Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9l91u0TlyTxCLjlVEfa2kePdhkQ.cer
File: 9l91u0TlyTxCLjlVEfa2kePdhkQ.cer (raw, json)
Hash identifier: uSwhlZ87q1IMAIGkjNFYzB/1U1m5/BstHZlGc2W0EAY=
Subject key identifier: F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500EA5790C800AC93056C330E7583BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/9l91u0TlyTxCLjlVEfa2kePdhkQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.212.103.0/24
IP: 2a0e:4580::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 13:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ea:57:90:c8:00:ac:93:05:6c:33:0e:75:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f65f75bb44e5c93c422e395511f6b691e3dd8644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:26:dd:2c:0c:b5:75:0b:d4:7a:39:84:40:
6f:bd:f2:e4:8a:64:86:a2:7a:20:d9:e6:9d:c3:52:
e6:55:31:3b:5a:4d:80:5e:5a:36:06:44:34:ec:45:
57:86:c6:90:ac:8b:80:2f:5d:62:f7:9c:e6:e3:15:
7f:de:cf:be:fd:a5:f2:92:a1:ac:f3:8e:ad:e0:a3:
8e:fe:93:df:d4:58:74:a6:fc:7d:1d:6a:be:ab:72:
54:65:d2:73:26:d1:08:05:da:1b:89:4e:15:ce:a8:
11:e4:fa:b7:d4:45:4e:f7:96:be:40:59:8f:1c:90:
0d:d8:15:51:b6:c8:0c:82:a5:13:23:58:bd:70:73:
dd:04:4b:89:d4:b0:c9:bc:e3:38:9b:5c:fe:d9:3f:
09:a1:5c:9a:b3:db:df:82:17:08:3e:e2:f2:ff:99:
b9:62:9b:ac:c9:bf:c8:63:77:f9:db:65:1f:9d:f4:
b8:b1:34:d0:08:89:03:7a:9e:f6:c5:85:f4:ab:eb:
97:ea:b9:b8:c7:ba:2b:12:f0:51:25:fc:78:9f:ce:
9a:fb:c0:a2:56:24:d0:07:de:fd:fd:55:ba:84:da:
5f:26:4d:86:c1:31:9a:41:74:9e:9f:f8:37:be:aa:
e3:c8:74:23:99:fc:22:8b:0d:ac:90:71:89:48:ff:
92:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/9l91u0TlyTxCLjlVEfa2kePdhkQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.103.0/24
IPv6:
2a0e:4580::/29
Signature Algorithm: sha256WithRSAEncryption
89:ce:f3:7e:ff:d7:79:49:b3:91:ff:d9:c6:f4:71:4f:0f:c4:
59:00:29:3f:4a:b5:c5:6b:7d:3b:49:d1:39:2e:65:e7:8f:78:
08:f4:2a:9a:50:ee:7f:6b:b8:3c:74:32:78:6b:f9:dd:1a:72:
8a:cf:ef:e7:1c:48:fb:82:14:59:51:f6:dc:2c:6b:a2:fe:62:
18:7b:d3:86:4a:ba:72:04:e0:da:00:ea:60:b6:24:86:1f:cf:
12:29:42:c3:02:d2:5c:15:cb:51:b2:be:5e:0a:d9:ab:23:bf:
c5:8a:4e:73:02:bc:a8:ee:ab:e0:04:59:40:b1:a1:b3:b4:55:
6a:42:a0:1a:eb:f5:3c:76:0c:47:9f:64:a2:a8:6b:9d:01:42:
5c:71:ef:5f:e1:3a:55:50:8a:ca:ba:7a:32:14:5c:4a:49:1c:
4e:60:f9:ec:aa:91:2c:32:c8:c4:df:20:e3:0e:02:0c:97:55:
43:27:6f:44:95:74:f0:59:32:bc:e2:71:a6:49:31:1a:60:1a:
70:a1:01:50:91:01:80:7f:d2:5f:90:e0:59:6b:ab:b1:cc:c7:
7a:55:ec:d4:17:b0:d0:9e:c0:a4:a0:36:4a:9e:53:5a:95:92:
3a:9d:56:cd:ac:6c:82:76:fc:49:53:65:da:de:c6:e5:ea:9a:
76:2e:6e:2e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFAOpXkMgArJMFbDMOdYO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjVmNzViYjQ0ZTVjOTNjNDIyZTM5NTUxMWY2YjY5MWUzZGQ4NjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks4m3SwMtXUL1Ho5hEBvvfLkimSG
onog2eadw1LmVTE7Wk2AXlo2BkQ07EVXhsaQrIuAL11i95zm4xV/3s++/aXykqGs
846t4KOO/pPf1Fh0pvx9HWq+q3JUZdJzJtEIBdobiU4VzqgR5Pq31EVO95a+QFmP
HJAN2BVRtsgMgqUTI1i9cHPdBEuJ1LDJvOM4m1z+2T8JoVyas9vfghcIPuLy/5m5
Ypusyb/IY3f522UfnfS4sTTQCIkDep72xYX0q+uX6rm4x7orEvBRJfx4n86a+8Ci
ViTQB979/VW6hNpfJk2GwTGaQXSen/g3vqrjyHQjmfwiiw2skHGJSP+SmwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFPZfdbtE5ck8Qi45VRH2tpHj3YZEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzI0ODRk
ZC04Y2Q5LTRmMDAtYjhlYS0zM2I2ZTQwNWU1YzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMjQ4NGRk
LThjZDktNGYwMC1iOGVhLTMzYjZlNDA1ZTVjMy8xLzlsOTF1MFRseVR4Q0xqbFZF
ZmEya2VQZGhrUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW9RnMA0EAgACMAcDBQMqDkWAMA0GCSqGSIb3
DQEBCwUAA4IBAQCJzvN+/9d5SbOR/9nG9HFPD8RZACk/SrXFa307SdE5LmXnj3gI
9CqaUO5/a7g8dDJ4a/ndGnKKz+/nHEj7ghRZUfbcLGui/mIYe9OGSrpyBODaAOpg
tiSGH88SKULDAtJcFctRsr5eCtmrI7/Fik5zAryo7qvgBFlAsaGztFVqQqAa6/U8
dgxHn2SiqGudAUJcce9f4TpVUIrKunoyFFxKSRxOYPnsqpEsMsjE3yDjDgIMl1VD
J29ElXTwWTK84nGmSTEaYBpwoQFQkQGAf9JfkOBZa6uxzMd6VezUF7DQnsCkoDZK
nlNalZI6nVbNrGyCdvxJU2Xa3sbl6pp2Lm4u
-----END CERTIFICATE-----
Generated at Fri Feb 9 18:27:19 2024 by rpki-client on console-ams.rpki-client.org