Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zooBn7OrSxAY02o0-HpWekR4pQY.cer
File: zooBn7OrSxAY02o0-HpWekR4pQY.cer (raw, json)
Hash identifier: nIj3RaaMlJheo+4IIEZOos4avK6VQ0reWlTK3cEgOAw=
Subject key identifier: CE:8A:01:9F:B3:AB:4B:10:18:D3:6A:34:F8:7A:56:7A:44:78:A5:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D97FFD729B91F8BDC997EA925D9700EA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://chloe.sobornost.net/rpki/uplift/zooBn7OrSxAY02o0-HpWekR4pQY.mft
caRepository: rsync://chloe.sobornost.net/rpki/uplift/
Notify URL: https://chloe.sobornost.net/rpki/news.xml
Certificate not before: Sun 11 Feb 2024 11:49:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2938::/48
Validation: Failed, certificate revoked on Sun 11 Feb 2024 12:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:97:ff:d7:29:b9:1f:8b:dc:99:7e:a9:25:d9:70:0e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 11 11:49:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8a019fb3ab4b1018d36a34f87a567a4478a506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:42:29:53:d7:f0:2b:ca:22:2d:79:15:a0:
68:b0:b4:6a:b1:2e:51:b7:6d:12:b0:50:f9:0b:bf:
b4:04:1d:8f:5c:8c:32:c4:77:06:20:1d:2b:02:ab:
0d:4b:86:c3:14:66:1d:72:ae:cd:60:0b:34:ed:c0:
7c:02:27:45:65:db:33:60:2a:22:a0:b2:5c:74:30:
cd:5f:97:cb:c6:1e:05:9e:f8:b1:d9:6d:d0:7e:0d:
57:be:c6:68:be:0a:d9:30:b1:37:64:ff:37:58:fd:
4a:86:6e:05:72:71:ed:48:cf:d2:e2:5a:ab:ee:47:
6c:87:4e:9c:07:90:69:b8:f0:ce:a1:52:9f:39:13:
a6:c0:5b:cc:6c:ce:59:4e:59:eb:ea:8e:01:5c:9e:
59:59:37:b6:8b:16:ad:7d:34:5b:6c:ea:17:1a:66:
b8:b1:ae:d6:34:ad:20:cf:57:51:d5:94:0f:fc:06:
bf:9f:4c:cb:8d:cf:cc:f1:10:c2:30:a2:2a:53:31:
d6:71:2a:8b:41:66:f3:c8:48:a4:43:6e:a1:29:16:
64:53:ca:bb:09:8f:aa:44:2b:b6:1e:c9:6b:7a:57:
a4:cc:70:f3:69:68:bb:d9:fa:ab:98:1b:35:f2:7c:
9f:07:d8:e6:7b:94:bf:70:7f:3b:d6:a3:5b:ae:b1:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:01:9F:B3:AB:4B:10:18:D3:6A:34:F8:7A:56:7A:44:78:A5:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://chloe.sobornost.net/rpki/uplift/
RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/uplift/zooBn7OrSxAY02o0-HpWekR4pQY.mft
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2938::/48
Signature Algorithm: sha256WithRSAEncryption
75:12:4b:3b:74:12:9d:6b:1f:fb:d7:6b:27:97:36:4a:fe:99:
3d:55:0b:a2:8e:cf:93:f9:53:b2:25:6e:b4:a3:ea:14:23:37:
79:3c:1e:28:d7:14:99:83:8a:22:d2:44:f3:98:82:0c:cf:bd:
45:d3:4c:23:d7:d8:b7:8f:06:20:ff:54:16:ce:2e:1d:9f:dd:
a5:0b:04:8c:5a:f7:9e:f6:24:a8:bf:81:87:98:50:51:34:d6:
44:41:8e:2d:95:77:de:39:08:89:a6:96:3a:94:5d:5d:f3:20:
d9:71:ee:e8:e2:b9:9b:b7:94:03:e7:28:fa:c1:b3:41:09:9d:
50:07:e2:64:7f:d3:b5:00:09:92:50:a3:01:a7:4a:13:8a:7a:
44:e2:3d:d5:4f:ec:b7:fe:26:db:7c:67:31:9a:57:2e:6d:c8:
a0:a3:81:84:7a:38:c1:b0:71:91:c2:ea:0f:5e:1a:bd:4c:f8:
35:95:1e:9a:f6:14:7a:95:8e:23:eb:10:a6:a2:b8:df:a4:35:
46:0a:1d:c6:91:08:1b:17:73:4e:ea:69:af:9c:3f:5b:44:f7:
af:78:7d:f2:4b:78:ab:3f:0e:88:e1:68:34:3e:60:51:02:0a:
6a:74:ac:42:83:2d:32:7c:16:ee:b3:0b:f2:ac:06:31:b9:46:
91:65:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:47 2024 by rpki-client on console-ams.rpki-client.org