Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer
File: zR3grYsi95QcYp1OTz5hiCoX3jE.cer (raw, json)
Hash identifier: SifeI+Y0OcY9J2GxI4v7WQauiYYmUZWaTSdVD+A4h+A=
Subject key identifier: CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186DBC8283DDD4A5458A7E46F2E902702C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Mar 2023 16:22:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2001:67c:8cc::/48
IP: 2001:67c:b10::/48
Validation: Failed, certificate revoked on Tue 04 Apr 2023 10:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:c8:28:3d:dd:4a:54:58:a7:e4:6f:2e:90:27:02:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 16:22:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:a8:53:c8:c9:fc:79:d0:c5:56:d5:67:54:
62:76:37:b5:25:26:35:48:d5:9c:79:50:e4:26:5f:
3a:19:2c:dc:c8:81:7e:4f:62:a2:53:cc:f5:dd:6f:
eb:62:ae:74:24:4f:16:96:dc:45:43:cb:de:29:45:
96:ca:4b:1c:b8:0e:c7:0f:80:93:90:d0:6f:c6:e3:
2c:b3:fd:0b:31:85:ae:b3:af:2e:5a:b9:d4:74:2e:
a2:2a:06:0b:43:68:0b:79:d6:29:ab:98:f9:e3:fd:
a7:5c:3d:80:1a:fb:63:a6:6b:f3:b8:64:3a:1d:bf:
e8:66:80:bc:eb:11:70:16:e7:60:73:5e:e5:36:4d:
bf:fd:32:4e:6b:f6:2d:9c:fd:ea:b9:33:6e:06:87:
20:cb:17:37:9d:af:56:80:9c:39:23:d9:97:5b:2a:
52:23:bd:db:d6:51:86:d2:c1:76:aa:ce:26:c2:4d:
ec:b2:55:67:0d:ce:0c:52:3c:62:53:07:dd:ac:af:
eb:38:f4:aa:78:82:31:81:e0:fd:f0:6f:73:01:af:
a1:ca:2a:25:1a:89:78:98:5a:43:23:a5:e3:1e:bd:
8e:a8:02:e8:89:e8:bf:a1:ec:82:04:d1:70:8d:bf:
cc:d9:2f:d1:b4:fa:27:46:b9:33:be:41:d5:6f:87:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:8cc::/48
2001:67c:b10::/48
Signature Algorithm: sha256WithRSAEncryption
52:85:ca:81:24:79:06:fd:82:4f:30:ca:c4:8c:cc:d8:fa:55:
f5:18:44:a8:ad:93:7b:26:70:86:1f:45:e3:01:40:11:ad:c1:
e2:16:41:c7:10:8c:f8:1a:2e:df:6b:d5:07:45:9a:b0:85:b3:
94:8e:76:78:97:d6:93:eb:35:28:70:1b:5e:e3:1e:26:9a:34:
ae:be:59:11:45:0d:c9:e9:dc:f9:19:e2:02:1f:46:0f:ed:e8:
93:be:d7:8e:a7:d2:91:40:cd:3e:34:c0:47:57:c1:69:3c:8a:
a1:8b:64:4d:2e:ed:06:6d:be:c6:42:0b:36:c3:31:74:78:70:
4e:2d:1d:27:67:ac:0e:85:1f:6b:9f:d3:a8:96:30:13:04:1b:
65:c3:91:4a:cc:09:ef:a9:81:4c:42:dd:5b:90:b5:8c:a4:fe:
73:26:ba:bd:f7:28:99:0b:fd:bc:6c:37:c6:e7:db:75:2a:a5:
76:c3:4b:b7:0b:7e:23:24:6f:59:f9:51:a1:1d:34:48:9b:7a:
0d:f0:7b:85:d5:ae:68:ba:05:e0:18:ef:6a:24:7d:bf:80:57:
f3:c2:9e:3c:7a:b7:c9:59:82:69:e9:a3:34:cc:09:3c:98:c0:
61:54:e1:0c:3e:5e:a8:05:40:36:6b:c2:23:8f:5b:24:e6:94:
1c:60:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:17 2024 by rpki-client on console-fra.rpki-client.org