Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zA4Aj9yl-I333HG79ZmbAT1f3RI.cer
File: zA4Aj9yl-I333HG79ZmbAT1f3RI.cer (raw, json)
Hash identifier: RG+IEF2va8YmiA4jAVdEdUoXnFBcARUnRnpd8kIrBOg=
Subject key identifier: CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EDB98490D2768628EFD7D0F490BBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/zA4Aj9yl-I333HG79ZmbAT1f3RI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203744
IP: 185.125.120.0/22
IP: 2a0e:8ac0::/29
Validation: Failed, certificate revoked on Fri 08 Mar 2024 14:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:db:98:49:0d:27:68:62:8e:fd:7d:0f:49:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc0e008fdca5f88df7dc71bbf5999b013d5fdd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ed:b8:c1:11:7c:c9:6c:1f:3e:8c:2a:8e:00:
ac:87:6d:2d:24:31:7b:8e:c5:3c:9b:9b:85:6c:9c:
e9:0f:a5:8a:dd:a4:de:2c:69:f4:e2:70:ab:b3:94:
5e:99:4d:04:3b:1a:27:0e:05:3c:de:81:91:29:02:
25:80:19:dd:f5:9b:0d:b6:94:b5:03:a7:a6:88:0e:
c7:fd:32:c3:91:69:32:93:a4:11:65:96:a9:b8:9b:
f7:04:86:22:f5:22:e9:f1:51:0b:af:7f:96:6a:00:
bf:09:cb:67:5d:25:5a:3a:6b:bb:c1:07:a5:fa:dd:
12:e1:05:ed:67:ee:3e:73:8d:77:c1:05:8c:dd:24:
d3:ed:3a:1f:93:b7:48:dc:22:56:20:cd:a6:c9:bf:
24:51:c4:c3:46:b3:0c:97:43:44:a8:3b:0c:19:75:
03:c5:53:3b:61:1d:b7:e3:47:cd:cb:1c:d0:71:53:
dc:5b:4b:f7:e3:7d:3e:be:80:4f:52:4b:8e:ed:28:
41:b4:14:54:ff:9f:ce:bc:3e:01:2a:db:a1:fc:65:
b2:0c:a3:dc:d1:1d:c5:b0:bf:17:76:92:a9:c1:38:
51:26:5b:23:64:1e:d0:17:b3:4f:ad:f2:29:51:c5:
f0:cc:09:cd:4b:05:a8:f0:19:c3:90:a1:56:40:ea:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/zA4Aj9yl-I333HG79ZmbAT1f3RI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.120.0/22
IPv6:
2a0e:8ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203744
Signature Algorithm: sha256WithRSAEncryption
ab:9f:79:9f:3c:17:9e:1d:3f:43:ff:6f:80:1c:2c:90:92:85:
7e:47:51:72:5b:35:bf:9d:2f:9b:c3:7e:9d:a6:ea:b8:aa:76:
d0:98:79:9d:82:ae:ee:01:31:25:8b:02:fc:58:f7:59:a7:d1:
b4:fc:8b:c1:09:d3:54:6d:7c:f6:17:0c:25:ff:64:ea:4f:38:
3a:ba:1c:12:3f:73:04:8e:a9:f8:17:0a:88:b6:b9:3c:32:ce:
f6:67:3f:23:77:c2:88:53:ed:fd:ac:40:df:12:2a:00:a5:48:
30:80:27:83:9a:b5:ea:62:8d:be:f0:0f:a1:cf:1b:82:fd:21:
b1:0d:e5:73:7a:ac:2d:df:08:1c:ea:24:00:71:6a:f9:33:3c:
a1:7e:56:2d:1f:25:f2:c5:ee:6d:de:0a:4a:7a:df:4b:39:bf:
5d:91:4a:ac:fa:ac:01:bc:a3:cc:45:40:c4:09:64:44:6a:fe:
c5:f6:4c:39:6a:37:89:2c:58:d9:14:98:e4:e5:77:d9:e4:33:
db:dd:d2:e3:03:be:60:5f:63:7f:1f:c0:81:50:71:3f:24:df:
c9:1e:30:59:eb:8e:42:98:f8:2d:7c:65:53:12:90:e2:49:1f:
7c:ba:24:07:97:a1:97:7d:04:f3:2c:64:80:ff:e2:48:3b:08:
a4:98:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:36 2024 by rpki-client on console-ams.rpki-client.org