Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer
File: EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer (raw, json)
Hash identifier: m0uiqD2a+B7+CRzRDuR69WNxCDnETVyFvLOSufjwjzo=
Subject key identifier: 11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4244C6772C46C31D7D0D515B93CE95A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.11.196.0/24
IP: 2a12:6980::/29
Validation: Failed, certificate revoked on Thu 15 Feb 2024 14:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4c:67:72:c4:6c:31:d7:d0:d5:15:b9:3c:e9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=119109f0ef595ea8b68586483dbc6fb3cfe56f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:5c:d0:32:06:55:62:60:30:70:36:a1:1b:
c2:1c:93:bf:0d:95:78:2e:90:d6:ec:f9:59:d2:f1:
6b:43:13:4c:11:09:b8:ee:c4:f1:d2:d8:4b:c0:fb:
5d:28:ae:62:bb:4f:4f:c3:b2:08:2b:06:ed:fb:af:
76:cd:f4:a6:bf:3d:ea:f6:8b:2c:b9:66:e5:66:41:
f2:ae:ff:02:e3:0a:03:68:0a:2f:56:c9:d8:b0:96:
1c:3b:f8:53:9f:ca:18:e6:15:67:4a:64:b7:11:55:
f0:0a:84:73:8a:af:f5:de:78:9c:14:c7:b9:e3:94:
f7:f1:99:f7:65:70:b0:f1:d6:2c:3e:a5:54:4c:7a:
f4:10:92:a4:51:bd:9b:3e:55:25:a9:a3:bf:a5:be:
29:fc:c8:26:56:a4:ef:bd:a3:48:20:87:a9:b4:3a:
59:89:83:65:26:6e:60:5f:ff:5b:5a:60:fb:20:b9:
34:74:79:e3:5a:1f:a5:53:d3:6b:c4:4a:68:d5:72:
6c:f3:c8:ec:f7:7a:0a:fe:af:b3:b9:08:af:bb:9b:
04:d0:32:ea:d1:b1:22:c4:3f:a4:fa:c9:a8:75:4d:
b9:ca:bc:2a:ad:14:28:b4:bc:bf:a9:9a:5d:85:e6:
21:30:aa:fb:62:38:3d:8d:be:1e:2b:a6:f5:be:a6:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.196.0/24
IPv6:
2a12:6980::/29
Signature Algorithm: sha256WithRSAEncryption
84:d0:4c:ec:50:08:75:b8:d0:34:0b:c1:f2:76:be:3a:e7:41:
70:99:f0:59:fe:05:20:1f:81:c8:d5:85:48:f5:61:8d:ae:b1:
33:f0:47:6b:10:e9:ea:c6:06:b6:09:9b:6f:05:f2:d1:32:eb:
1d:82:b4:5a:85:67:78:5c:5c:e3:e1:f8:0f:dc:be:6b:a5:be:
99:2f:e1:10:34:79:d1:d7:01:7d:da:40:5d:23:6a:76:9f:10:
60:21:1d:3f:2e:29:d9:e8:82:b8:e6:c2:f5:4a:2f:c8:83:2e:
6b:02:ab:31:74:4f:b8:ad:d5:a7:c1:38:f3:87:58:96:9e:b0:
b3:52:fc:df:f6:dd:d0:b9:02:d5:ad:dd:1f:da:e5:5c:84:a7:
c5:b9:d4:51:90:52:7c:43:a4:0b:8c:2b:6a:53:68:87:43:07:
29:a0:48:09:b2:ed:2e:c1:bb:39:04:66:5d:39:10:e5:3c:9f:
c7:c7:8e:12:dc:b1:1a:e4:65:d2:e4:ef:1e:36:c7:da:9a:c6:
c7:20:50:a6:ea:b7:51:5f:91:f9:7f:14:90:ff:32:74:30:4e:
86:76:4e:4e:84:db:e3:b4:8a:1f:7e:d0:80:e5:2e:4a:8c:46:
68:d1:0d:46:b9:5f:15:db:8c:d4:ee:c8:c7:57:84:d0:c3:b0:
5a:b4:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 16:51:08 2025 by rpki-client