Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeLlumvKdMSJRHHA4CHU4njxr5A.cer
File: ZeLlumvKdMSJRHHA4CHU4njxr5A.cer (raw, json)
Hash identifier: NpycqC1G2XbPCLbBkVzl7s/LprF2s4k32FeZREDcjY4=
Subject key identifier: 65:E2:E5:BA:6B:CA:74:C4:89:44:71:C0:E0:21:D4:E2:78:F1:AF:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701CD3632A8097D97D429E93795EE050
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/ZeLlumvKdMSJRHHA4CHU4njxr5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:33:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.255.186.0/24
IP: 2a11:b680::/29
Validation: Failed, certificate revoked on Thu 07 Sep 2023 07:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1c:d3:63:2a:80:97:d9:7d:42:9e:93:79:5e:e0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:33:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e2e5ba6bca74c4894471c0e021d4e278f1af90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:d3:91:63:91:66:ca:ad:e4:5b:aa:ca:50:
7e:9a:70:9d:0e:02:18:de:41:03:b5:5f:f1:c7:5b:
6e:8c:0b:f1:18:bf:94:01:98:8e:75:66:f2:b1:03:
83:0b:7b:d0:35:d0:bc:8c:4d:0b:83:2f:b3:15:f2:
d3:bb:02:85:c7:30:d0:1b:db:73:6f:0e:c6:b3:5d:
08:3a:e6:ac:00:77:e7:94:c0:59:11:33:bd:33:2a:
74:cc:2c:c7:88:95:8a:9a:45:7a:ec:17:b2:d6:38:
fa:0f:cf:d8:41:99:ac:19:fa:f6:73:1d:2f:4a:e0:
a3:76:83:11:08:d6:98:aa:12:d5:82:10:f1:28:d9:
f1:6f:e2:86:79:54:a6:c3:4f:59:83:a9:2e:20:cc:
16:04:14:33:5c:3e:02:13:54:77:e8:b8:8a:bb:5c:
28:1a:08:99:02:25:59:73:c8:f5:fe:2e:d9:c8:b7:
0d:8b:66:97:5c:45:31:de:42:15:d3:9b:fa:d4:db:
8e:a9:4d:d0:fe:74:1a:92:9f:69:53:db:d8:e4:20:
fd:b7:52:aa:9a:c8:e6:d6:d6:ac:6f:e5:44:16:44:
56:b2:53:54:e3:2b:98:3e:17:ac:ad:66:d8:90:65:
4c:35:5e:b2:ef:27:98:e1:bc:7f:f8:b6:75:54:27:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:E5:BA:6B:CA:74:C4:89:44:71:C0:E0:21:D4:E2:78:F1:AF:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dbfce1-9ae4-4c57-bb17-f4c6acf5b8db/1/ZeLlumvKdMSJRHHA4CHU4njxr5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.186.0/24
IPv6:
2a11:b680::/29
Signature Algorithm: sha256WithRSAEncryption
8a:2e:d5:52:c8:8d:7e:35:03:ef:16:c0:de:ca:aa:f0:43:fa:
fd:ac:a9:6a:cc:bd:c9:b8:cf:39:a7:ba:40:f6:93:84:5a:b1:
c5:b8:a8:4a:15:dd:bf:71:73:0a:81:ae:83:9a:90:05:40:d7:
8f:53:64:90:cb:1d:8c:7a:d4:4d:fd:01:73:54:b5:b2:91:ee:
af:be:73:c6:1c:4c:85:9b:44:dc:47:f2:85:40:77:b3:03:6f:
8b:d2:87:bd:7b:c0:74:f5:40:0d:2c:f0:4b:06:0d:9b:f3:14:
2a:b9:d4:ec:8d:e1:0d:f9:0d:c5:80:0b:e3:f2:48:f8:14:ac:
5c:db:f3:3d:7a:83:bb:27:5f:2d:5a:4f:dc:59:d5:a0:1c:c6:
b9:e7:cb:85:b0:2d:af:3f:0f:07:ce:b0:8f:f1:f1:ba:b7:bd:
b2:4f:dc:ac:bd:85:98:e3:10:56:24:e9:bd:fe:48:11:c5:e1:
7e:1c:5c:da:f7:8c:c2:7a:7f:44:54:28:be:27:3f:48:57:b1:
55:1a:19:33:04:9b:06:6b:1b:63:35:20:11:81:0b:fb:9d:c8:
93:97:9e:86:ff:08:92:10:8b:75:f6:9b:67:65:e9:bf:6d:05:
e2:db:46:91:4c:12:4c:00:69:17:e0:73:fc:77:06:82:9a:db:
9d:7f:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:18 2024 by rpki-client on console-ams.rpki-client.org