Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be7cIhBndRK51yiokcHyRR09Rqo.cer
File: be7cIhBndRK51yiokcHyRR09Rqo.cer (raw, json)
Hash identifier: RuvIL8C4H1ft/eSK6sEc2OsrpDU53YMcJC4+u8VUDks=
Subject key identifier: 6D:EE:DC:22:10:67:75:12:B9:D7:28:A8:91:C1:F2:45:1D:3D:46:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D603968F8E7269505B92A99DE46C97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/be7cIhBndRK51yiokcHyRR09Rqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.23.219.0/24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 17:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:03:96:8f:8e:72:69:50:5b:92:a9:9d:e4:6c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6deedc2210677512b9d728a891c1f2451d3d46aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:65:15:55:78:1d:75:8e:73:7e:0e:e4:13:
90:2a:31:fd:18:7c:92:50:61:6e:61:31:e3:f9:e5:
58:76:95:85:79:42:8c:fa:2f:24:33:9f:72:00:78:
1f:9d:fe:e5:87:6c:8f:a8:e8:2e:43:0a:a2:6f:a0:
cc:a8:3c:66:57:11:78:af:ad:bb:82:45:0e:66:69:
b7:de:f6:b3:21:37:ad:7f:09:21:e3:5e:12:14:20:
4d:18:88:df:4a:d8:72:d8:f6:e4:70:53:c7:cd:cf:
82:0e:86:65:b6:1b:93:98:7c:02:c3:26:bd:26:ad:
96:36:12:ae:b8:1e:86:1d:85:dc:ba:44:b7:b0:bd:
7c:e1:72:65:15:7f:88:54:6b:4f:6b:01:a9:70:f2:
0b:67:2f:48:7e:a6:c6:7c:db:d2:af:9d:d5:5e:5f:
61:56:ff:8f:9f:cb:9a:25:3d:d6:86:4c:df:b6:4b:
cf:d5:26:3b:94:9c:7b:52:5a:4a:bb:4c:15:cf:aa:
90:c1:c0:c4:7f:50:e6:45:a7:39:1f:b0:1f:20:9a:
72:97:f9:56:83:8f:f6:d8:f4:c5:90:c2:21:41:78:
4d:be:e6:db:f2:42:7b:ea:c1:bf:3e:03:52:77:16:
2b:9a:40:d0:26:6d:bc:08:d0:62:38:f1:87:2f:c8:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EE:DC:22:10:67:75:12:B9:D7:28:A8:91:C1:F2:45:1D:3D:46:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/be7cIhBndRK51yiokcHyRR09Rqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7a:e4:dd:5e:00:e8:ec:a6:96:5d:53:44:34:47:10:dc:98:
0a:b4:44:ae:a2:95:ec:a0:62:d3:95:c9:1d:18:af:f0:45:3a:
62:20:39:d2:f2:9b:52:fe:0b:6c:3b:b6:c2:92:b2:f8:5b:1d:
dc:b7:cd:a7:0e:7d:32:f1:cc:ab:33:0c:6a:1c:42:15:07:1b:
48:07:5c:41:6a:69:cb:74:26:b0:ad:48:05:a3:c7:a5:25:fa:
50:04:3e:dc:64:6d:27:02:1d:c2:bd:37:57:3d:42:4b:93:96:
3d:a2:de:70:e9:0b:32:ef:27:94:54:b0:05:f5:83:b2:d4:5a:
3b:17:a3:29:5b:83:91:06:e1:33:8f:cf:ce:fa:5a:e1:21:ba:
47:c0:72:54:50:30:b0:f1:d7:f1:ce:bf:ca:3d:c9:dc:84:62:
d0:8f:d5:b2:3d:d0:46:4f:b4:3e:df:ea:46:26:f0:61:7b:23:
17:73:ff:ad:f7:51:68:dd:67:6e:3f:8b:69:20:40:19:6d:15:
22:99:10:ad:e2:bd:59:b3:46:c0:61:45:11:8d:11:24:c0:0d:
cc:cd:8d:a6:d7:38:38:52:50:af:a6:83:56:01:e3:b6:b3:67:
b9:f9:be:25:21:93:68:13:74:fc:9a:09:01:a7:39:52:0f:3d:
f2:33:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:09 2024 by rpki-client on console-fra.rpki-client.org