Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LHbgyPbLch47zyARujqvuioQF9s.cer
File: LHbgyPbLch47zyARujqvuioQF9s.cer (raw, json)
Hash identifier: cNnvOZLrUhmwoB0g7p+BtcdUoi+Pb7Sx3abe0D4lbyA=
Subject key identifier: 2C:76:E0:C8:F6:CB:72:1E:3B:CF:20:11:BA:3A:AF:BA:2A:10:17:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906E5837C9FB224940A8D1154056A51BCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/LHbgyPbLch47zyARujqvuioQF9s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jul 2024 12:49:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209200
IP: 2.57.8.0/23
Validation: Failed, certificate revoked on Wed 21 Aug 2024 11:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:58:37:c9:fb:22:49:40:a8:d1:15:40:56:a5:1b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 12:49:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c76e0c8f6cb721e3bcf2011ba3aafba2a1017db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:db:82:97:21:60:23:2a:42:2b:7c:a0:4f:
04:5d:c8:45:f4:9e:d6:4c:eb:91:ed:61:da:14:07:
50:49:ce:44:33:22:28:7c:e6:aa:c8:a4:93:86:1b:
65:ca:4e:c3:63:75:eb:2a:70:47:13:1b:d5:27:c1:
6e:bc:5a:a3:06:86:c8:4e:56:2f:95:b3:c3:79:0d:
fe:91:1e:e5:41:60:d5:51:eb:2c:9d:5e:b5:a9:4a:
82:02:26:44:d3:c4:d8:f3:ce:85:a8:d7:a2:34:10:
0e:00:d3:ec:61:21:8a:76:62:f3:6a:f4:5f:9e:d0:
4f:ac:90:52:4b:cf:8b:2c:6c:78:37:7e:2d:44:e1:
c7:be:a6:8a:7b:82:f4:f4:33:1c:18:68:99:48:e1:
5b:07:67:48:a9:d8:22:cd:dc:e2:4c:75:41:90:23:
1c:21:63:0d:76:a0:b8:8c:08:1a:70:34:85:fd:45:
42:09:88:7b:3b:ba:f9:5b:bf:72:ff:50:d3:bb:26:
bd:2b:5c:30:41:00:84:6c:e2:d2:8c:ec:22:69:ad:
1b:d1:77:be:53:37:19:78:94:28:4c:86:b0:41:e1:
d1:c7:f9:ee:2e:04:76:e9:7f:be:7c:97:30:c6:ad:
6d:8a:45:3d:63:e7:b1:2e:15:c0:b7:d3:4e:3b:88:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:E0:C8:F6:CB:72:1E:3B:CF:20:11:BA:3A:AF:BA:2A:10:17:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/LHbgyPbLch47zyARujqvuioQF9s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.8.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209200
Signature Algorithm: sha256WithRSAEncryption
ae:17:fc:8a:c8:85:92:a0:1f:e1:6f:0e:01:cf:e2:72:32:d7:
82:05:9e:cd:9b:66:42:be:42:65:3b:96:71:9c:58:57:7f:13:
27:bf:96:d7:6f:9f:48:60:f2:b6:a3:9d:e3:0f:b9:f9:00:83:
dc:4a:a7:43:a2:6d:54:87:fb:6b:e9:b3:89:72:a8:d8:59:05:
1b:0b:69:c2:69:ca:b2:c7:d5:93:4b:64:f9:de:31:b3:1e:95:
38:98:d2:fe:18:d1:37:bb:b7:7e:99:2f:bd:a7:7f:21:5c:65:
0c:ab:83:fb:f7:ff:c3:62:d6:17:12:dd:00:2e:10:13:47:79:
26:9c:32:46:40:59:84:11:3e:2d:9f:74:e0:b5:10:0a:65:48:
ec:bd:ac:c8:73:2f:6a:f3:93:60:2c:af:96:fa:94:a5:8f:b7:
1c:04:80:ec:91:01:77:36:df:a3:ea:8f:0b:70:5c:26:0b:2d:
5c:fd:82:9f:a5:d0:2d:3d:d9:1f:bb:ee:bb:5c:f7:87:fa:3e:
e8:60:ae:6f:84:5a:92:24:42:36:a0:98:89:b7:01:7d:64:e3:
7f:2e:38:3e:08:a6:fc:7e:6d:fb:d8:f2:88:68:06:0c:21:18:
c4:fd:b7:a8:0a:6d:c0:ee:75:6a:f2:7a:a9:e5:56:17:a6:1d:
35:27:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:36:46 2024 by rpki-client on console-ams.rpki-client.org