Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zbrcSTiHiXH5FtwmCT5bFxmegd8.cer
File: zbrcSTiHiXH5FtwmCT5bFxmegd8.cer (raw, json)
Hash identifier: uExKMVgEQwM9R8ZIGa1/4m3QkQmDrBeBmHIy6Tkj+Hk=
Subject key identifier: CD:BA:DC:49:38:87:89:71:F9:16:DC:26:09:3E:5B:17:19:9E:81:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D5E6A2624E0991F854ADD41316373F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/zbrcSTiHiXH5FtwmCT5bFxmegd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.204.55.0/24
IP: 2a11:9740::/29
Validation: Failed, certificate revoked on Wed 13 Dec 2023 12:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:e6:a2:62:4e:09:91:f8:54:ad:d4:13:16:37:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdbadc4938878971f916dc26093e5b17199e81df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:bb:66:99:ac:f0:9d:82:7d:de:08:2d:5c:
ff:77:f7:13:a2:6a:5a:bc:d8:d9:a4:e1:5e:f5:46:
5d:11:ce:64:99:ea:0f:02:dd:2c:7d:c1:4c:6e:f4:
36:d4:63:e3:0d:35:25:f0:1d:0f:81:7c:ed:c6:67:
f1:3f:34:19:52:7b:a1:1f:47:c7:9e:09:15:c5:65:
99:83:bf:6b:5f:69:bc:89:c3:c7:1a:0a:eb:31:e9:
84:1c:71:7e:cd:cf:15:91:4c:37:df:c5:a5:9f:bb:
1b:43:bd:41:16:3e:02:42:14:d0:fd:84:f0:29:2c:
38:3e:97:ec:49:e5:af:36:aa:c1:93:9a:13:c5:8c:
bd:ba:ac:bc:f3:ca:93:b8:59:f4:ac:aa:b8:f4:80:
bf:4b:80:52:66:eb:40:7c:81:d2:7c:2d:fc:98:c2:
08:73:61:b4:53:15:37:71:f9:fb:7a:0f:90:de:cc:
0c:fb:91:d5:28:0c:3e:32:7f:4c:59:61:b8:41:57:
3e:69:02:28:59:bd:31:38:01:60:1f:d4:59:a6:ee:
2d:2a:ed:21:df:d8:41:47:a2:bf:ed:2e:d7:ee:df:
b1:32:68:aa:20:4f:27:66:9a:41:81:ae:a6:07:2b:
52:ea:eb:ba:3e:38:79:4a:7e:d9:65:77:b1:23:5b:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BA:DC:49:38:87:89:71:F9:16:DC:26:09:3E:5B:17:19:9E:81:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/zbrcSTiHiXH5FtwmCT5bFxmegd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.55.0/24
IPv6:
2a11:9740::/29
Signature Algorithm: sha256WithRSAEncryption
0b:dc:bc:70:36:30:2b:71:58:92:fc:54:f9:57:0c:ef:98:3a:
9d:68:94:dc:f2:af:af:04:e7:2a:01:77:17:5b:e2:02:5b:1b:
6e:0f:25:be:df:8d:95:8b:fa:1b:04:0f:f2:97:52:e1:80:43:
07:67:8e:8d:42:33:81:2e:e0:61:e4:d6:05:6b:bb:57:dc:27:
58:ce:82:5d:54:45:ee:8a:65:e1:01:e2:3a:63:95:16:23:1f:
4a:18:0e:1c:fc:3a:2e:88:6a:ec:7d:4b:61:17:39:a9:88:47:
73:bc:67:8d:54:ba:ef:b3:a2:19:ff:a4:e4:25:ba:19:de:f3:
06:88:72:28:e8:1e:ca:00:a7:db:e8:fd:50:e0:bb:e3:aa:de:
36:55:18:26:b3:3d:bd:90:4e:bc:b6:51:c3:d6:df:b4:9b:e5:
ca:e3:b9:9c:be:a3:e5:88:e2:50:60:77:f6:01:ac:0a:7b:dd:
9b:52:4a:fe:ed:9b:6c:a3:65:e4:56:03:d1:62:3c:20:08:c1:
21:f9:76:c3:3d:f3:94:9e:61:1a:53:4d:14:5a:20:17:62:0c:
4a:35:d6:37:b4:2e:ae:f4:67:d0:0d:1e:89:9d:fa:33:33:2d:
47:14:c2:68:f2:a2:58:b9:91:64:9f:43:10:cd:8e:42:d2:e7:
be:73:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:43 2024 by rpki-client on console-ams.rpki-client.org