Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
File: zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer (raw, json)
Hash identifier: 3KTlKJX0YhiJg4lCCCeEFTqRqd2uvJyyOgZNaPSqqtY=
Subject key identifier: CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B489022B647595A3B7F80AC174EE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.64.109.0/24
IP: 2a12:f880::/29
Validation: Failed, certificate revoked on Thu 08 Feb 2024 07:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:48:90:22:b6:47:59:5a:3b:7f:80:ac:17:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:68:69:fd:4a:3d:9a:d5:c3:26:9d:82:24:
0e:32:2f:23:ce:85:f1:c4:69:ba:76:92:6f:ee:86:
c7:36:5e:8a:13:1c:f6:d6:41:5b:ee:53:4b:1f:d0:
50:73:69:c9:10:8f:dc:8d:fb:eb:cf:94:19:d8:3e:
a0:23:58:81:a2:2a:bb:b6:09:c7:52:ed:8b:59:9f:
26:13:f6:38:1f:97:e2:05:88:9b:a6:5b:dd:69:4b:
6f:8f:78:87:b2:a8:60:7b:6d:f6:27:0c:81:bd:a2:
b7:64:ef:93:a4:ed:8d:54:6d:71:21:2e:a2:87:03:
e1:97:0e:37:20:2c:3f:63:30:8c:b2:dc:ec:2e:cb:
0b:c3:de:ac:a2:ac:3a:50:63:5c:ba:81:6c:5b:8c:
da:5d:85:9e:ac:88:b0:99:c4:21:8c:d5:25:f6:1d:
27:69:c1:e4:b2:ac:70:e9:c9:53:32:42:f7:33:33:
05:8b:01:97:09:c5:84:f6:31:90:ea:86:a9:1e:37:
3c:72:ac:77:84:3d:b7:d7:e8:72:a0:14:27:fd:3e:
44:8b:21:fa:0b:4b:48:f7:b3:85:e3:50:53:42:ce:
41:b7:05:8a:1c:83:e4:8d:95:d9:72:d7:fd:8c:e0:
6e:18:17:9d:5a:03:6a:54:fb:de:91:6c:ef:68:fc:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.109.0/24
IPv6:
2a12:f880::/29
Signature Algorithm: sha256WithRSAEncryption
1f:2b:a8:83:f5:33:ac:0a:80:8c:0f:a8:f5:4c:5a:a9:c3:9a:
e3:18:e0:41:da:d0:3b:0e:b1:78:66:cc:84:bc:26:48:7f:4b:
45:31:f8:d2:a0:ca:89:6e:79:6b:fc:51:c3:f0:cf:12:0d:a8:
1d:c3:ee:4a:85:27:29:98:d6:c5:54:b5:f6:fe:f3:98:5b:81:
a5:71:2c:3b:60:5e:a5:ad:96:0b:40:66:22:9f:91:1b:92:2e:
4c:ce:cd:1f:b8:2c:7b:cd:3d:ec:0d:4f:a2:90:e6:2e:31:ee:
28:64:44:3d:12:0b:f1:c3:10:75:c2:ab:a8:ea:ce:50:6e:b4:
54:79:58:d0:63:bc:9a:5c:5b:9d:89:a5:60:e8:56:fc:69:a0:
be:73:12:b7:f9:c5:62:a3:8e:5e:48:02:92:f3:d5:34:f8:af:
c0:cb:ea:48:62:71:7d:59:d8:03:ca:de:7c:f5:10:bd:9f:e9:
14:14:3e:f5:64:63:18:00:4c:0d:f3:fb:73:43:12:b8:d4:2b:
ef:ac:2e:c3:99:3e:5a:18:fb:45:94:2a:f3:ca:dd:45:8b:c8:
93:74:d1:99:06:07:09:ee:60:1b:ce:dd:68:4b:63:ef:57:1d:
59:b1:5e:6d:1b:b3:a9:93:cf:47:d7:6c:7d:38:09:ba:b8:27:
83:be:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:43 2024 by rpki-client on console-ams.rpki-client.org