Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qFwhybTI0m_uyoSD1jaog0dLMo.cer
File: 2qFwhybTI0m_uyoSD1jaog0dLMo.cer (raw, json)
Hash identifier: 1Qh9Y0adj6U8uNgOftuxIY6nKDEegkqiO3hOlTuzGvI=
Subject key identifier: DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E07C3417C13DB554B0C7960983D20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.155.103.0/24
IP: 2a12:6f80::/29
Validation: Failed, certificate revoked on Wed 31 Jan 2024 10:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:07:c3:41:7c:13:db:55:4b:0c:79:60:98:3d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daa1708726d32349bfbb2a120f58daa20d1d2cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:44:a5:70:3c:b6:0f:0a:a7:88:cd:d2:60:
ce:f3:0a:c2:d4:7f:88:6d:5f:a8:78:5d:fb:ae:cc:
b1:62:01:75:ff:76:f9:bd:e3:a6:83:21:04:a2:8b:
96:b0:15:5d:15:72:5e:f1:8d:cd:db:5b:dc:f3:4e:
f6:60:bf:d6:68:d6:77:3e:98:ee:b0:95:67:ca:b8:
fb:d0:35:92:7a:4c:c7:b5:28:06:01:18:42:96:9a:
17:91:b2:ef:12:5b:45:d5:fb:b5:0b:65:16:12:f0:
20:53:f1:2e:bb:a0:bc:ab:4f:5f:a7:f5:be:97:fb:
7d:ea:ed:b5:f5:04:cf:b9:21:b7:00:57:00:e9:fc:
93:41:a9:0e:8f:00:19:0f:a7:85:29:8f:3b:4d:63:
08:24:78:da:e1:4e:b0:6c:22:d8:08:ed:74:be:ba:
5a:3b:13:ce:e4:ac:ae:86:16:2e:c1:fa:07:33:f5:
ca:a3:8f:3f:b4:a5:69:ab:fa:61:bf:0b:62:d9:e6:
88:18:d3:0c:5a:b8:57:ad:0d:4c:99:ec:81:6c:7c:
26:3d:25:2e:45:8a:dc:6c:0e:22:b5:de:8b:62:70:
39:36:bc:ec:54:d0:97:63:db:20:20:0a:ba:ae:7f:
a8:01:ae:73:f3:f8:82:2d:1e:0d:d6:c7:ee:35:3b:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.103.0/24
IPv6:
2a12:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
5c:42:8c:4c:e7:2b:c5:70:2c:fa:c9:33:47:35:6f:d0:7a:19:
d3:eb:55:63:7e:ff:04:2a:ae:6b:2a:b8:cf:1e:24:42:49:00:
f3:60:f4:16:35:a4:cc:d9:fb:f8:9e:14:21:bc:96:41:c7:62:
65:a2:ad:ca:56:e6:52:3f:f1:cc:65:34:49:9a:47:6c:72:60:
64:f1:c4:20:a7:e7:3e:a1:a9:92:70:97:d9:3a:89:36:6e:ac:
6d:ff:b4:22:af:8a:6f:8f:ee:64:46:0d:13:b9:37:1c:31:82:
fd:c5:9c:e4:43:65:ad:e4:fe:a1:dd:32:f6:f8:b6:3a:e1:0e:
46:42:27:7e:0e:b2:cc:e1:1f:f8:b7:d6:1d:1b:45:45:57:fc:
3c:a9:1a:5c:b6:dc:7e:fb:8a:51:01:9d:37:8d:df:84:b2:a2:
62:99:01:19:67:15:3f:2c:f3:a1:4d:73:3a:b8:53:b1:2d:dc:
d4:69:41:b7:22:97:c6:f7:46:22:40:a0:a4:b0:2a:ce:e5:82:
14:1a:98:63:a4:da:61:d7:e2:99:a2:de:6d:64:d9:8d:a6:69:
b3:a5:ef:06:7c:71:7a:38:17:b9:20:3c:a6:e1:06:88:d6:48:
1f:fa:7c:9b:19:4c:1f:e9:20:df:78:48:a9:f2:4a:9a:68:82:
b8:f7:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:51:07 2024 by rpki-client on console-fra.rpki-client.org