Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zjz_MYQSa6krCMLn3e-y0qxp8p4.cer
File: zjz_MYQSa6krCMLn3e-y0qxp8p4.cer (raw, json)
Hash identifier: vJu8utX4tiSUdaeUPtntJUGTit8ugBvBt62JbhWJ9zA=
Subject key identifier: CE:3C:FF:31:84:12:6B:A9:2B:08:C2:E7:DD:EF:B2:D2:AC:69:F2:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4C6A3165F29DBA4D72DAC03E9727D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/zjz_MYQSa6krCMLn3e-y0qxp8p4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2c28::/48
Validation: Failed, certificate revoked on Mon 23 Oct 2023 11:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:c6:a3:16:5f:29:db:a4:d7:2d:ac:03:e9:72:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce3cff3184126ba92b08c2e7ddefb2d2ac69f29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:25:14:d5:de:cb:97:1f:66:4f:f9:6c:0b:
67:ce:55:30:cf:0c:65:b3:50:f5:6d:69:a8:d0:99:
f9:9d:5b:be:fa:33:90:24:23:64:da:1b:f8:ba:c5:
2a:e5:8f:ac:c4:fb:4f:fe:32:ab:70:9a:36:a0:35:
b1:bd:ec:74:f6:23:5c:fd:54:cc:b5:21:7c:93:e2:
6d:1c:6f:c4:dc:d8:c9:ae:54:ea:18:fc:ab:d2:b6:
db:94:22:0c:8d:6d:4d:63:b5:8c:ef:f9:bd:c4:77:
23:11:b3:bd:e2:bc:71:68:b1:83:37:d1:2c:ce:eb:
18:ac:4d:38:b0:da:51:88:5a:fa:63:c3:8e:2a:e9:
b5:46:26:b9:e0:08:fc:1d:79:60:52:db:57:be:ad:
c5:86:15:35:19:dd:86:f8:66:ce:78:f6:a6:61:d2:
82:36:1d:dd:1d:68:71:08:6d:2c:6f:ed:3a:77:2a:
cc:5f:93:bb:05:01:6e:21:7c:04:60:4e:8f:e5:ae:
94:1f:50:45:7d:39:56:fb:0f:f4:9b:1d:d3:65:d2:
7d:ad:e2:80:c3:5a:71:f7:d5:82:84:31:38:fc:3a:
5f:d1:48:b1:28:4b:99:a1:72:59:0a:2b:f6:2a:9b:
56:f0:3d:70:db:5b:07:b5:4f:3d:e6:29:75:6b:a5:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:FF:31:84:12:6B:A9:2B:08:C2:E7:DD:EF:B2:D2:AC:69:F2:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/zjz_MYQSa6krCMLn3e-y0qxp8p4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c28::/48
Signature Algorithm: sha256WithRSAEncryption
50:49:67:e4:49:9c:29:db:16:64:39:c3:43:79:36:41:7e:8c:
58:0b:d7:72:7f:69:5d:bc:dd:fe:29:4e:67:e0:e0:9b:e9:a0:
6a:aa:0d:0a:7c:11:3b:f1:5e:26:75:61:0b:40:b5:73:75:89:
29:c9:d7:41:3f:0b:28:c7:2e:1b:30:38:29:08:43:be:de:bc:
e4:a6:22:11:dd:8c:6a:10:48:b1:23:da:c9:8d:18:31:0d:37:
6c:0b:ff:ba:37:0f:e7:24:4c:25:df:45:2d:6f:d4:3f:e4:9b:
53:5f:a1:1e:86:cc:2a:ca:45:f0:9f:af:07:d1:e5:f5:ce:89:
1d:50:87:c9:d1:26:4f:e0:e1:67:01:61:64:db:86:3c:e3:0e:
c8:39:91:02:b6:3a:3f:c9:d9:77:71:8b:77:6f:7b:51:dc:1b:
ed:30:ca:20:b5:d0:cc:1e:05:b0:ae:79:ab:28:95:f0:6d:5f:
e1:11:1c:11:ff:3b:e9:56:71:c8:da:31:f7:3c:88:0a:ec:3f:
06:38:46:88:1e:fd:c7:5b:38:2a:eb:d2:63:c1:2b:17:b8:4c:
1f:22:4a:e0:64:de:a5:95:da:2e:00:e5:07:f0:dc:3a:d8:9e:
0a:21:2e:bd:c1:44:f6:f5:aa:6b:f3:1c:01:86:ae:9a:a1:96:
50:b3:2e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:45 2024 by rpki-client on console-ams.rpki-client.org