Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5LkNshgW3wH3Dylmg_6iwKyBYdk.cer
File: 5LkNshgW3wH3Dylmg_6iwKyBYdk.cer (raw, json)
Hash identifier: kkEmZy36VRdgansWg3ATykd0610F/MmGWW3M91ZUv1A=
Subject key identifier: E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571683681D4469737B14DAD54A5485159
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 87.236.144.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:36:81:d4:46:97:37:b1:4d:ad:54:a5:48:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4b90db21816df01f70f296683fea2c0ac8161d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:c0:87:d8:f6:e6:c2:66:1b:81:e4:e5:7c:
98:c6:d2:44:ef:06:d4:c1:33:94:32:38:1b:3b:fd:
e4:4c:a0:17:f5:a4:af:76:4c:12:c7:12:83:b9:d4:
c2:4b:ae:1b:c5:ab:7d:9a:9c:a5:c4:51:6d:c5:51:
73:32:4a:90:98:a9:a9:36:20:85:bc:61:d1:51:e4:
d4:0d:30:9a:97:d5:56:9d:b4:49:56:88:b5:e9:ce:
18:c3:12:63:ad:78:f4:2b:72:04:10:2d:96:d9:44:
d0:5e:11:c5:3e:ab:ce:4f:58:89:67:09:80:00:b4:
cd:3a:25:75:f9:1d:a0:af:37:3b:24:da:e9:46:e7:
21:b2:8d:9c:74:5f:67:8b:81:74:23:f1:90:09:31:
a4:5e:93:de:75:01:ed:2e:ae:66:a1:d8:0c:55:d9:
d2:20:0c:4d:46:67:08:13:b0:63:8f:8d:c2:14:b7:
81:9c:5c:88:22:16:42:49:03:aa:79:55:b6:c8:c0:
c3:a9:15:a2:fe:7b:cb:91:fd:2b:f6:ca:35:76:f8:
ab:08:d0:69:6b:b9:98:c7:c1:75:65:8c:b3:0c:eb:
45:d8:bd:29:94:7d:03:0a:e1:e4:d0:04:01:f8:82:
4b:89:8c:5a:d1:2f:2d:b0:be:85:a5:03:0e:89:da:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5d:73:95:5b:37:f1:8e:0c:d5:8a:60:fa:f0:03:2b:bb:b3:
3b:2d:b9:d8:ae:cf:92:a7:d3:45:28:e2:99:1b:49:ec:0e:00:
33:aa:28:9e:ed:5f:37:af:a8:36:9b:77:ae:89:79:2b:4f:ad:
4f:1a:ce:6e:73:f0:0b:3d:bb:fd:5d:86:cd:b1:b4:e7:70:d2:
8b:52:41:07:97:dc:97:25:13:64:77:cf:ea:47:a6:96:94:cd:
76:78:48:88:48:b9:f2:6a:0c:2d:6c:d8:66:1e:3e:3a:b4:40:
e2:e5:f6:b2:67:5f:c2:fe:19:fa:dd:e4:c9:2e:9e:18:50:3d:
29:d8:59:08:d9:38:73:d5:ca:3f:c3:e1:c2:b4:cb:d2:65:7e:
a9:65:4d:00:ce:55:fb:cb:8c:18:ee:57:44:a9:d3:4f:77:ca:
a7:da:65:d0:cb:c4:2e:84:0d:af:f8:e5:26:51:8a:41:b5:37:
92:b5:3d:27:71:03:a1:bd:af:d0:c5:29:ac:a9:51:da:2f:98:
11:77:fe:91:b5:e5:33:9f:16:3a:26:e5:c3:f5:e7:2a:e8:50:
4c:b4:58:a8:88:b4:f1:7d:17:9c:39:df:a7:53:85:23:6f:d1:
6a:ff:e7:1f:19:56:26:77:16:33:0f:d3:28:aa:2c:68:48:32:
e3:81:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 09:08:23 2023 by rpki-client on console-ams.rpki-client.org