Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LfdGMI-dl21bH_Y2MUDsfCw1vuo.cer
File: LfdGMI-dl21bH_Y2MUDsfCw1vuo.cer (raw, json)
Hash identifier: u143TNXG7mt0r004AUSe7FI1ReCgZ83hl9FWeGn9eA8=
Subject key identifier: 2D:F7:46:30:8F:9D:97:6D:5B:1F:F6:36:31:40:EC:7C:2C:35:BE:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D8974D8BBBC69A160E1FC37FF714ED1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/LfdGMI-dl21bH_Y2MUDsfCw1vuo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.201.144.0/22
IP: 2a0a:c5c0::/29
Validation: Failed, certificate revoked on Thu 23 Mar 2023 13:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:74:d8:bb:bc:69:a1:60:e1:fc:37:ff:71:4e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2df746308f9d976d5b1ff6363140ec7c2c35beea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:3b:9e:ac:4b:c3:f8:d1:32:31:bf:e0:88:
79:21:d0:b7:74:5f:a8:dc:5d:31:26:c7:a5:ef:b9:
5d:67:1a:e7:91:94:6c:21:17:a9:06:fe:a3:cb:85:
d7:7c:e1:7c:db:ce:8c:ec:ef:ea:8e:34:16:8e:87:
59:65:a0:98:e5:5c:b8:e2:cd:65:fc:a0:b1:5f:37:
c0:a0:c8:57:20:8f:b6:42:70:81:6d:91:36:ff:f8:
d8:a4:1d:6c:43:ea:ee:4d:e9:88:35:6b:f8:60:32:
ad:a4:6c:e2:d5:cb:a9:6d:79:de:ff:8e:52:70:37:
35:9d:3c:56:3d:f6:d3:03:65:c8:0b:5a:24:52:77:
bc:4d:83:c6:aa:b3:1d:b2:66:60:d8:79:2d:2f:ed:
71:e8:eb:75:9f:e1:06:f4:ef:4c:29:c5:44:80:f9:
8a:ac:f2:c8:19:76:57:c2:3a:7f:22:4b:e8:61:0d:
a7:f4:bf:d7:29:f9:32:d2:31:e9:41:4f:7f:68:7e:
41:57:bd:cc:c3:9e:24:35:cc:40:2d:ed:d5:30:8c:
4c:b3:d8:99:f0:e7:6d:8f:03:2c:65:cc:18:8a:c5:
82:3b:25:6c:56:b1:bd:eb:c5:57:d2:77:b8:b6:ca:
26:5b:46:24:e5:5f:31:ab:5f:5f:cc:42:b2:ce:ab:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:46:30:8F:9D:97:6D:5B:1F:F6:36:31:40:EC:7C:2C:35:BE:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/LfdGMI-dl21bH_Y2MUDsfCw1vuo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.144.0/22
IPv6:
2a0a:c5c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:08:78:fc:b9:a9:3d:1e:e8:9f:4f:53:8f:1b:d6:c6:e1:15:
03:19:1c:93:5e:89:24:03:3b:e6:80:81:96:48:ed:f4:e6:e6:
72:74:a8:ac:eb:53:8e:c5:b9:6f:e3:ad:11:c6:31:36:81:f7:
20:b7:80:11:11:0f:9e:28:21:1b:18:dd:08:e4:8c:33:6b:e6:
a5:e6:a5:3a:ce:4b:68:79:34:96:d1:ee:45:dc:2e:5b:57:76:
df:3a:bb:98:46:0c:2c:2b:a2:b7:36:14:4d:ba:59:1f:bf:37:
94:2b:0f:3d:a0:aa:76:dc:5e:7e:5f:1d:97:02:fc:ed:ea:42:
f5:7d:34:15:d1:24:50:3d:ab:6b:53:ac:82:58:2f:5a:e2:43:
fa:4b:b3:c6:2a:c7:e5:be:fe:7a:0e:19:3b:24:ad:f8:a4:01:
d3:6e:f9:82:86:17:69:22:b7:29:01:d1:b1:7d:eb:56:65:6d:
08:8a:45:98:3a:52:9c:aa:d2:2c:84:e2:b8:03:9a:9e:3d:38:
82:cb:fc:c7:ba:70:cb:65:40:11:52:0a:09:1f:a8:16:f1:e9:
ae:e2:b6:34:76:ae:a3:06:e4:46:11:16:b9:e1:08:ca:75:f8:
f6:2b:58:52:5f:43:13:28:6c:c9:35:40:ca:87:f9:09:4c:16:
f7:a6:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:42 2024 by rpki-client on console-ams.rpki-client.org