Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BLAnzKvAiPEu_hg3zRExd6VE9V0.cer
File: BLAnzKvAiPEu_hg3zRExd6VE9V0.cer (raw, json)
Hash identifier: gLnlSbXkP5qsxhNzWxRcm3uoFCUj7Y3C1ZHkiezG/bw=
Subject key identifier: 04:B0:27:CC:AB:C0:88:F1:2E:FE:18:37:CD:11:31:77:A5:44:F5:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349326C8203F5381127454C6197B95F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/BLAnzKvAiPEu_hg3zRExd6VE9V0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.233.216.0/24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 13:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:32:6c:82:03:f5:38:11:27:45:4c:61:97:b9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04b027ccabc088f12efe1837cd113177a544f55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:fb:29:42:23:f6:f6:3c:c6:8c:ce:98:77:
0b:40:cf:24:ac:fd:ab:22:5f:37:7b:87:e0:8a:ad:
bf:53:20:1c:dc:4f:f8:4a:5d:d9:b4:f6:d7:85:e9:
c3:b8:48:c0:aa:90:ab:c3:6b:d2:70:eb:d4:b0:05:
30:b3:14:62:e5:01:08:35:91:83:b1:f8:01:a8:0e:
5d:b4:13:9d:15:8f:3f:c3:09:19:3c:0c:a8:0f:fe:
a3:83:02:0d:00:36:f2:ba:86:66:1d:a1:c0:c2:bd:
c5:c5:34:ed:05:1b:56:3d:6e:a7:81:e9:5b:6a:09:
8d:8b:b7:04:56:1e:d6:d8:68:ed:21:14:9b:51:30:
b0:e1:14:64:27:5f:4a:f9:79:e5:15:1f:8d:bc:2d:
82:f9:74:01:03:a5:96:5f:e0:e6:4b:27:86:2c:15:
db:1b:8c:a1:29:87:af:5d:be:61:50:fe:ac:da:eb:
c0:5b:1f:db:a3:8a:32:fd:e9:18:79:57:af:ed:69:
8f:12:b6:69:65:f5:cd:dd:cb:7c:7d:48:ea:60:ce:
11:06:9f:8f:50:56:ab:7c:ce:6d:7f:00:ea:0a:0a:
73:ae:11:ff:4c:a4:dc:fa:e6:57:9d:f4:89:af:60:
b6:26:c9:72:a1:89:9b:0c:3e:4d:24:7b:6c:8d:e4:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:27:CC:AB:C0:88:F1:2E:FE:18:37:CD:11:31:77:A5:44:F5:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/BLAnzKvAiPEu_hg3zRExd6VE9V0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:33:57:fd:5a:ab:40:bd:aa:19:93:de:ac:26:fd:39:dd:21:
44:ba:f8:6e:64:ff:4a:54:02:6e:35:6c:60:6e:94:00:7a:ac:
10:08:58:08:75:f0:11:c8:66:2d:bd:8f:15:00:77:10:83:b8:
2e:44:fc:49:29:b2:15:31:95:39:6d:3d:63:14:f3:57:c9:ce:
bd:61:d3:1c:36:b1:60:18:36:c2:71:82:17:99:94:8c:a2:01:
9f:7b:e8:b6:97:31:5e:38:d3:c4:19:48:44:f6:76:72:31:a2:
ec:51:a5:9f:53:96:b6:3e:5a:fb:26:21:52:84:96:c4:a2:c5:
bb:30:f0:80:23:79:7d:92:61:7c:91:ac:f0:23:cf:62:57:a9:
54:68:92:36:5b:84:c1:4b:54:9c:59:aa:51:16:c1:fd:0b:c1:
b2:3f:73:9e:ea:71:37:09:3c:06:04:2e:38:87:2c:1f:29:d2:
8f:71:89:c6:e9:88:cc:20:18:29:ed:8a:2d:b5:5c:da:f6:3b:
49:33:ce:60:25:86:52:bd:b7:00:92:d7:d1:b7:cc:90:91:48:
de:76:e0:03:97:9f:54:fa:a3:17:37:6f:8a:00:71:c6:83:4d:
fa:84:78:02:6e:e8:83:da:a2:d3:02:35:7d:29:10:2f:5a:4e:
50:41:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 17:07:50 2024 by rpki-client on console-fra.rpki-client.org