Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeGimkV5vwic6EWkv_r4tkVTDZY.cer
File: ZeGimkV5vwic6EWkv_r4tkVTDZY.cer (raw, json)
Hash identifier: JPw2dntUdXYhQoAiLZVusHQ6/TYCOUNGcbFj/kszZnY=
Subject key identifier: 65:E1:A2:9A:45:79:BF:08:9C:E8:45:A4:BF:FA:F8:B6:45:53:0D:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571690286794E548E28026E1EFBAFE777
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/32ef0a-c5fd-4c1e-ae6e-93283df2c97f/1/ZeGimkV5vwic6EWkv_r4tkVTDZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/32ef0a-c5fd-4c1e-ae6e-93283df2c97f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.163.16.0/24
IP: 2a12:8600::/29
Validation: Failed, certificate revoked on Thu 16 Nov 2023 10:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:02:86:79:4e:54:8e:28:02:6e:1e:fb:af:e7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e1a29a4579bf089ce845a4bffaf8b645530d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:67:8f:8b:e7:7d:f3:cf:3f:bf:6c:a7:71:
ba:e8:23:b2:a6:d4:cf:a6:76:24:28:fa:91:8f:5c:
7c:66:90:fb:b0:cc:aa:82:b9:7c:4b:5b:e0:df:22:
7c:a5:89:34:c0:a1:f0:bd:6f:5b:49:59:ac:9c:32:
79:7a:5a:fe:6b:bd:df:b5:ba:13:36:75:96:51:49:
86:48:04:32:2e:d5:27:45:71:1a:f4:eb:7a:3d:ca:
ff:78:3c:47:e8:88:6c:1a:27:07:65:de:db:53:85:
59:8f:3b:8c:be:f5:0d:ed:02:cf:d4:01:6f:f8:fe:
59:b6:18:5f:68:14:56:26:af:98:df:08:de:b0:3d:
51:6b:57:e2:a4:55:a9:e9:91:2b:07:23:d9:0e:58:
28:d7:44:1e:fa:01:55:56:49:f5:d1:a2:e9:61:1d:
ee:fe:08:e2:8a:36:1a:dd:7c:11:28:4a:95:a8:c8:
d0:d9:1d:f1:96:0d:06:e8:85:36:f1:4c:ee:78:16:
3d:2b:23:f6:b5:77:9d:67:de:87:f6:88:5b:6a:7c:
9e:d4:c4:d5:62:e0:1c:17:e9:00:74:57:e2:45:96:
2f:fb:79:30:67:18:48:fe:f2:1f:80:23:ad:b6:21:
bf:fc:2b:e7:5c:e1:0c:14:03:64:e3:23:99:09:69:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E1:A2:9A:45:79:BF:08:9C:E8:45:A4:BF:FA:F8:B6:45:53:0D:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/32ef0a-c5fd-4c1e-ae6e-93283df2c97f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/32ef0a-c5fd-4c1e-ae6e-93283df2c97f/1/ZeGimkV5vwic6EWkv_r4tkVTDZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.16.0/24
IPv6:
2a12:8600::/29
Signature Algorithm: sha256WithRSAEncryption
39:1e:d6:6a:d4:69:24:e7:eb:a9:49:c6:b5:70:5c:fd:90:3c:
a0:db:d0:55:3c:9b:ae:a5:1b:b3:85:ff:61:1d:77:51:a4:c9:
31:00:b5:4d:82:34:5d:83:fd:63:30:14:da:c2:e6:c7:9c:b6:
65:b4:e7:fc:66:df:c6:9f:cf:3b:9b:3a:b1:73:58:04:63:61:
ec:13:be:73:12:ed:a7:b5:ec:89:26:e9:04:b3:f7:11:1b:03:
2e:96:b9:f0:c3:d3:5c:07:38:9f:2f:58:7d:a1:b8:55:9a:59:
41:98:f9:8e:32:5f:fe:d6:51:aa:a3:6c:a3:2a:8f:b0:d8:6c:
50:c0:73:56:ea:0e:23:ec:64:93:1e:29:4a:41:23:18:1f:d4:
1e:2f:0e:3e:08:1d:01:42:7d:68:80:f1:a8:13:bc:a6:7a:c5:
a0:f5:ef:c3:75:75:77:de:5a:48:6c:34:4d:76:8c:61:48:16:
78:aa:f9:a8:bd:e8:21:77:58:00:8b:ec:77:ba:83:36:8a:9c:
c5:95:60:ff:7c:be:bd:38:22:ac:20:9b:2d:b7:3b:ab:9c:b7:
95:c9:f6:88:86:d8:d0:62:7c:03:e7:82:38:ef:a6:10:5b:8b:
39:e9:ac:60:62:78:53:be:21:14:ad:01:ba:c3:9e:2b:7c:e2:
b5:5b:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:18 2024 by rpki-client on console-ams.rpki-client.org