Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LFfdD5oDgz505HuZDxpIlbUhBKQ.cer
File: LFfdD5oDgz505HuZDxpIlbUhBKQ.cer (raw, json)
Hash identifier: yXl7LhIINSlNfQVdJf3/2jzwm1eqt246ofpCbUO5C3Y=
Subject key identifier: 2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D880A9FDD7F77DE691BAF080F2ACD57F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/LFfdD5oDgz505HuZDxpIlbUhBKQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Feb 2024 09:26:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56897
AS: 204187
IP: 31.216.57.0/24
IP: 62.68.86.0/24
IP: 62.204.36.0/24
IP: 80.91.209.0/24
IP: 84.246.84.0/24
IP: 91.242.237.0/24
IP: 93.157.104.0/24
IP: 109.107.142.0/24
IP: 146.19.64.0/24
IP: 146.19.187.0/24
IP: 176.116.24.0/24
IP: 185.187.16.0/24
IP: 193.163.22.0/24
IP: 194.26.136.0/24
IP: 195.64.110.0/24
IP: 195.88.220.0/24
IP: 195.96.136.0/24
IP: 213.109.206.0/24
IP: 2a0b:c840::/29
IP: 2a11:2180::/29
IP: 2a11:4780::/29
IP: 2a11:56c0::/29
IP: 2a11:72c0::/29
IP: 2a11:8180::/29
IP: 2a11:9240::/29
IP: 2a11:b140::/29
IP: 2a11:d040::/29
IP: 2a11:eb40::/29
IP: 2a12:3180::/29
IP: 2a12:6f00::/29
IP: 2a12:7080::/29
IP: 2a12:b800::/29
IP: 2a12:bd80::/29
IP: 2a12:e200::/29
IP: 2a12:ed00::/29
IP: 2a12:ee80::/29
Validation: Failed, certificate revoked on Mon 11 Mar 2024 12:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:0a:9f:dd:7f:77:de:69:1b:af:08:0f:2a:cd:57:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 8 09:26:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c57dd0f9a03833e74e47b990f1a4895b52104a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:a9:40:72:fc:43:04:f1:eb:0b:9b:9d:b7:
76:ca:35:16:12:c8:08:ef:25:c0:1a:d7:84:68:c2:
7e:be:6c:4f:75:17:41:54:d6:55:47:60:52:d9:5a:
33:62:b5:af:8a:06:f9:8f:73:68:b4:47:80:e8:7f:
8e:f4:26:c1:f7:01:fd:56:d7:18:af:d4:de:9c:1d:
f0:bc:8a:14:21:fa:ab:08:03:43:60:a7:d5:c7:26:
f1:96:a9:dc:2a:c7:e5:3c:fa:ed:03:10:97:f0:65:
39:f0:3d:9e:9d:e6:bd:f1:74:3f:f5:8a:2c:31:ce:
df:37:1b:29:5f:12:e7:55:ce:77:a1:52:e7:c0:c8:
09:dd:18:33:40:2c:49:45:ac:9f:ce:b3:3f:1a:72:
47:5c:87:7f:ba:1b:0f:ce:0c:95:3e:23:5b:56:45:
15:64:1e:3d:86:ac:2e:8f:99:07:cf:58:db:00:15:
52:a4:0f:50:04:83:73:ae:5c:68:4d:5c:20:af:72:
69:ee:a1:25:70:16:b1:ac:e5:19:e7:24:fa:4e:d5:
2f:91:a9:a3:bc:0f:3a:22:7e:da:1c:3f:9d:63:2c:
76:a7:f5:d0:c2:e7:31:2e:af:64:a7:29:85:f1:44:
15:21:cd:87:d6:d8:52:36:8d:f4:ab:4a:6d:59:6b:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/LFfdD5oDgz505HuZDxpIlbUhBKQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.57.0/24
62.68.86.0/24
62.204.36.0/24
80.91.209.0/24
84.246.84.0/24
91.242.237.0/24
93.157.104.0/24
109.107.142.0/24
146.19.64.0/24
146.19.187.0/24
176.116.24.0/24
185.187.16.0/24
193.163.22.0/24
194.26.136.0/24
195.64.110.0/24
195.88.220.0/24
195.96.136.0/24
213.109.206.0/24
IPv6:
2a0b:c840::/29
2a11:2180::/29
2a11:4780::/29
2a11:56c0::/29
2a11:72c0::/29
2a11:8180::/29
2a11:9240::/29
2a11:b140::/29
2a11:d040::/29
2a11:eb40::/29
2a12:3180::/29
2a12:6f00::/29
2a12:7080::/29
2a12:b800::/29
2a12:bd80::/29
2a12:e200::/29
2a12:ed00::/29
2a12:ee80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56897
204187
Signature Algorithm: sha256WithRSAEncryption
8b:37:dc:29:94:1b:f3:e0:b4:8d:53:bb:e5:87:02:be:54:34:
9e:62:a9:af:a2:36:cf:b9:c4:6c:2b:db:c8:64:14:ce:b7:bd:
e4:f6:93:32:12:b7:79:7e:aa:50:6d:61:e4:59:2d:32:f9:6e:
c4:ca:52:d2:78:0f:83:b7:5d:f8:72:70:60:96:99:f2:be:35:
6d:37:c1:a4:73:18:0e:a3:a7:d6:d1:ee:3e:ae:5b:54:55:48:
b1:85:d3:57:a0:28:44:7e:91:8e:97:38:0f:a3:af:9e:f3:e5:
8c:96:59:56:29:d7:a5:21:f5:c2:c8:85:15:55:4d:ec:48:ab:
00:d4:58:59:4d:86:50:d9:0f:38:73:2f:d1:e0:79:a3:ec:f9:
83:fa:df:c7:ac:51:50:c1:32:40:93:de:39:ff:b6:eb:fc:7d:
b9:30:a7:91:31:ed:4e:57:1f:88:7a:8d:60:13:12:5c:5a:b0:
42:c7:90:81:f4:ec:61:e9:d8:29:e4:c1:29:bd:02:81:45:2e:
6a:6d:ed:09:77:ab:c7:1e:1f:22:a0:e7:6b:1b:50:da:31:c1:
70:13:08:d9:a7:d2:a1:52:36:d6:1c:40:c0:83:12:b5:f2:7e:
59:72:0f:b9:e3:54:95:c7:13:b8:fd:7c:56:53:b6:11:67:3f:
46:46:89:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:32 2024 by rpki-client on console-ams.rpki-client.org