Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
File: 2BR0KKIohTG4dzIOEQiSonXMEmM.cer (raw, json)
Hash identifier: wqmnE8+K1B1K/OhQZSEPyhtGqLhxHDL1ISkPkdiHFj0=
Subject key identifier: D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49342294BDB9593480A2CDCD1D86667
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.23.192.0/24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 15:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:42:29:4b:db:95:93:48:0a:2c:dc:d1:d8:66:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8147428a2288531b877320e110892a275cc1263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:cb:a7:7b:4a:36:72:a7:45:c8:7b:36:69:
84:a2:61:a2:cc:c8:c0:6e:ec:c3:ab:72:7a:88:b1:
77:2b:c9:ae:93:69:1d:96:9a:b4:4a:52:66:55:bd:
97:29:9e:ec:ba:83:3d:32:6e:8c:20:aa:f0:e6:ab:
5e:62:6a:c9:c3:2b:c6:95:ba:ee:f2:e3:9e:86:32:
41:17:7e:94:f7:d8:2d:9e:26:83:4d:30:8b:99:be:
ff:ab:cd:a9:17:71:46:8b:17:f1:ef:a9:b3:37:72:
03:4a:48:ab:8b:17:9f:96:42:ca:45:e9:d9:79:48:
55:b7:df:c2:38:5c:45:79:6d:55:26:6a:a1:2b:67:
fe:89:33:f0:e7:09:f7:d1:d5:8a:c5:6e:52:eb:9c:
2e:9d:fe:22:e4:2c:c6:87:bb:52:23:d8:09:20:4f:
31:42:24:05:e3:9d:94:ca:d7:15:b3:c8:ea:ae:46:
78:6f:14:ca:64:1f:d7:f0:26:c6:25:88:fb:55:d8:
01:50:62:77:ee:ba:9a:b7:0a:8f:9a:99:92:52:9a:
2e:6a:1a:02:00:b6:03:1c:1b:c1:57:f0:df:f7:e0:
39:fb:cb:58:65:21:7e:54:50:02:1c:2d:07:0e:a8:
6c:fa:41:81:8c:b5:e0:e8:9e:cc:67:c0:c0:fb:e6:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.192.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cf:18:23:a8:3e:16:82:4b:92:ea:ba:23:83:ce:0d:de:59:
8c:66:b0:f0:15:17:83:15:d0:33:59:83:74:2f:00:7c:40:a3:
81:55:35:36:56:48:a5:d4:64:39:38:5f:82:4f:7e:13:e7:9b:
35:64:ce:2e:fc:6f:77:0f:b2:b7:5a:8b:17:9d:8a:69:8c:74:
3d:8b:81:b1:9d:04:20:7e:b8:a4:27:0c:dd:5c:62:b1:a5:df:
7d:cc:a0:e5:9d:a0:23:ef:c5:1f:93:b6:c2:1c:c0:85:13:6a:
dc:e3:89:c6:4a:6f:59:8d:1e:87:82:51:08:08:07:e0:06:42:
af:2c:dd:2c:64:11:3f:a1:1f:52:67:b7:55:92:e9:95:bd:3e:
b7:2d:a8:f0:47:e9:c3:b7:1f:78:de:a6:47:bc:4e:2b:cb:65:
e1:78:69:ff:3c:5a:62:ca:82:8f:be:a8:bb:04:96:36:9b:71:
17:c2:25:dc:cf:32:47:20:fd:e6:ec:2b:1a:52:bd:51:10:48:
b3:69:b7:fc:9c:54:59:d2:ba:22:fe:50:49:2a:67:c8:72:71:
a2:4f:38:ba:b1:ef:12:f8:bf:ff:8e:14:b1:b0:a9:5e:4e:7e:
c1:b7:ff:a6:07:77:ce:ca:eb:e7:ed:3e:f2:ed:d9:a2:ad:61:
c3:4a:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 18:24:25 2024 by rpki-client on console-ams.rpki-client.org