Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZhApX_KG_055tVfu48yUPAPnKl4.cer
File: ZhApX_KG_055tVfu48yUPAPnKl4.cer (raw, json)
Hash identifier: aS1Vib4k4jj9jjkV98bROq05DCUevt7ORBx8LIsWVQM=
Subject key identifier: 66:10:29:5F:F2:86:FF:4E:79:B5:57:EE:E3:CC:94:3C:03:E7:2A:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E657B1D14F170394AC12EF3B8915C67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/ZhApX_KG_055tVfu48yUPAPnKl4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.3.19.0/24
IP: 2a11:1640::/29
Validation: Failed, certificate revoked on Thu 14 Sep 2023 13:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:7b:1d:14:f1:70:39:4a:c1:2e:f3:b8:91:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6610295ff286ff4e79b557eee3cc943c03e72a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:c8:41:2f:e5:2f:ec:96:79:9d:3f:64:2c:
f4:fd:a6:0b:11:e3:d4:c6:7b:2b:90:a5:4a:15:eb:
27:32:f3:9e:c3:3a:d1:ce:0e:5a:c2:c3:66:6a:aa:
fb:90:99:87:12:a5:ef:ed:c9:d5:12:f2:d7:ee:90:
2e:8b:df:10:cb:93:d7:5f:bc:ba:d1:bf:81:9c:3a:
d5:62:39:a8:07:dd:dd:66:e3:f8:e6:5b:de:be:53:
44:b0:6d:3a:89:0b:50:be:e6:22:2f:99:20:e3:99:
71:ca:45:11:7d:7c:5c:45:49:e3:e5:a5:da:72:95:
94:b2:ac:2a:7a:b1:56:8a:5d:78:07:13:df:b6:c5:
f3:5f:1a:43:15:9e:43:21:81:b3:15:c0:0c:0f:3d:
cf:5f:47:ef:6e:96:39:d2:23:ed:0c:f4:9f:73:4c:
8a:55:04:84:2e:25:db:a3:f4:9b:86:4c:b8:e4:7a:
50:46:43:3d:15:70:c8:3f:32:30:cb:52:2e:5d:b0:
85:81:3c:93:73:e2:e0:38:3b:aa:16:de:7b:2b:d5:
58:3d:5b:82:00:74:d1:35:00:17:ec:ab:57:4d:d6:
77:b5:16:6a:83:4d:84:d4:36:c0:d7:52:cf:03:96:
f5:d9:a8:33:13:d3:9a:60:b0:82:ee:ff:5c:97:f9:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:10:29:5F:F2:86:FF:4E:79:B5:57:EE:E3:CC:94:3C:03:E7:2A:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/ZhApX_KG_055tVfu48yUPAPnKl4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.19.0/24
IPv6:
2a11:1640::/29
Signature Algorithm: sha256WithRSAEncryption
59:02:50:c7:89:41:5f:72:02:82:4c:64:83:91:37:7d:80:38:
89:b2:5f:83:33:d8:c0:2b:2c:79:f1:d5:7c:9a:e3:87:ce:6d:
48:41:7d:37:08:05:97:cf:f1:35:7e:54:92:e4:74:2d:9d:be:
00:95:bb:7b:7b:ec:6a:e4:07:04:2d:36:cc:66:bd:c0:df:b9:
fb:33:16:b1:18:89:74:5a:e3:23:b1:0c:35:04:47:c0:2e:40:
b2:ec:03:2f:13:d1:0a:91:de:c0:dd:cc:cd:41:45:d3:e1:8c:
4a:a2:1d:03:69:9e:0a:c6:b4:65:24:46:44:ec:6a:27:83:15:
72:67:fd:87:af:98:5f:b5:cc:1b:1b:27:5c:66:4b:fb:b0:49:
8d:34:c2:91:d5:df:47:a7:30:1a:9a:e9:21:cb:10:1d:56:fa:
f2:f2:1f:d9:66:be:cc:90:30:ae:7b:23:78:0d:be:06:7f:99:
05:68:67:bf:02:22:44:1a:52:64:90:61:83:be:9e:60:a0:e1:
ef:e3:47:22:5c:ca:66:43:1d:ff:fd:93:c5:ff:06:f9:2a:d6:
43:e0:b5:ea:87:16:f6:46:13:1e:c3:18:47:8e:f0:2f:0d:ca:
54:a6:1f:c3:b4:ec:d4:73:c4:18:45:1b:fa:23:6c:08:5f:ac:
59:e3:9a:17
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVuZXsdFPFwOUrBLvO4kVxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTczMzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjEwMjk1ZmYyODZmZjRlNzliNTU3ZWVlM2NjOTQzYzAzZTcyYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kHIQS/lL+yWeZ0/ZCz0/aYLEePU
xnsrkKVKFesnMvOewzrRzg5awsNmaqr7kJmHEqXv7cnVEvLX7pAui98Qy5PXX7y6
0b+BnDrVYjmoB93dZuP45lvevlNEsG06iQtQvuYiL5kg45lxykURfXxcRUnj5aXa
cpWUsqwqerFWil14BxPftsXzXxpDFZ5DIYGzFcAMDz3PX0fvbpY50iPtDPSfc0yK
VQSELiXbo/Sbhky45HpQRkM9FXDIPzIwy1IuXbCFgTyTc+LgODuqFt57K9VYPVuC
AHTRNQAX7KtXTdZ3tRZqg02E1DbA11LPA5b12agzE9OaYLCC7v9cl/nYEQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGYQKV/yhv9OebVX7uPMlDwD5ypeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzZhMmE1
OS0zNzljLTQxNzktYWJkNy04ODQ3YzM0YTQ4NTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvNmEyYTU5
LTM3OWMtNDE3OS1hYmQ3LTg4NDdjMzRhNDg1Ny8xL1poQXBYX0tHXzA1NXRWZnU0
OHlVUEFQbktsNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwQMTMA0EAgACMAcDBQMqERZAMA0GCSqGSIb3
DQEBCwUAA4IBAQBZAlDHiUFfcgKCTGSDkTd9gDiJsl+DM9jAKyx58dV8muOHzm1I
QX03CAWXz/E1flSS5HQtnb4Albt7e+xq5AcELTbMZr3A37n7MxaxGIl0WuMjsQw1
BEfALkCy7AMvE9EKkd7A3czNQUXT4YxKoh0DaZ4KxrRlJEZE7GongxVyZ/2Hr5hf
tcwbGydcZkv7sEmNNMKR1d9HpzAamukhyxAdVvry8h/ZZr7MkDCueyN4Db4Gf5kF
aGe/AiJEGlJkkGGDvp5goOHv40ciXMpmQx3//ZPF/wb5KtZD4LXqhxb2RhMewxhH
jvAvDcpUph/DtOzUc8QYRRv6I2wIX6xZ45oX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:19 2024 by rpki-client on console-ams.rpki-client.org