Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x91-h05qpGusmUprECBr2ST3ac0.cer
File: x91-h05qpGusmUprECBr2ST3ac0.cer (raw, json)
Hash identifier: fmYCnmFDE4Gu0yHGBZsZKuk6mbsX90wnS46Q+ueekpY=
Subject key identifier: C7:DD:7E:87:4E:6A:A4:6B:AC:99:4A:6B:10:20:6B:D9:24:F7:69:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB07B3391F8D2D17055164AAAE94D7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/x91-h05qpGusmUprECBr2ST3ac0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:14 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.151.92.0/22
IP: 2a0f:1700::/29
Validation: Failed, certificate revoked on Mon 23 Oct 2023 12:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:7b:33:91:f8:d2:d1:70:55:16:4a:aa:e9:4d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7dd7e874e6aa46bac994a6b10206bd924f769cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:2f:a4:03:f7:46:d9:ac:08:71:58:79:72:
96:d9:d4:57:69:dd:1e:c7:ae:c7:2d:76:11:b9:aa:
0e:28:b5:1b:b6:59:38:f1:7c:30:f8:92:9e:1c:3e:
1c:20:98:94:9e:c4:7b:2b:a3:5a:43:9a:70:6e:37:
f7:42:c3:09:14:d8:26:e5:72:a7:4c:54:7d:32:51:
eb:89:3f:c6:6d:7b:be:e7:ff:da:6b:bd:69:c2:bb:
bd:a7:ce:b8:1c:da:40:2b:bd:62:da:14:4d:a0:0f:
30:5b:ed:5c:a3:48:ac:d7:12:cc:04:92:c7:6e:e7:
51:6d:cb:9b:1c:33:49:ce:06:de:07:00:e0:0d:0e:
96:cd:a2:d3:ce:95:49:c4:9d:56:fa:28:79:05:9f:
25:de:08:3e:9d:9c:6c:41:83:10:bc:4d:02:c1:b8:
37:93:7d:c4:27:f8:f9:f5:77:5f:44:a3:68:d0:b1:
a3:1e:fb:8c:5b:5f:9b:25:86:8b:30:e9:49:5b:a0:
14:f4:a4:3c:96:2e:ee:29:82:aa:a8:77:b2:8c:46:
ff:ae:4d:70:c3:ea:76:32:64:12:43:97:64:39:a3:
77:8c:62:1d:c0:ca:67:53:e6:63:b3:3e:cd:ea:27:
0c:e4:77:d1:39:4a:14:98:ca:f6:9c:17:09:18:86:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DD:7E:87:4E:6A:A4:6B:AC:99:4A:6B:10:20:6B:D9:24:F7:69:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/x91-h05qpGusmUprECBr2ST3ac0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.92.0/22
IPv6:
2a0f:1700::/29
Signature Algorithm: sha256WithRSAEncryption
1b:86:d6:cc:e9:97:d3:4e:a1:c7:41:40:53:f0:20:5a:e8:78:
4a:80:6e:8d:2d:25:7a:bc:e6:e4:bb:42:c8:32:a4:31:83:88:
d1:e2:a5:74:54:9e:f9:ed:a6:7b:e3:45:0d:b1:50:02:2d:e9:
60:bc:3b:13:84:1e:b7:f4:6d:82:eb:63:cf:b6:dd:c6:26:a9:
e6:e2:52:29:ba:e6:ca:2e:2e:27:8e:0b:43:ae:94:a6:19:f6:
f5:7d:7a:30:f0:05:97:55:7a:f9:dd:72:91:02:23:84:c1:ef:
5d:8d:e0:52:10:b0:f8:9d:b2:7b:8f:92:cb:2b:7b:a3:ce:7f:
4f:3d:52:c6:17:26:6d:2d:88:32:89:18:fa:20:68:20:cd:3f:
c8:9a:9f:1c:33:28:e9:6f:1f:eb:81:ca:a3:d6:3a:6a:8f:0f:
d1:80:d4:b6:bc:2d:5e:c7:ce:cb:09:3f:d7:ab:68:c4:c8:9f:
59:6b:2e:d3:f1:1c:76:a3:b1:06:b5:d3:61:20:ff:08:d9:98:
7d:83:19:d4:b3:b2:c6:10:94:2e:46:fc:f4:55:dd:6d:9c:9c:
21:4d:04:16:22:7b:9c:aa:94:48:4d:88:c2:66:a5:1a:d1:3c:
e8:4d:d6:57:78:c3:ec:fd:e6:4d:a5:aa:c6:24:fa:b7:70:fb:
75:b6:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:57 2024 by rpki-client on console-fra.rpki-client.org