ0qRe7KYCYanyE41EsKola0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.70.234.0/24
IPv6:
2a11:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
ac:fe:72:b8:ea:72:d2:26:4f:89:ab:fc:af:bd:ec:26:22:1b:
7e:8d:6a:1e:2f:f9:0d:fa:45:66:57:60:62:a9:29:ba:de:9c:
59:ba:ff:2f:78:c2:e5:76:ae:46:47:0c:7d:ce:65:d2:48:9b:
77:03:a0:d9:af:5c:96:b4:28:ad:43:f4:8e:25:d9:4f:e4:7e:
25:9d:6c:56:d1:70:db:23:a4:5a:b8:bb:eb:cf:87:71:ed:18:
1a:e8:54:e7:0d:8d:2b:6c:87:e0:65:f4:20:de:38:fc:bc:48:
4e:85:70:a9:8d:95:35:65:ef:25:9d:37:2b:85:45:fb:b8:09:
15:6b:44:24:92:a8:50:95:7e:36:24:63:9b:ad:b3:3f:82:2a:
1e:39:a1:6d:92:ea:b9:9a:f0:18:9a:fa:bb:1f:61:38:32:49:
e6:0e:b9:6b:20:51:3d:54:45:19:76:a6:9b:ee:94:ff:48:02:
bf:35:3b:b3:e1:49:d9:50:92:60:1a:c4:36:20:07:37:d7:c3:
01:05:1d:63:21:ab:3f:18:d5:fd:9c:ce:b3:72:1f:7c:14:9e:
20:7b:6d:d4:c4:3b:1f:ee:27:a3:c1:9f:8f:71:7c:8b:19:85:
b3:b4:d0:16:29:73:cb:8c:36:85:6a:e0:02:84:d6:79:e3:83:
50:0b:05:6f
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVrY0g9SM+A8hsgp/X0wGwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDMzMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTVkYjA0MzRhOTE3YmIyOTgwOTg2YTdjODRlMzUxMmMyYTg5NWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq8R+ZHXmQwA9axBEsY2O0sOO27R
RppAWJ75CHcwp4R6i4HVcdxbm6jgC6HlDxN50QycUrpuIZv0ozx4B6oSsRCfRjG4
ITYkqtMXjO/sjUUsRqQaP7/UJWXxhLJM/8w1Y71z/8KK8MQSUrEg5p6caq0huNYZ
dRpbmreVoRpouAmC+VB9e2afbSD7aYAWvNTZSIPRMjSNZ0BigVy5rwpKpSxEMf2C
1jvQFY7dZUpbSiOvXo0foh+LvjK5S1dEhcsUke/GH1IkR0PlMcXTFjcSAIFVSu9O
KbK3hy7MVSwXX24z/BfmvMx6bPbKZJE1g63FBxnRBhxwSm5a00Z39GnjRwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGVdsENKkXuymAmGp8hONRLCqJWtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzg4YWJk
Mi02Mjg4LTQ0NzEtODBhYi1lNDlmN2YzMTM2MmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODhhYmQy
LTYyODgtNDQ3MS04MGFiLWU0OWY3ZjMxMzYyYy8xL1pWMndRMHFSZTdLWUNZYW55
RTQxRXNLb2xhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwkbqMA0EAgACMAcDBQMqEe9AMA0GCSqGSIb3
DQEBCwUAA4IBAQCs/nK46nLSJk+Jq/yvvewmIht+jWoeL/kN+kVmV2BiqSm63pxZ
uv8veMLldq5GRwx9zmXSSJt3A6DZr1yWtCitQ/SOJdlP5H4lnWxW0XDbI6RauLvr
z4dx7Rga6FTnDY0rbIfgZfQg3jj8vEhOhXCpjZU1Ze8lnTcrhUX7uAkVa0QkkqhQ
lX42JGObrbM/gioeOaFtkuq5mvAYmvq7H2E4MknmDrlrIFE9VEUZdqab7pT/SAK/
NTuz4UnZUJJgGsQ2IAc318MBBR1jIas/GNX9nM6zch98FJ4ge23UxDsf7iejwZ+P
cXyLGYWztNAWKXPLjDaFauAChNZ544NQCwVv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:16 2024 by rpki-client on console-ams.rpki-client.org