Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qv8kBeos21pESDjc_CM5AH2r0A.cer
File: 2qv8kBeos21pESDjc_CM5AH2r0A.cer (raw, json)
Hash identifier: fToQ89F62Phqp8/4LR/af+RmPUUkSQpl9kMXtkmjW6I=
Subject key identifier: DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAED538B906379BB6C38A6BEA7DCE9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.46.34.0/24
IP: 2a12:1040::/29
Validation: Failed, certificate revoked on Thu 29 Feb 2024 08:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ed:53:8b:90:63:79:bb:6c:38:a6:be:a7:dc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daabfc9017a8b36d691120e373f08ce401f6af40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:5a:2b:29:cf:e2:8b:d2:10:cb:6e:9e:8c:
08:28:08:71:21:83:b9:07:3d:68:e2:4d:16:18:b2:
3c:87:bf:75:b5:07:63:eb:df:d0:8e:9b:36:66:cc:
e8:02:95:d6:f2:09:fb:23:f2:4c:f6:0c:14:b6:2b:
38:34:aa:51:cc:dc:b5:5e:88:a9:26:33:bf:06:d5:
ca:fd:7b:e3:d9:e0:42:86:e0:e0:cf:fd:51:9d:cc:
bc:0b:10:c0:0e:ac:c7:86:f5:b7:db:27:26:5b:42:
1f:c8:00:14:84:32:b9:48:0f:9b:81:05:89:ea:19:
cb:6a:e6:bd:3f:e4:84:06:bc:14:50:86:13:98:91:
73:cd:a5:58:5a:dd:a0:09:fa:d5:e7:49:dc:ce:8f:
54:1f:b2:25:45:d6:a0:10:13:71:90:2c:01:a6:6d:
c0:77:44:b0:8e:e4:ad:9e:47:07:ee:e9:86:6a:5b:
35:38:09:bc:34:d6:fa:fc:d6:2e:ef:12:ff:07:d6:
8a:bf:3a:8c:3f:8d:8c:6f:b1:11:bd:8d:06:a0:dc:
00:75:3f:12:d7:88:29:f7:c8:4e:64:83:e8:dc:c5:
4c:db:37:22:48:de:41:19:4a:b2:9a:d8:b6:0a:af:
12:10:c5:e7:27:80:7e:a9:0f:bc:82:73:17:62:a2:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.34.0/24
IPv6:
2a12:1040::/29
Signature Algorithm: sha256WithRSAEncryption
97:ed:ac:b9:e9:99:2e:65:0d:0a:aa:8f:ef:6e:8a:3d:d3:dd:
2c:f1:7b:b6:44:e4:c1:39:1a:cc:35:a9:74:15:59:c5:44:15:
71:30:07:bc:b7:55:78:12:6c:01:df:00:52:87:f5:ea:e4:2c:
8a:a7:79:48:0e:7f:7d:87:83:af:7f:08:26:ac:76:5a:60:ea:
09:5c:fa:78:1b:46:6a:09:ae:81:6c:80:77:ca:79:8c:d9:84:
65:63:df:69:14:4e:7f:b5:8a:6e:62:52:43:3f:77:ee:29:c6:
be:aa:83:0e:bc:a2:81:bf:90:a0:a6:a4:42:92:43:88:83:e3:
3e:95:9a:1a:0a:fe:80:41:23:1f:15:3a:3a:8f:bf:c9:d3:4b:
f1:b0:bb:5f:03:80:34:bb:59:ed:42:28:a7:be:6d:cb:9e:00:
de:82:92:68:73:bf:13:3e:2c:ab:cd:78:b3:e4:e5:84:b9:ce:
2f:62:c5:3c:4f:73:29:30:0b:98:52:a6:0b:e4:bc:15:1d:b2:
c0:10:f0:7c:ea:78:a5:b5:c5:23:77:c0:f3:75:ed:6d:af:ab:
78:db:0e:34:9d:fd:06:52:a2:f8:04:8f:70:4a:31:3c:bb:6e:
aa:54:d4:42:ec:74:a2:4d:dc:bd:c6:3a:5d:20:77:6a:08:a7:
df:96:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 11:29:11 2024 by rpki-client on console-ams.rpki-client.org