Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LZJ857pSAwfqFHw08TKH23a5MP4.cer
File: LZJ857pSAwfqFHw08TKH23a5MP4.cer (raw, json)
Hash identifier: orBHO2VC0iQb7TrCVmnJId30sqPJj+SVmliKwv1I93c=
Subject key identifier: 2D:92:7C:E7:BA:52:03:07:EA:14:7C:34:F1:32:87:DB:76:B9:30:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFFA3703A6D248481621523E589C87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/LZJ857pSAwfqFHw08TKH23a5MP4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.205.0/24
IP: 2a11:71c0::/29
Validation: Failed, certificate revoked on Tue 17 Oct 2023 09:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:fa:37:03:a6:d2:48:48:16:21:52:3e:58:9c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d927ce7ba520307ea147c34f13287db76b930fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:ee:5b:66:cd:c0:d9:ca:b4:ea:33:bc:e8:
4f:82:e8:36:26:48:77:ce:84:2f:33:e0:05:28:88:
ba:22:d2:6d:65:33:07:be:62:51:48:26:41:c0:ff:
f5:ce:c9:ca:36:67:44:d3:6e:4c:27:83:11:21:14:
5c:e4:57:c3:05:35:b5:99:8d:64:28:94:07:11:9f:
db:b6:b9:eb:07:32:57:39:12:de:4c:a1:71:a0:f2:
ea:ed:b1:5b:25:80:39:3e:13:44:75:d3:f6:a2:cf:
4b:92:87:74:c5:99:4b:22:63:01:3a:48:d6:bd:ba:
f5:80:28:35:08:26:bc:08:6a:93:59:be:9f:b4:2c:
5b:32:b3:8e:b7:36:45:d6:1c:1f:3f:3e:12:9e:a9:
58:b2:68:f0:f2:a1:67:f9:7f:a7:c7:40:72:f6:4a:
b0:47:a3:6e:76:63:80:39:f6:b6:4b:75:22:aa:b3:
3f:81:d5:af:56:57:29:2e:06:bf:76:51:56:5b:94:
3f:92:4f:6c:d1:1e:58:2c:dd:f5:05:a8:f2:1d:9f:
cf:7a:d3:fa:90:f1:64:61:a7:8f:5f:a5:3d:56:6c:
d1:8a:b6:9e:bf:b9:12:06:c5:59:4b:fb:2b:63:ac:
f0:da:1f:76:da:90:f1:8e:20:9d:ea:0a:22:e1:e2:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:92:7C:E7:BA:52:03:07:EA:14:7C:34:F1:32:87:DB:76:B9:30:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/LZJ857pSAwfqFHw08TKH23a5MP4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.205.0/24
IPv6:
2a11:71c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:14:98:ba:2f:67:21:4e:0f:46:79:08:27:aa:bd:18:d1:e5:
ff:05:ca:1f:4a:00:ac:dc:77:9f:83:55:e6:5a:10:e9:b7:b3:
a8:c1:ea:01:77:bd:a4:8d:e0:a6:4f:50:84:7c:19:97:30:f4:
93:38:ec:74:04:60:0f:7e:b0:a3:73:76:0b:6f:8d:75:46:6d:
b8:67:92:16:4c:f4:f4:49:c1:42:8a:7e:db:d7:b2:68:ad:af:
dd:ca:b2:f2:38:d0:77:3f:08:56:21:b6:6a:66:73:dd:9c:92:
9e:b5:0e:f9:d9:aa:0a:53:f3:d9:f5:33:fa:00:c3:99:17:80:
f2:e0:09:c8:1a:35:b5:79:3b:87:74:f0:2a:62:1b:99:d0:f7:
d0:fe:90:20:b5:ad:44:de:a9:f5:ff:44:c3:1a:78:1d:7d:2d:
bc:8f:6b:77:16:87:18:60:e9:05:d4:76:a3:75:83:83:95:a2:
6c:94:83:e6:99:fb:e5:6b:5c:08:9e:7e:a1:d5:49:e0:29:ff:
97:ac:f2:a9:80:02:c3:6a:7a:57:84:88:96:9f:71:56:79:7d:
0f:67:35:d2:2c:3e:24:6f:9c:35:2c:50:0d:a0:d6:c3:e9:b8:
ef:df:c5:ab:63:1d:d1:0c:c8:8a:4c:9a:01:b5:89:87:6b:93:
ea:49:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:39 2024 by rpki-client on console-ams.rpki-client.org