Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer
File: LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer (raw, json)
Hash identifier: heyR9yqOMDqfmiuy6tEz8IVTUOqt76g19Z8XnomeJns=
Subject key identifier: 2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ECAD906870FD755756893FE3D339F98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.mft
caRepository: rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 19:24:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.156.116.0/22
IP: 91.228.168.0/24
Validation: Failed, certificate revoked on Mon 06 Mar 2023 06:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ca:d9:06:87:0f:d7:55:75:68:93:fe:3d:33:9f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:24:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:34:33:b4:01:f8:7f:97:fa:d2:6f:01:98:
0a:f1:78:47:d5:67:31:92:ca:3c:a7:52:40:c2:fe:
eb:a8:18:a8:81:bc:8d:c8:24:06:c8:8f:b3:78:0a:
bb:c4:0b:87:5c:fd:ec:c5:d0:ef:a4:f2:b9:74:b1:
c9:e3:6f:18:40:44:9b:5a:9f:d8:08:62:29:62:de:
0d:30:8b:6f:8b:00:75:b6:c2:b8:14:59:41:3f:ea:
f6:34:c0:51:00:0e:a4:5f:06:c1:c5:02:74:7f:eb:
fa:82:8b:a9:d3:c7:ba:2b:a1:91:1a:a7:90:37:dc:
39:9d:24:1c:44:6b:95:3d:b3:97:92:9e:97:c8:5e:
55:b0:20:2d:e5:0f:06:77:6d:6d:24:4f:8d:eb:a4:
9b:c7:34:06:ac:d5:d0:bb:e6:71:30:ab:10:a7:b7:
4c:44:7b:c4:fa:df:47:89:cd:4f:f6:0c:58:d6:be:
4c:c8:5f:9d:d4:02:9f:4c:4f:db:09:ea:cc:60:24:
83:f2:87:70:7a:12:9e:c2:75:cd:10:f3:fd:8b:21:
8b:58:bb:eb:93:62:3e:0e:fc:c3:3d:5c:4b:24:b8:
06:ca:dd:8e:bf:e7:ca:63:09:a1:33:22:59:8d:6e:
06:2d:44:aa:1d:7d:71:c9:f1:05:79:79:71:1d:97:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/22
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:8e:58:d0:93:8f:e7:ea:b4:89:46:0d:27:80:64:da:fc:f8:
de:07:43:d7:4b:42:7e:2e:21:ea:22:cc:4d:fa:61:e0:0a:8e:
de:eb:14:5f:94:96:68:9b:c0:5c:14:61:27:c3:e1:f0:1b:f1:
b3:fc:22:6e:14:9e:4b:c1:31:49:35:65:6a:95:8d:76:96:78:
13:fd:82:03:e0:41:1d:2b:7c:8a:72:4f:0e:00:75:e5:7c:e6:
09:26:26:6e:8f:16:4a:cf:87:ff:26:f8:34:f1:75:fd:ba:d8:
9c:32:fb:4f:a9:7b:5e:2a:dd:1d:64:07:7e:3f:d5:89:5e:2a:
90:74:54:73:50:14:23:89:6d:10:50:ea:63:e7:ed:49:a9:6f:
60:b9:3d:3a:45:66:3f:e3:fa:b3:97:c8:cb:e6:d3:45:d8:da:
b5:8a:6c:e7:22:da:32:a5:f6:ee:e5:76:90:ec:0c:a0:4b:04:
69:ef:d0:28:02:81:b4:b8:9d:62:b4:cf:15:f8:60:2f:e4:1a:
ea:14:c7:91:bb:15:05:18:8b:e8:a8:d4:cf:24:92:42:ae:31:
2d:f7:6d:99:4b:6f:1d:e0:b9:4e:eb:0e:81:53:f9:98:2b:82:
14:6e:56:70:df:30:70:a5:64:63:93:66:5a:2c:07:44:7e:5e:
b7:06:bc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:59 2024 by rpki-client on console-fra.rpki-client.org