Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kzK2bz7mtuy_i4hPEmFwp3Zr77k.cer
File: kzK2bz7mtuy_i4hPEmFwp3Zr77k.cer (raw, json)
Hash identifier: eOThaJdRGYQ+x6ne6aCT3xghH0BEUfMLkOj2bYCboo4=
Subject key identifier: 93:32:B6:6F:3E:E6:B6:EC:BF:8B:88:4F:12:61:70:A7:76:6B:EF:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B634090CDF53D9996DE991BA7327FD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/kzK2bz7mtuy_i4hPEmFwp3Zr77k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212150
IP: 2a10:a280::/29
Validation: Failed, certificate revoked on Mon 02 Jan 2023 13:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:40:90:cd:f5:3d:99:96:de:99:1b:a7:32:7f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9332b66f3ee6b6ecbf8b884f126170a7766befb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:14:b4:52:66:7a:1e:32:fb:e6:41:c6:7c:ef:
63:fd:20:36:65:b2:e6:3c:f6:b8:f9:21:ee:1b:73:
fb:e7:a2:c5:60:8e:18:92:17:78:64:57:c1:21:12:
7b:6a:62:4e:5d:16:87:b0:87:7c:af:42:c6:60:09:
1d:95:54:60:6e:6e:47:5f:7b:6f:9a:b1:3f:31:38:
0f:ef:9b:6c:34:60:ab:12:38:a9:93:6f:4a:ae:42:
32:a4:56:71:e1:14:24:fe:f6:35:4e:77:fb:00:0f:
47:4f:17:d2:95:91:6b:17:1a:a2:fc:4d:c7:f9:6f:
30:78:61:77:8d:45:4f:eb:48:df:eb:fb:dc:e0:bb:
31:71:03:e3:25:e4:d8:a6:cc:11:d2:bd:d7:59:4a:
70:a1:2d:22:00:ad:47:d6:e3:92:b7:d8:51:03:3a:
97:97:30:ac:99:03:ff:6a:62:9d:53:cc:ea:a6:3d:
d5:bc:51:3f:6e:da:31:5f:65:ad:08:58:cd:64:3d:
10:07:9e:0f:c0:fe:63:41:67:ce:42:8f:20:31:e1:
2b:1b:81:00:95:69:da:bf:25:5c:fa:40:1b:6f:31:
5f:1b:bc:43:79:87:c1:fe:1d:a8:b6:41:22:11:a8:
0b:6b:f9:d9:2b:fb:3d:66:3e:37:40:41:1c:b6:12:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:32:B6:6F:3E:E6:B6:EC:BF:8B:88:4F:12:61:70:A7:76:6B:EF:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/kzK2bz7mtuy_i4hPEmFwp3Zr77k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212150
Signature Algorithm: sha256WithRSAEncryption
6d:73:b6:e1:7b:6f:4c:75:bd:3d:5f:3c:44:8e:a8:43:91:2c:
3f:94:36:20:99:59:b0:18:a3:64:2b:e8:0b:2d:e6:d8:6c:e8:
ec:9f:d0:a2:71:5d:e2:73:8f:88:97:ca:c0:f3:13:e1:8e:d0:
a8:34:64:b6:c8:5f:dd:58:f9:e9:c6:2d:ff:99:1f:2d:84:8c:
1e:89:f6:41:ca:37:2c:3c:8e:d5:0e:a0:1e:17:15:ea:c9:74:
96:81:f8:b0:61:2f:ee:b2:f7:15:4e:22:85:39:1e:99:69:74:
38:74:d8:ad:81:21:2f:61:2e:2f:22:1d:42:35:cd:c2:f5:75:
c9:fb:92:a2:89:29:da:69:77:1c:81:4c:16:ad:7e:58:b3:5a:
f2:72:d0:11:bd:c2:3f:15:9e:a8:56:81:c4:92:a0:5a:91:80:
4c:d3:53:73:01:47:00:c7:1e:07:64:9d:4b:34:79:59:bc:ee:
cf:86:e7:0f:d6:cf:70:91:f2:a3:7b:2b:16:90:62:8d:d3:77:
be:73:32:b1:6b:ec:ae:af:e3:09:42:fd:53:13:d1:21:59:50:
a7:bc:a5:8a:ff:61:fc:86:0d:94:ca:b3:47:1a:b7:70:32:e7:
85:24:15:ea:7d:8b:fb:9f:31:d4:bd:4c:cf:10:26:87:ac:de:
cb:0d:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:02 2024 by rpki-client on console-fra.rpki-client.org