Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x0Po-nG7fu5GHgFTBmKYMcf7Xbg.cer
File: x0Po-nG7fu5GHgFTBmKYMcf7Xbg.cer (raw, json)
Hash identifier: Dszq9MsluHMi6wDYOvn2/ZabqMEsljln8qOM5qj11/8=
Subject key identifier: C7:43:E8:FA:71:BB:7E:EE:46:1E:01:53:06:62:98:31:C7:FB:5D:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245AF18EE5685739630F3BAE2EA9FD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/ba8dad-955f-4863-adf1-058664646bec/1/x0Po-nG7fu5GHgFTBmKYMcf7Xbg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/ba8dad-955f-4863-adf1-058664646bec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.213.99.0/24
IP: 2a11:c500::/29
Validation: Failed, certificate revoked on Mon 28 Aug 2023 09:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:af:18:ee:56:85:73:96:30:f3:ba:e2:ea:9f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c743e8fa71bb7eee461e015306629831c7fb5db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:0e:a8:dd:59:c7:18:b3:94:10:35:28:98:
f0:e8:5f:29:e9:03:47:24:3f:6f:2b:1e:15:d5:8d:
32:b1:c8:dc:93:cb:88:3d:70:a4:c3:a1:dd:81:b7:
bf:62:82:53:1b:61:7f:4f:0d:6e:57:b5:fa:7f:96:
d7:14:91:61:d6:d8:91:b3:65:bd:de:f2:5b:6f:79:
db:af:75:cf:ec:61:16:a4:3b:31:89:87:7d:e3:bd:
05:4d:24:05:e1:7b:bf:77:76:77:c0:59:4b:a7:39:
df:1a:f5:54:58:27:ae:e3:a2:33:6f:15:7a:a9:4f:
d3:e9:fe:53:64:1c:96:6a:ec:e4:b2:36:16:86:50:
d4:8e:37:e6:6a:7e:dc:82:f3:a0:bf:c6:f1:cf:5b:
92:8c:08:ed:ba:3f:56:e8:bf:aa:9d:ee:0e:28:da:
69:c2:15:ba:61:b7:28:96:1f:45:e5:15:53:60:1f:
0d:65:41:19:18:7d:a1:01:39:15:c9:e3:47:ea:a8:
7e:cb:77:ef:98:e1:00:32:96:61:57:13:96:eb:10:
66:c5:63:a0:ec:59:c3:3d:69:b7:6e:09:9d:fd:9c:
94:aa:15:c3:d7:0b:fa:f2:56:12:ac:4b:5c:f9:15:
e5:bf:be:8b:ea:c2:32:76:20:8d:85:32:f3:20:b1:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:E8:FA:71:BB:7E:EE:46:1E:01:53:06:62:98:31:C7:FB:5D:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ba8dad-955f-4863-adf1-058664646bec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ba8dad-955f-4863-adf1-058664646bec/1/x0Po-nG7fu5GHgFTBmKYMcf7Xbg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.99.0/24
IPv6:
2a11:c500::/29
Signature Algorithm: sha256WithRSAEncryption
18:2f:1f:66:21:e4:67:60:70:22:33:bb:b6:c6:d5:3c:3f:50:
ed:13:30:81:ca:ab:6d:2e:8c:d9:12:b3:69:29:fc:5d:08:26:
44:db:d9:23:4b:d3:5b:a3:ad:21:44:72:08:b4:a4:50:5c:a1:
f9:d6:fb:58:67:46:db:e1:b4:45:64:30:84:95:db:00:93:5f:
bb:34:a9:d7:33:64:a4:b6:58:c4:aa:cd:86:ac:dc:ee:93:21:
d4:9f:1d:86:9e:50:bd:1c:1d:ac:31:95:08:7e:a6:7e:48:12:
13:ad:7e:a0:d2:a0:81:a9:d6:21:05:01:91:78:43:42:59:c1:
c3:8f:0c:14:ca:a2:70:19:f7:29:f8:49:8c:8f:af:ee:5f:d1:
db:ac:59:6d:0b:f1:38:16:d8:54:65:66:8c:68:a6:dc:26:a7:
aa:8f:08:27:52:90:79:0d:4c:d2:6d:01:73:93:e8:c7:c1:2e:
87:97:60:3a:cc:8b:48:1d:51:26:c8:7f:bb:cb:8f:08:d4:8f:
20:0a:d8:c6:66:de:16:6f:09:7d:67:ac:a2:15:3f:78:cd:95:
5c:f1:54:f9:d2:46:95:3e:da:41:7a:1d:15:84:cf:57:8c:76:
06:43:20:08:eb:a7:9e:28:c8:7e:1a:3b:3b:71:87:85:08:63:
20:be:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:56 2024 by rpki-client on console-ams.rpki-client.org