Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6BfgUv6NoKgK_xCEteWXYG0U4iA.cer
File: 6BfgUv6NoKgK_xCEteWXYG0U4iA.cer (raw, json)
Hash identifier: Fk+tSyZjaRLHlUY6NynbjTfDv9/VrurDvlhiwvonjfg=
Subject key identifier: E8:17:E0:52:FE:8D:A0:A8:0A:FF:10:84:B5:E5:97:60:6D:14:E2:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F109BED67766BCC3EA3AD3317FB45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/6BfgUv6NoKgK_xCEteWXYG0U4iA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.232.206.0/24
IP: 2a11:1f00::/29
Validation: Failed, certificate revoked on Tue 08 Aug 2023 11:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:10:9b:ed:67:76:6b:cc:3e:a3:ad:33:17:fb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e817e052fe8da0a80aff1084b5e597606d14e220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:8f:93:90:09:ee:05:98:b3:ac:7b:a9:2f:
9a:d6:af:54:1a:2c:6d:5f:c8:5b:90:9d:20:dc:d8:
73:e8:2c:6d:e1:e5:4a:a2:77:42:ed:92:c9:d5:85:
36:c3:57:b9:9d:7b:6c:2d:26:99:39:de:a1:cd:bf:
0b:f7:6c:b2:9d:4f:e1:18:9c:4e:ad:d2:ca:13:20:
f7:25:4d:cf:c6:22:76:d8:31:0b:8b:f9:f7:52:af:
8a:3c:63:42:9c:6a:26:35:26:38:b4:6f:fe:1b:38:
56:84:f1:af:0f:53:63:29:ca:02:97:9a:98:2a:b0:
46:35:67:35:82:9d:c8:6f:cf:bf:d2:86:2d:fc:c5:
29:a4:ad:d2:c5:83:f5:22:51:41:76:fc:64:77:30:
61:6b:52:09:29:ba:b2:5d:26:92:e2:cb:cf:05:96:
ce:a9:b2:7f:53:c9:2b:e4:70:ca:4d:93:4a:5a:94:
8c:8d:36:14:ed:39:d0:de:66:0c:f3:f6:cf:e3:a0:
bd:a2:0b:eb:7a:82:06:29:44:41:c5:c9:c4:0f:83:
ca:cc:b2:75:3b:84:4e:b6:1b:55:f8:17:a8:70:f4:
1a:6e:b7:92:5b:81:a9:3e:45:80:a7:25:dc:52:2d:
e6:9c:56:bd:9c:a0:04:19:89:ff:13:c6:03:6d:a2:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:E0:52:FE:8D:A0:A8:0A:FF:10:84:B5:E5:97:60:6D:14:E2:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/6BfgUv6NoKgK_xCEteWXYG0U4iA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.206.0/24
IPv6:
2a11:1f00::/29
Signature Algorithm: sha256WithRSAEncryption
42:8f:85:b3:95:0a:46:36:5b:70:98:e3:84:33:a5:b3:1d:27:
a2:5e:48:a8:fc:eb:1e:3d:a4:26:7a:94:8a:11:f1:33:ea:51:
bc:0e:97:51:be:bd:80:4d:f5:6d:63:75:e2:59:c8:46:ff:cc:
82:97:6c:af:43:60:8d:c7:46:2b:a3:81:ce:7b:f8:b7:86:fe:
19:49:9f:8c:f1:92:aa:35:7e:37:ca:45:52:5e:9b:87:29:a3:
a7:a6:99:85:d4:60:a6:6b:e7:e0:ef:22:96:f7:5d:35:da:db:
89:94:3a:ec:1d:1e:9c:4f:d0:85:6f:c5:75:83:82:11:0b:ad:
9b:45:1c:21:fe:d6:60:d8:c4:39:9e:f1:01:6a:eb:4a:80:34:
7a:89:93:ec:e1:c2:86:b9:3c:cf:31:f8:8c:83:13:13:f5:dc:
25:ce:a4:33:71:40:8e:7e:8f:ff:4c:e6:29:d7:f7:7a:f1:54:
14:8d:4c:a8:3b:52:51:e3:e4:e4:f6:71:8a:ba:9c:f2:0e:0c:
43:82:95:fe:1a:17:4d:fe:75:f1:d1:27:62:4e:73:39:39:de:
2e:b9:79:aa:90:51:1d:7f:22:be:2b:87:a8:30:44:21:3e:73:
61:87:87:57:28:23:f0:ab:ab:fa:09:fd:e2:88:58:bf:07:2a:
2b:34:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:37 2024 by rpki-client on console-fra.rpki-client.org