Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
File: 2eJ2DXCg1regRxMO29mW0EHp0wA.cer (raw, json)
Hash identifier: 4n+qZD9J9y46q/EDHt4UyjF6SCrMj4elQpxazs81dgI=
Subject key identifier: D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EC9193661979034698D5A004F7C43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.187.19.0/24
IP: 2a12:7580::/29
Validation: Failed, certificate revoked on Mon 05 Feb 2024 07:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c9:19:36:61:97:90:34:69:8d:5a:00:4f:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:26:79:e0:bb:ee:0b:15:a8:de:9f:1d:93:
5a:d9:a7:01:28:3f:d6:8d:76:9d:a0:17:47:b5:2d:
75:e4:f7:7b:86:0a:97:e9:ec:bd:94:e4:63:d6:af:
b0:dc:81:b3:b4:aa:8f:4a:93:38:5a:ba:e4:a8:f4:
bf:1f:f6:71:07:ba:8b:53:6c:e5:34:e4:c1:02:3b:
79:52:ca:f7:d1:8f:42:ca:cc:fb:eb:62:89:c5:6c:
07:ee:a1:73:48:dd:45:42:65:41:32:10:72:52:52:
e4:ee:19:3e:b4:cf:25:e6:c1:91:8a:fb:c3:e5:0e:
a5:68:c4:bd:05:e9:61:7c:d3:d5:b3:2d:6e:d1:65:
ee:e0:33:f5:06:48:3f:ee:5b:98:f0:3e:a5:e8:0f:
0e:7f:d2:a5:40:20:12:b4:43:62:de:63:44:5f:2d:
f0:94:89:8c:6c:7b:7b:f6:e7:9b:00:56:32:14:8c:
9b:7c:d4:4b:1d:9b:90:13:70:19:ac:e5:b4:57:52:
c0:9a:86:f3:65:cf:89:4d:5b:b1:d9:8c:85:6b:45:
c0:f9:4b:96:fe:33:d4:7c:94:50:c5:83:2f:b8:cf:
45:5c:39:38:15:43:05:c5:82:b5:b7:5a:a3:10:cd:
18:26:19:57:70:55:f9:20:91:f6:74:fe:04:a7:04:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.19.0/24
IPv6:
2a12:7580::/29
Signature Algorithm: sha256WithRSAEncryption
9c:4c:f8:ca:bf:5e:b7:08:42:8a:91:e4:14:6f:b7:92:81:a1:
de:55:4d:af:95:ec:49:6d:31:7c:0c:57:5f:d0:aa:3a:76:f1:
46:e7:07:a7:b4:62:28:bf:7b:14:58:32:be:9f:f6:ed:4b:55:
61:74:27:88:5f:5a:56:65:8b:3c:b4:18:78:cd:1f:14:a2:a3:
ce:2c:a8:1c:73:22:cc:0c:19:00:6d:d0:79:ba:23:76:e0:fa:
7c:e1:99:83:6f:7b:6b:f0:cb:c4:d2:eb:e4:21:f0:8e:11:2c:
6c:a8:1f:59:cd:9d:0f:d0:a0:64:77:10:04:c2:dc:33:d3:3b:
de:68:f2:e7:ae:72:81:21:d8:eb:59:f7:cd:2c:50:70:4a:e3:
c7:2c:67:2f:60:7d:b7:0b:cc:34:48:a8:c4:a0:e9:f0:04:9c:
b5:ad:b9:ba:55:a5:5d:f1:84:b8:56:ff:94:eb:aa:33:71:a8:
83:01:3b:8a:4b:8d:d9:f1:a5:b4:5b:70:11:ca:90:4c:d2:a6:
16:02:5e:a6:d6:5b:1b:12:94:7a:eb:d6:ec:7a:c4:8c:7f:1a:
c3:df:f2:04:46:50:19:8c:fd:63:21:fc:8b:1e:28:cd:fc:f8:
13:42:25:8b:bb:6c:51:0a:a3:dc:af:bd:59:51:26:7a:45:1f:
b7:37:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 11:36:18 2024 by rpki-client on console-ams.rpki-client.org