Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zlvA7q4bawvak2xdBon2p-h110I.cer
File: zlvA7q4bawvak2xdBon2p-h110I.cer (raw, json)
Hash identifier: +UKoXu4l4iM72K5S1uicxye6eg2E4Pi4trRzfbeMXYI=
Subject key identifier: CE:5B:C0:EE:AE:1B:6B:0B:DA:93:6C:5D:06:89:F6:A7:E8:75:D7:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857244FAC65475695AFD01EA4FBCC8E11A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/3f28cb-e3fc-4a74-9d5f-c6be9347003d/1/zlvA7q4bawvak2xdBon2p-h110I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/3f28cb-e3fc-4a74-9d5f-c6be9347003d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:36:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.251.22.0/24
IP: 2a0d:8b40::/29
Validation: Failed, certificate revoked on Tue 19 Sep 2023 10:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:44:fa:c6:54:75:69:5a:fd:01:ea:4f:bc:c8:e1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce5bc0eeae1b6b0bda936c5d0689f6a7e875d742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:3a:b1:51:0a:76:f7:db:8a:05:c3:59:b2:
60:4d:81:08:96:3d:4a:c4:84:7f:7a:77:db:3e:73:
d8:6d:0d:21:0c:84:7f:4b:df:85:be:ad:40:23:1f:
78:1b:16:90:ef:20:6d:4f:e4:9a:c5:bc:bc:de:b7:
78:08:22:fb:4b:6f:b4:66:d7:1a:65:04:c6:2e:a0:
a0:7d:72:58:53:4b:6f:55:2c:71:0d:b7:09:1e:74:
1e:5d:82:fb:0b:b0:2d:95:f9:12:fd:7c:da:26:5b:
f0:f7:26:94:af:2f:b1:ac:60:37:96:dd:90:f6:a3:
33:1f:d8:c9:da:96:a7:dd:12:16:95:f5:00:8f:b8:
df:f9:10:ad:c5:88:07:6e:da:8b:d7:59:d1:15:f4:
0f:81:ef:69:48:c5:fe:d8:94:99:9a:3c:8e:4d:e9:
ce:80:ff:13:5a:8f:ae:52:1e:38:8e:98:a5:b5:6a:
e6:06:87:33:8a:62:ca:70:64:2e:17:49:ec:2e:ec:
1c:c4:c8:69:cf:b4:76:ae:4e:ec:be:2d:4a:08:13:
e3:45:b0:77:cf:d4:47:a3:77:cc:75:ba:92:af:d5:
ef:1a:3a:31:1f:58:1b:fb:5d:34:c9:63:b6:3a:c4:
65:56:80:72:b0:2e:4e:c1:bc:d2:5c:c0:09:1b:d6:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5B:C0:EE:AE:1B:6B:0B:DA:93:6C:5D:06:89:F6:A7:E8:75:D7:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3f28cb-e3fc-4a74-9d5f-c6be9347003d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3f28cb-e3fc-4a74-9d5f-c6be9347003d/1/zlvA7q4bawvak2xdBon2p-h110I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.22.0/24
IPv6:
2a0d:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
9a:50:87:9b:0c:e2:47:78:3a:25:ca:74:f3:01:fd:96:9f:25:
f3:b8:83:bd:3e:b3:fd:91:d9:be:06:ea:39:2a:20:e4:b0:33:
e1:8f:13:fb:cd:08:2d:33:f5:0f:f6:8e:ed:00:aa:41:5d:0f:
5a:69:a2:5f:e8:97:c0:84:a2:f7:2d:45:5d:63:87:37:f1:cf:
b4:fe:89:7d:f1:f6:38:8b:05:f5:14:78:cf:86:17:dc:b9:1f:
ab:01:d8:db:40:d2:4a:08:dd:b3:98:e6:84:57:14:25:e2:e7:
29:77:d0:ca:1d:45:dd:6f:5d:db:bd:8f:d6:e6:14:9b:6c:79:
de:04:16:13:e2:d7:fb:25:c4:f1:c9:6d:9e:25:a0:21:8a:70:
d7:4b:40:67:3f:42:8f:31:5c:eb:61:5f:93:ac:8e:13:1f:ac:
fb:67:30:b6:aa:60:d7:3a:96:37:ff:6c:8d:2d:0a:50:c7:2b:
ee:8d:1a:2a:be:de:0d:e5:b4:16:1c:00:4e:3c:31:1a:19:51:
fb:48:ae:2b:36:5c:76:56:51:45:82:93:9b:f6:ec:b0:d7:8e:
5f:c4:5e:9f:e1:c9:db:e1:55:e9:74:da:a1:39:91:19:05:2a:
83:d0:5d:82:ad:ab:85:2b:d1:44:6e:63:5a:8c:b5:3b:fe:3a:
79:40:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:46 2024 by rpki-client on console-ams.rpki-client.org