Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZytKlWeNmNQI43iOgi-Ep013OO8.cer
File: ZytKlWeNmNQI43iOgi-Ep013OO8.cer (raw, json)
Hash identifier: YcdmhjJ8EOh3UTaHqB6mvdcIY6e8R9jbO9xoMVXtmLk=
Subject key identifier: 67:2B:4A:95:67:8D:98:D4:08:E3:78:8E:82:2F:84:A7:4D:77:38:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF522DFE335E88A6690298E6EDABA6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/ZytKlWeNmNQI43iOgi-Ep013OO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 200774
IP: 2a00:58c0::/32
Validation: Failed, certificate revoked on Wed 12 Jul 2023 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:22:df:e3:35:e8:8a:66:90:29:8e:6e:da:ba:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=672b4a95678d98d408e3788e822f84a74d7738ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:09:fa:9c:fd:bb:a2:e3:c2:86:84:f0:d8:
3a:8e:22:b6:ba:87:ac:31:5f:79:ee:a4:af:4d:a5:
bb:e7:69:10:c7:6c:3b:e2:0e:0d:81:bc:aa:e3:3e:
3b:7b:3a:c5:f4:31:b6:34:d4:6a:e7:a1:09:6c:63:
8e:0c:81:18:17:97:41:69:cb:19:10:25:5c:b5:4d:
5b:93:9b:ca:8d:d9:2d:3c:a9:70:2f:7e:33:54:aa:
f9:2e:7a:c2:21:0a:f6:c3:35:01:5c:cd:0b:b8:42:
f2:82:cc:e6:6c:57:32:3f:ea:6b:e0:7d:b5:44:e5:
60:3b:26:ca:43:65:62:5c:95:bd:2c:fe:62:fe:1a:
cc:1f:eb:96:20:6f:5d:46:c7:f1:b9:7d:8d:58:28:
f1:93:b8:dd:fb:59:b0:eb:6c:ac:74:28:8d:b0:4a:
5a:de:1c:79:0e:35:c1:6a:b8:83:af:38:3b:94:1a:
bd:fb:80:bb:d6:da:9b:b4:26:79:55:1a:34:6a:2e:
1a:84:77:0b:60:86:bb:5e:95:4c:3a:38:86:6c:1c:
73:d7:ea:12:ca:7d:48:d5:19:ba:c1:a3:c4:87:1d:
cd:63:7d:7d:df:79:fc:db:78:85:f9:5f:dd:1f:16:
85:46:84:b6:b7:d1:62:38:be:12:3c:d3:0f:13:3f:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2B:4A:95:67:8D:98:D4:08:E3:78:8E:82:2F:84:A7:4D:77:38:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/ZytKlWeNmNQI43iOgi-Ep013OO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:58c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200774
Signature Algorithm: sha256WithRSAEncryption
1d:72:8c:04:3a:c2:e3:9e:ad:7e:80:87:79:69:b2:7e:92:3c:
5a:44:14:f7:72:dd:5b:ff:9e:07:3d:d3:08:7f:ab:5e:66:c2:
e5:8e:65:14:e5:77:6a:21:af:8f:dd:ab:54:8f:6c:ba:88:7c:
81:03:8b:cb:c7:30:1c:05:58:fa:14:eb:5a:5d:7b:64:38:f7:
e8:12:bb:bb:bf:05:57:0e:f9:bb:37:f4:db:09:7d:5b:05:e1:
9e:72:9a:3c:f4:fb:cf:fe:76:fa:ed:d5:2c:24:8b:96:3d:ad:
c0:da:82:73:fd:79:70:f6:ab:16:3f:35:ef:9f:79:66:ae:13:
1e:fd:1d:87:f2:2c:b9:69:27:32:02:65:06:a3:61:7f:07:29:
ac:44:ec:35:41:96:3a:a6:92:5e:cf:94:bf:a5:98:8f:96:9b:
83:a7:76:b4:dc:94:ee:b8:af:b9:0e:bb:05:75:25:9a:fd:0b:
95:47:ba:c2:b9:a0:c9:d0:16:1b:b3:dd:96:c1:b3:e4:63:5c:
08:04:4b:03:90:45:f2:09:1b:d1:2e:3f:af:ba:13:89:4f:c5:
cb:a3:6a:05:77:e9:40:61:cf:43:98:14:b2:43:95:87:7d:09:
42:3b:5f:10:cb:30:eb:e9:6a:14:1f:88:e2:28:33:f2:69:67:
f8:8e:95:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:30 2024 by rpki-client on console-fra.rpki-client.org