Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u2QdWlL0QPeYnjwfYW6Vrnz1C6g.cer
File: u2QdWlL0QPeYnjwfYW6Vrnz1C6g.cer (raw, json)
Hash identifier: u9Knp63fS5ksLMjBKsPaX/sbXqLZ8nQZN+Y8Y12I6Xg=
Subject key identifier: BB:64:1D:5A:52:F4:40:F7:98:9E:3C:1F:61:6E:95:AE:7C:F5:0B:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B62E5B4BBF1F6BE14DAAC0A7413D07A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/u2QdWlL0QPeYnjwfYW6Vrnz1C6g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.23.207.0/24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 11:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:62:e5:b4:bb:f1:f6:be:14:da:ac:0a:74:13:d0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb641d5a52f440f7989e3c1f616e95ae7cf50ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:85:82:1d:f9:ba:75:92:d7:98:1e:e7:5c:
dc:a7:41:bd:eb:f1:00:33:32:72:4d:1d:ac:c6:af:
e6:2a:ed:cc:fa:43:50:69:9f:be:64:c5:2e:f3:a8:
1b:75:63:37:de:a3:8a:e6:6b:d0:8e:db:b7:58:31:
76:51:86:f0:84:b1:f0:77:ce:a3:77:5e:03:0c:8e:
60:36:29:7d:4f:16:da:a5:e6:51:51:8e:1d:90:28:
ca:e9:6a:57:8c:db:68:9c:69:f2:e3:8a:04:52:28:
e9:ec:1e:7d:95:ce:9d:5c:be:14:68:df:7d:f6:7d:
fa:91:c3:24:0a:71:0b:82:53:ef:d5:3c:f0:2c:8f:
b8:b2:dc:19:54:8a:2a:bc:32:30:a8:81:cd:a3:ef:
af:d2:40:92:2b:0c:01:40:f6:15:be:5b:b0:0d:e4:
83:bf:6b:e1:84:d5:0b:23:be:7a:9b:b8:1c:a8:86:
41:94:05:a5:aa:a4:ef:56:39:0d:f2:d8:75:45:0e:
aa:48:df:3b:d4:15:5b:88:15:53:3f:a0:13:a7:7f:
b7:f2:9e:d3:2e:e8:03:fa:08:1d:ff:8c:6c:db:78:
50:29:a5:ee:64:ea:a7:3c:6f:d1:fd:1d:b6:f9:73:
53:26:9a:d0:77:b9:86:40:d7:86:5c:4d:22:43:a6:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:1D:5A:52:F4:40:F7:98:9E:3C:1F:61:6E:95:AE:7C:F5:0B:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/u2QdWlL0QPeYnjwfYW6Vrnz1C6g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f5:a2:24:33:74:3f:6c:9a:a6:4e:e8:2d:dd:3c:09:89:6a:
cc:f3:9f:53:f9:54:57:51:f9:ca:9e:71:d6:53:b1:31:47:b5:
97:08:69:49:f4:b9:91:bb:da:c1:d4:24:54:9e:f8:b5:23:e5:
7c:98:05:90:90:22:ca:a1:f7:19:f7:95:64:89:fb:08:6d:9a:
58:79:fa:cc:06:07:2b:3e:6b:7d:41:37:c4:7a:fa:cc:98:b0:
41:2f:a1:db:96:b3:32:de:7d:66:05:1c:f4:4a:8b:72:8d:f3:
c1:04:bc:90:40:72:69:92:7e:2a:9c:53:ac:16:4c:14:f2:12:
6f:24:c3:89:a1:cb:11:67:71:73:67:74:7e:a3:c4:60:bd:3f:
72:19:86:c0:5f:9e:d8:ca:ef:dd:62:a6:14:10:75:3c:3a:71:
bf:67:be:24:24:55:fe:7e:d0:0c:83:c4:e7:1a:39:c1:ee:19:
ef:cd:86:62:14:76:39:e6:6e:6e:65:f6:da:69:90:63:9f:d7:
e3:b7:1f:67:58:99:77:e8:02:38:fd:91:15:2f:0a:19:56:a8:
df:59:4d:24:50:88:b8:e3:65:b3:ff:8c:d3:6d:9b:1e:04:ac:
dc:22:9c:38:4b:42:fb:16:9d:57:ea:93:34:63:c3:06:f9:0a:
90:65:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:12 2024 by rpki-client on console-ams.rpki-client.org