Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
File: LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer (raw, json)
Hash identifier: qOIvgyLn1XK6RvXcX0PULiYkTucgbxAwdB/t7uszj/4=
Subject key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01891B163F528D6089A4D8BED9D159CB8755
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Jul 2023 09:29:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.21.240.0/22
IP: 77.83.1.0 -- 77.83.3.255
IP: 80.64.24.0/21
IP: 86.62.16.0/22
IP: 91.212.49.0/24
IP: 91.212.51.0/24
IP: 91.212.65.0/24
IP: 195.18.27.0/24
IP: 212.81.36.0/22
IP: 217.78.238.0/23
IP: 2a0a:f9c0::/29
IP: 2a0c:4180::/29
IP: 2a0d:1ac0::/29
IP: 2a0d:2fc0::/29
IP: 2a0d:c080::/29
IP: 2a0f:8800::/29
IP: 2a0f:9480::/29
IP: 2a10:9580::/29
IP: 2a10:bb80::/29
IP: 2a11:d200::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:16:3f:52:8d:60:89:a4:d8:be:d9:d1:59:cb:87:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 3 09:29:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:49:1a:19:50:65:83:02:3e:c3:4d:af:b5:
aa:74:dc:88:f0:fe:3b:78:33:07:9b:5b:57:72:31:
a1:39:26:41:86:01:16:5a:e0:13:53:3a:d2:b6:b3:
34:05:d0:af:2c:0e:95:65:8f:a9:60:a1:81:f6:a3:
87:31:11:a6:84:e1:b8:30:7b:a7:96:b8:72:49:c4:
21:f5:96:06:b2:c7:a1:6e:8b:e5:27:10:90:35:36:
91:f1:12:bd:1d:79:0c:41:56:44:57:e6:a3:1e:11:
39:31:9c:ed:39:37:a6:c9:5d:e3:9b:d3:6a:9b:c2:
48:2c:a0:ed:d2:40:0b:61:0f:48:ea:e1:4f:96:e6:
0f:35:c3:69:89:35:30:9a:72:51:e2:70:37:70:3b:
e1:42:1d:0d:cd:e4:9b:2f:5d:56:9a:75:c9:2b:46:
7c:a4:cc:3c:c8:c8:28:f3:ee:cf:07:c1:65:b7:74:
86:d2:d8:46:f4:b4:f3:59:de:ff:fe:3c:44:4d:48:
d7:0b:8b:8c:c3:70:01:e9:ee:34:9e:6f:df:7f:47:
b2:5f:b7:34:3e:72:03:d8:c3:1b:b9:f1:79:c7:e5:
12:d0:80:6f:db:a7:d5:3d:ff:90:30:7c:41:4e:4e:
ee:66:0e:48:78:b2:f1:9e:37:74:b2:33:e5:50:02:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.240.0/22
77.83.1.0-77.83.3.255
80.64.24.0/21
86.62.16.0/22
91.212.49.0/24
91.212.51.0/24
91.212.65.0/24
195.18.27.0/24
212.81.36.0/22
217.78.238.0/23
IPv6:
2a0a:f9c0::/29
2a0c:4180::/29
2a0d:1ac0::/29
2a0d:2fc0::/29
2a0d:c080::/29
2a0f:8800::/29
2a0f:9480::/29
2a10:9580::/29
2a10:bb80::/29
2a11:d200::/29
Signature Algorithm: sha256WithRSAEncryption
00:83:ce:83:16:37:c0:b8:99:ac:c7:3e:c1:94:7f:eb:3f:b1:
ce:31:d4:a6:85:4e:ef:3d:62:47:0d:bd:45:26:81:cc:61:63:
2e:93:4f:e2:9d:22:7a:5b:6a:70:39:52:cd:bd:16:4d:1f:bf:
cc:2f:d9:7f:7b:b5:09:85:ed:f8:af:45:57:27:a4:cb:b9:b3:
48:99:e6:dd:89:22:11:ee:fc:ae:92:8e:eb:e0:80:dd:9f:ab:
0d:02:4a:e2:64:e7:2c:00:f6:66:50:17:81:a8:e6:25:61:cc:
4e:ab:ba:1c:dd:9e:50:88:15:bd:91:d4:34:23:eb:dc:b9:df:
cb:23:3f:e5:0f:6b:55:b6:81:2e:32:16:66:7f:b4:01:ca:3c:
9a:cf:42:9d:34:ea:c7:28:c0:d9:71:53:fd:aa:06:4a:5a:bb:
52:59:d9:f8:2d:69:ba:2c:63:07:92:ef:6c:0d:f7:b4:43:e1:
27:cd:cd:fc:3d:51:46:da:8e:83:02:9d:60:4b:95:4e:24:42:
e1:91:bf:6a:c0:cc:c2:c9:2c:21:53:48:a3:eb:f5:73:fa:ae:
80:bf:36:da:19:90:a5:6f:4a:d3:df:df:9c:d3:52:bb:69:c6:
28:de:93:b2:06:a3:05:6b:2d:65:3e:e7:d4:8b:46:e4:5f:a8:
ed:da:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 16:03:52 2023 by rpki-client on console-fra.rpki-client.org