Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3xMLNTMjWAlOau-kxtX-5c18F0.cer
File: c3xMLNTMjWAlOau-kxtX-5c18F0.cer (raw, json)
Hash identifier: TkmWBBDGm6w++loz1CBBzm77GgCTk50Qs4dm1D0M3Do=
Subject key identifier: 73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD129E19234ED245CD38A19453334AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/c3xMLNTMjWAlOau-kxtX-5c18F0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 209428
IP: 91.206.229.0/24
IP: 2a09:5ec0::/29
Validation: Failed, certificate revoked on Tue 23 May 2023 17:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:29:e1:92:34:ed:24:5c:d3:8a:19:45:33:34:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737c4c2cd4cc8d602539abbe931b57fb9735f05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:75:aa:b1:b3:1b:50:81:11:76:e0:fc:d7:
03:a0:90:7b:7c:81:f4:5d:91:64:08:cf:90:69:1d:
1f:61:63:35:18:63:9f:3f:f9:f0:34:fc:f2:ef:d5:
3b:0c:b9:e8:72:10:5d:0b:d1:ff:8d:5d:e9:3d:1f:
6b:b8:fe:30:10:7f:da:e1:eb:31:08:bd:cf:fd:47:
e7:a2:ee:4e:a5:f3:2e:e3:ac:52:9d:37:20:31:c7:
ae:58:ee:8b:8c:4c:a4:c0:e5:92:4c:1b:69:47:a1:
27:c2:7a:cc:86:c9:e7:a9:42:90:81:97:90:d8:53:
00:41:99:fc:40:44:99:bd:e6:f0:a1:5d:d3:11:83:
7e:1b:14:b9:7b:bc:0c:7f:32:99:8a:4d:f4:ce:93:
52:15:8e:de:ec:cd:ad:60:89:56:9a:65:dd:ed:4f:
c8:af:c4:e1:22:fe:25:2f:6c:0c:02:29:27:88:e5:
7b:42:cc:1e:bc:c0:8c:21:94:50:8e:ff:54:77:df:
a5:94:c1:f8:30:8e:2c:26:ae:aa:fd:a9:61:fd:75:
bf:dd:df:0c:b3:f4:07:cb:46:7a:5c:d1:51:b8:d3:
3b:31:82:a1:ad:94:d2:26:b1:21:5e:e3:75:bd:32:
e7:08:70:0b:6d:76:f6:62:44:8f:ec:b9:9e:a5:30:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/c3xMLNTMjWAlOau-kxtX-5c18F0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.229.0/24
IPv6:
2a09:5ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209428
Signature Algorithm: sha256WithRSAEncryption
98:87:07:00:76:86:34:60:72:60:24:43:b9:d3:e4:0b:c2:36:
21:f5:82:d1:be:8e:cf:4e:33:39:59:48:ab:93:b6:ee:1a:e3:
7d:0e:3e:43:82:4a:38:5a:80:65:90:2f:f4:b5:16:13:7c:b6:
b0:31:28:86:d8:85:f7:e5:9d:21:d1:b6:15:e8:94:d7:0d:0e:
56:1c:18:a6:1d:fb:54:4b:b2:aa:93:23:e2:4a:d5:c1:b2:9c:
ff:89:20:28:d7:af:8c:3f:99:35:e6:61:ee:3a:f8:09:ec:28:
f9:10:51:75:a0:01:f1:f2:01:c0:ea:1e:87:00:a9:28:e0:cb:
f2:cd:80:99:b0:40:2e:2d:a2:82:b8:0b:72:1b:82:a6:f7:b2:
4a:f9:92:d7:f5:f5:ee:e3:02:5b:87:4c:99:cc:67:d5:5a:fc:
d7:e8:74:84:b0:d5:9f:e2:1f:e3:40:b9:b1:47:3e:c6:92:0d:
bc:57:ba:73:9e:7c:09:b7:97:4a:c6:fe:ee:9f:90:82:e8:62:
70:54:a5:67:37:bc:5e:17:6f:ca:95:a1:b2:53:be:55:3d:91:
bc:46:4a:38:52:24:35:a6:b1:26:13:8b:f1:d2:cd:bc:55:f5:
c9:8b:dc:9a:ed:60:f1:97:64:09:56:71:ce:58:8d:ca:25:27:
44:4c:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:55 2024 by rpki-client on console-fra.rpki-client.org