Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jzh45rDzsQ5fMPRK651FU-2Agjw.cer
File: jzh45rDzsQ5fMPRK651FU-2Agjw.cer (raw, json)
Hash identifier: Lz8mvp7JlATW+JpvPkDnxazxC+IRTP6UkPRH0xtT8gg=
Subject key identifier: 8F:38:78:E6:B0:F3:B1:0E:5F:30:F4:4A:EB:9D:45:53:ED:80:82:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857167BB90686833A69A57BFE4891B590E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/jzh45rDzsQ5fMPRK651FU-2Agjw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.205.0/24
IP: 2a11:d640::/29
Validation: Failed, certificate revoked on Tue 24 Oct 2023 08:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:67:bb:90:68:68:33:a6:9a:57:bf:e4:89:1b:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f3878e6b0f3b10e5f30f44aeb9d4553ed80823c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:4f:ef:c9:4a:ea:8a:a1:18:db:96:32:e2:
b3:13:1e:fb:4a:ee:ff:30:31:54:be:5c:b9:07:fd:
d3:22:d2:24:8f:cb:a3:4e:8a:d7:5b:48:8e:3e:41:
14:00:aa:62:29:fd:de:7d:38:3c:36:16:2a:15:81:
2d:d3:ea:a0:1f:13:1c:2e:ce:c2:f3:70:bc:69:34:
00:4e:85:b0:80:9e:07:b8:8e:87:e0:75:a8:44:02:
c0:a9:cc:ee:15:1a:91:70:f2:06:ff:35:39:c4:8f:
0a:b0:f4:63:c0:62:cc:28:49:0d:7a:e7:37:ae:bc:
a2:5e:ca:9c:72:4d:86:a4:4f:f4:f0:f4:df:88:f4:
53:37:2b:3f:ef:39:1d:72:73:0f:10:9e:eb:33:18:
87:17:8a:f8:37:f5:55:99:93:d9:12:83:1c:b3:e0:
1f:5b:3f:40:9b:48:f1:4c:2a:17:f2:4d:4d:4d:0c:
dd:fd:27:de:a7:0a:b9:fe:e9:6f:75:76:4e:6f:92:
bf:33:c9:a4:d1:47:a9:cc:8f:f8:b1:18:67:38:5f:
c6:1b:6a:6a:fd:4c:4d:28:b9:73:4b:09:e6:c3:43:
b7:44:3b:ab:78:c3:eb:c7:d6:86:26:89:6b:26:7b:
a0:0c:c2:cb:54:35:a6:ce:69:8e:f5:f6:f3:33:08:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:78:E6:B0:F3:B1:0E:5F:30:F4:4A:EB:9D:45:53:ED:80:82:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/jzh45rDzsQ5fMPRK651FU-2Agjw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.205.0/24
IPv6:
2a11:d640::/29
Signature Algorithm: sha256WithRSAEncryption
50:7c:34:06:d9:e6:a4:c4:54:ab:bf:64:8f:81:2a:2a:da:f0:
57:ff:75:4d:e3:02:4b:64:90:18:ef:12:ec:7e:6a:23:1d:e2:
5a:97:25:3d:e0:f9:92:b0:54:66:f8:06:eb:c5:12:87:65:ca:
bb:85:94:76:71:23:17:08:dd:1d:ea:aa:86:f6:47:26:c3:8a:
38:33:0d:22:16:5c:94:21:ef:0b:ef:1e:0a:40:6b:75:d6:0a:
cc:95:67:ee:42:e6:ff:14:50:01:cc:31:dc:99:8f:c1:ee:a8:
29:4b:3c:a8:a1:41:44:33:d6:d3:dd:6e:db:07:58:ca:2c:0b:
f5:39:ca:39:5b:c4:39:eb:13:31:80:8a:de:39:4e:a3:9b:2d:
a2:62:b4:40:f3:2d:0e:a4:1a:2e:0e:18:ff:54:e8:a4:2e:bb:
7d:24:0b:3a:1e:c2:fa:78:22:b2:0b:15:86:32:e3:6b:22:14:
3f:63:8d:3a:20:72:f3:bd:0c:10:7e:ca:04:1e:74:d0:93:a6:
de:6b:60:da:b0:30:e1:fc:a3:6f:30:e3:bb:c4:5a:bd:ff:e4:
bd:28:2a:b1:54:00:44:b9:a7:2a:68:90:91:b4:5e:9d:b2:d8:
89:fe:87:0d:ab:d3:e6:39:65:54:f0:6c:85:d4:63:98:16:9f:
bc:3b:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:46 2024 by rpki-client on console-ams.rpki-client.org