Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pz-1CMjrPROMUFV2nsIUg2noabw.cer
File: pz-1CMjrPROMUFV2nsIUg2noabw.cer (raw, json)
Hash identifier: UehKzGep4Ek80bGmMcQOfc5VxJCrJ4EZLnax9fXPBJo=
Subject key identifier: A7:3F:B5:08:C8:EB:3D:13:8C:50:55:76:9E:C2:14:83:69:E8:69:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D576A43862B61BE65D15EA0CF21B44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/pz-1CMjrPROMUFV2nsIUg2noabw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:34:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.147.22.0/23
Validation: Failed, certificate revoked on Thu 14 Dec 2023 15:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:76:a4:38:62:b6:1b:e6:5d:15:ea:0c:f2:1b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a73fb508c8eb3d138c5055769ec2148369e869bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:d6:e5:ca:3d:34:81:c3:3f:83:44:5e:f0:
d8:90:4d:0e:98:fb:fe:b7:43:d7:69:ad:ca:ed:91:
9b:84:4c:83:6f:24:60:ee:33:02:74:19:70:c9:d2:
b1:a8:5a:89:46:b9:95:20:0b:8e:db:1e:ee:dc:c0:
f4:b7:7d:a9:51:10:6e:0c:7e:4a:4b:00:8b:e6:10:
0c:0a:cb:97:d0:e9:63:cd:66:f2:50:e8:9f:0f:66:
85:e0:a6:c9:0d:f0:b4:f0:60:9c:a3:82:85:59:ca:
e7:52:19:e3:40:0b:bc:eb:0f:4e:61:37:47:e1:cb:
67:c0:17:05:ec:be:ed:3a:6c:20:fa:16:80:03:ea:
4a:c3:1c:76:4c:49:d3:b5:3f:5c:10:1a:8b:7e:e0:
ed:26:e0:e4:bd:92:b7:b2:0b:6d:0e:31:1c:e6:f8:
f9:01:43:32:d7:b1:ff:01:70:90:f4:0a:c0:d6:78:
11:93:5d:8d:0f:e3:a6:e8:ae:80:e9:18:f3:58:2a:
34:58:1c:8b:ba:3c:76:f9:9e:d7:15:7d:58:3b:44:
b0:32:a0:d0:3d:6b:c6:0e:c0:bd:57:99:e7:dd:61:
94:44:c8:51:0b:84:5f:b7:d7:f5:84:f2:ac:23:60:
42:a0:3b:76:05:a2:1e:87:64:ad:92:5f:7c:99:5a:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:B5:08:C8:EB:3D:13:8C:50:55:76:9E:C2:14:83:69:E8:69:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/pz-1CMjrPROMUFV2nsIUg2noabw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.22.0/23
Signature Algorithm: sha256WithRSAEncryption
18:7d:00:40:fd:44:6a:a4:9a:d3:09:11:69:d1:1f:e5:e8:f9:
0f:0b:f2:ea:14:7d:16:a9:21:69:f2:89:95:0c:a9:e5:fd:9d:
b8:91:63:ac:34:3f:af:40:62:b4:76:32:34:95:68:65:44:b8:
41:95:3e:d9:2e:ef:ef:b8:ed:b4:b4:a1:e6:78:bc:5b:eb:e6:
64:af:84:54:e9:7c:39:b2:4e:c5:70:e7:de:c2:d1:2d:b0:59:
6b:a9:70:79:fa:dc:0b:72:05:4a:7d:e3:04:0d:55:bc:cf:d4:
42:a4:f6:bc:2e:af:66:49:6a:7e:b5:04:79:9c:e8:9e:dd:b3:
ce:ca:67:7e:a4:af:fe:06:22:b0:d7:7c:49:be:10:33:75:82:
97:6d:d8:f1:c1:5e:90:ba:7d:4f:2c:c8:ba:45:ce:03:07:78:
99:9b:4f:d7:62:ba:60:34:5d:b9:78:16:e1:6a:9a:2a:37:62:
58:b6:39:53:fe:1a:31:be:09:d9:fa:b3:ff:ba:9d:33:bc:7e:
1c:8c:67:54:0b:b1:27:d5:0f:86:a4:ea:b4:53:9c:c0:a6:50:
4f:c8:8c:b7:a2:5a:b1:d2:ff:d4:41:a5:7e:e0:25:e6:5c:14:
28:16:ed:42:aa:8f:65:b5:36:3e:eb:8d:8e:9d:d2:af:ea:52:
96:1f:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:51 2024 by rpki-client on console-fra.rpki-client.org