Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZfpZqCwJwXA7DcJMKYjsjC3aWXw.cer
File: ZfpZqCwJwXA7DcJMKYjsjC3aWXw.cer (raw, json)
Hash identifier: qXO4rEQxECmh2DLMlOcWD+fWijnP/+488zoM0NX6Y1Y=
Subject key identifier: 65:FA:59:A8:2C:09:C1:70:3B:0D:C2:4C:29:88:EC:8C:2D:DA:59:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185724619B2358D98D236DFC220852B06CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/1bacdb-ace1-496d-bca1-e2f92616f697/1/ZfpZqCwJwXA7DcJMKYjsjC3aWXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/1bacdb-ace1-496d-bca1-e2f92616f697/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 83.242.97.0/24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 09:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:19:b2:35:8d:98:d2:36:df:c2:20:85:2b:06:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65fa59a82c09c1703b0dc24c2988ec8c2dda597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:8b:a0:e3:cc:9f:ac:08:0f:11:e9:7d:41:
3e:31:68:b1:9c:64:a6:ca:ff:a6:28:85:ee:dd:35:
f9:fa:1d:ce:04:db:02:88:1c:69:95:a2:57:ca:04:
3d:f3:bf:7a:5c:a6:a4:f6:94:d4:0a:3b:56:68:d9:
89:88:2f:ec:06:f2:9d:71:a5:94:a6:93:b1:b0:e1:
41:75:4f:d1:ac:44:05:30:9c:4a:49:56:88:a3:ec:
c1:59:95:e1:fd:55:5b:71:02:8c:ab:53:b6:22:aa:
6e:00:99:93:b3:bb:30:82:51:95:1d:65:81:85:60:
84:f0:5e:71:22:85:9c:eb:ad:e4:bd:28:04:3e:54:
1b:40:cf:0d:a8:9e:50:42:85:1b:9c:31:43:d3:10:
d9:ab:9e:ea:53:7d:65:14:d9:13:0d:e5:5c:84:92:
4f:d3:f6:06:49:53:13:39:6c:19:10:32:24:79:fc:
36:33:bb:22:89:fa:ba:75:83:70:8d:76:d5:a1:9c:
0e:6b:db:3a:b7:f9:3a:4e:a0:2f:5c:94:48:b6:5f:
ac:6f:ad:49:d2:9c:dd:b2:4a:0c:fa:cb:2d:06:20:
ed:79:51:bc:e4:51:93:49:b9:f9:85:11:44:1a:fd:
80:44:4e:d0:71:68:1f:b0:a0:c7:ad:01:5b:f5:db:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:59:A8:2C:09:C1:70:3B:0D:C2:4C:29:88:EC:8C:2D:DA:59:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1bacdb-ace1-496d-bca1-e2f92616f697/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1bacdb-ace1-496d-bca1-e2f92616f697/1/ZfpZqCwJwXA7DcJMKYjsjC3aWXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.97.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e2:e2:29:59:74:b5:75:7d:9d:31:9b:6e:09:37:ed:cb:74:
17:34:0c:55:4f:dd:7a:80:eb:ea:35:78:81:c5:d7:cd:43:db:
fb:ac:bb:77:93:1f:2a:34:33:32:99:f5:2a:50:22:38:64:25:
87:fa:5f:19:c7:bb:48:c9:8f:2a:bb:c8:ad:3c:8b:a8:b4:0f:
e4:27:db:bd:81:ed:c5:3d:0a:82:9a:12:a3:9d:f5:90:45:9c:
93:3c:58:37:6e:78:59:5c:8e:c4:c0:94:74:c0:5e:dd:d1:1d:
37:40:ff:bc:4b:68:e2:91:78:e0:0d:74:c0:37:74:31:45:a6:
ab:e2:8b:06:d8:e4:a2:d0:79:42:6b:52:6e:ad:ce:c7:a4:62:
5f:d0:1a:61:af:5f:3d:50:44:13:0c:e3:18:b6:c3:43:d5:23:
6c:6d:8e:2c:36:cf:f2:9f:9c:68:8d:4a:cd:e1:f1:fa:bf:12:
58:e9:9f:bd:30:cd:c8:60:3b:4c:92:0d:31:69:e7:66:69:20:
28:4b:6d:37:fe:44:cc:b4:bb:0c:eb:6a:be:d6:cb:f8:db:84:
00:2d:13:90:33:16:d0:25:c3:53:ba:36:c1:70:9c:c5:ba:bf:
fd:43:9c:20:c0:ec:01:dd:43:ef:bb:c8:ce:7b:d6:da:be:4a:
99:56:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:18 2024 by rpki-client on console-ams.rpki-client.org