Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6zi33lYZ1UIbFdLevVbUze2UJHw.cer
File: 6zi33lYZ1UIbFdLevVbUze2UJHw.cer (raw, json)
Hash identifier: j+A7MseurY/WqyZ6s43oFKVm3x7Vqiekm2B7zDAsl2c=
Subject key identifier: EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAC313732B81A6C18760A53DC5FDB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.196.0/24
IP: 2a11:6f40::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 12:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:c3:13:73:2b:81:a6:c1:87:60:a5:3d:c5:fd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb38b7de5619d5421b15d2debd56d4cded94247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:17:38:63:69:bd:0c:87:65:09:00:73:8e:
0e:99:09:f8:00:b9:d6:59:8c:a6:17:ce:d1:69:7f:
07:8e:2b:7b:bd:f3:91:f2:36:22:26:4e:10:18:2e:
04:1d:2d:ae:7f:dd:d3:c7:d1:db:35:83:57:b9:ef:
97:7c:fe:28:0c:8b:7f:64:e4:2e:f5:ca:df:33:49:
f1:09:07:bb:6b:be:41:fd:f3:52:54:0b:55:ec:a1:
2a:a0:3b:93:36:e5:2d:19:2f:87:9c:cb:8c:78:d6:
a3:ee:16:82:de:60:83:51:43:bd:91:df:2c:e9:41:
09:9d:2f:a7:fc:7d:e7:05:a5:21:19:c0:91:b7:64:
ba:1c:06:bc:5d:58:39:80:61:f8:c7:10:05:81:34:
eb:78:d4:2a:5d:d9:87:e4:37:4c:9d:9d:69:97:7d:
52:f8:1d:05:ef:d5:66:52:b3:e0:f4:87:85:06:5e:
4a:90:d8:c0:b2:29:c8:7a:16:8a:f4:bf:82:27:d4:
d6:ba:99:7e:d2:80:4e:f2:23:9d:37:18:7b:20:1d:
69:d1:68:28:c2:7a:93:ef:1b:05:5b:31:55:ea:3c:
aa:16:88:55:ed:85:55:e3:c2:bc:4c:f1:ba:37:b7:
b2:ba:7f:12:b5:3e:a1:3e:a3:3b:4b:c0:93:d3:5f:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.196.0/24
IPv6:
2a11:6f40::/29
Signature Algorithm: sha256WithRSAEncryption
1f:cd:21:a3:ff:d6:b9:b3:3c:e7:27:59:d6:fa:1f:fa:7a:e6:
ba:78:e8:55:9b:8d:39:b7:5e:f3:23:4d:31:a8:e4:99:a3:16:
b9:10:69:c4:b3:2d:8e:86:b6:c8:ec:c5:10:b7:6b:b9:d1:61:
a7:87:e4:62:fb:fb:8b:ca:21:21:11:f6:6c:3b:2b:9c:be:df:
b6:40:51:f9:b3:2d:9d:36:57:34:65:6d:9a:fe:d2:d6:4a:62:
3a:30:45:ed:20:a5:5c:0f:50:4f:1d:2d:3f:ec:76:d6:7c:a2:
2b:68:1e:5a:c2:60:91:dd:21:e2:e5:b4:fa:01:4f:98:6e:ab:
41:69:28:6c:41:33:db:77:18:33:c7:4c:a6:b8:e4:e3:f7:89:
2d:4f:97:42:46:93:95:64:af:a3:be:4a:cc:1f:c9:69:cb:43:
8b:b0:64:7a:29:6d:d0:c2:a1:85:b9:da:04:8e:19:f9:00:c6:
4d:c9:c1:4d:3c:4e:f2:39:8e:b1:fc:f9:e6:f9:ab:ce:2d:5c:
61:fe:aa:5c:32:f5:48:03:46:6b:d9:7a:73:38:6c:79:41:91:
55:c5:f1:6d:f3:0d:89:43:12:7f:dd:c6:04:b2:7c:fd:0e:6c:
02:e7:c2:26:6c:b1:c6:2c:56:fe:e8:2e:37:00:c5:1c:1b:8d:
bb:66:a2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:29 2024 by rpki-client on console-fra.rpki-client.org