Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZrpHR08sBT1rBsGDy9BvEG6JC_k.cer
File: ZrpHR08sBT1rBsGDy9BvEG6JC_k.cer (raw, json)
Hash identifier: Ey5V7C/mE+qsgV3KNoQwgfvKxvFmzr5NN7nA9LEFh4s=
Subject key identifier: 66:BA:47:47:4F:2C:05:3D:6B:06:C1:83:CB:D0:6F:10:6E:89:0B:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4937B85D496AB5DE1BD4C826EF4C9A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/5de8ae-1705-4317-9ff5-ae9d419ef6ea/1/ZrpHR08sBT1rBsGDy9BvEG6JC_k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/5de8ae-1705-4317-9ff5-ae9d419ef6ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.96.68.0/22
IP: 2a03:fd00::/32
Validation: Failed, certificate revoked on Mon 29 Jan 2024 15:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7b:85:d4:96:ab:5d:e1:bd:4c:82:6e:f4:c9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ba47474f2c053d6b06c183cbd06f106e890bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:26:6c:db:4d:41:30:00:b6:91:92:96:e0:
8f:e8:7d:98:4e:32:b0:d3:ba:94:1b:6d:b4:84:46:
b6:82:6c:72:8c:51:d7:ef:c4:de:87:b2:b7:8b:bf:
c5:f8:ca:09:3e:a7:45:79:04:98:ad:30:cb:14:63:
2d:5f:e6:f4:1a:48:46:f1:ae:df:7d:5b:54:54:be:
a4:88:57:a7:16:e4:13:8b:21:57:b8:11:fe:b0:46:
8d:3c:76:19:a0:13:77:7f:b8:10:31:ab:29:cc:cf:
99:e6:0d:80:26:52:fc:59:f9:2c:60:ca:71:a5:70:
13:9d:2e:96:0c:8f:58:07:0b:b4:51:d3:4a:a9:6d:
5a:88:95:a5:05:6c:8e:df:50:58:40:14:ce:a5:a6:
e7:6b:03:56:ce:a2:11:d9:29:23:18:b5:9d:bf:d7:
c6:c0:9f:2b:94:93:a3:02:1b:18:f2:ac:db:70:d1:
b7:a0:00:a1:cb:fc:a5:69:6e:4e:77:86:cf:ac:6e:
c5:c1:e6:d5:04:03:56:57:22:ce:f3:58:68:bf:0f:
70:62:6c:69:35:cc:99:45:de:0a:06:34:59:80:73:
db:8a:7d:06:ca:1f:85:a5:b5:1a:f0:ae:21:26:d5:
f7:b8:6e:fd:3f:bd:26:46:a9:d5:65:9d:b7:89:fe:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BA:47:47:4F:2C:05:3D:6B:06:C1:83:CB:D0:6F:10:6E:89:0B:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5de8ae-1705-4317-9ff5-ae9d419ef6ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5de8ae-1705-4317-9ff5-ae9d419ef6ea/1/ZrpHR08sBT1rBsGDy9BvEG6JC_k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.68.0/22
IPv6:
2a03:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
7d:91:a3:f0:c2:83:67:77:2a:a9:05:a3:46:ab:bd:06:ab:86:
dd:75:b8:a7:90:e3:c9:c1:be:41:95:97:de:21:ae:4c:6f:1b:
b7:b2:eb:86:c0:a2:eb:b8:90:1e:8f:0a:b0:cc:f7:f4:6f:00:
24:0e:b2:2e:e1:02:0c:ae:a5:13:f9:a5:5a:81:a5:3f:40:84:
11:a5:06:4c:31:11:63:7b:e9:2c:89:93:db:5a:b0:f7:a0:33:
9d:a3:9a:8f:94:91:1d:cd:f1:44:99:b5:7e:4c:4b:35:e1:5d:
cb:2f:f4:89:61:80:2b:06:02:4c:2b:76:f7:93:99:33:ec:96:
e9:6f:29:8e:69:dd:dc:d8:d4:ff:b6:45:e6:39:0a:06:3f:ec:
cc:fa:38:a2:f5:f7:50:00:59:93:62:4a:b2:00:49:86:25:2f:
60:7e:ba:90:82:96:d5:ad:07:1d:b1:d0:51:b6:a8:53:84:58:
3d:07:2d:cb:a8:4f:3a:c0:da:34:91:4e:db:74:15:cf:68:b4:
3b:0d:22:a0:af:a3:b6:10:27:e8:6b:23:0a:ba:4b:35:c7:cb:
cb:0f:9d:01:cb:14:52:19:9f:a7:b0:e2:19:55:08:a2:b4:93:
54:e7:4f:fc:51:16:25:ba:bc:6f:58:20:40:da:fc:4f:5e:e7:
76:4e:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:58:22 2025 by rpki-client