Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ll12obOwXeQkj-sctW8PG1hRu7o.cer
File: Ll12obOwXeQkj-sctW8PG1hRu7o.cer (raw, json)
Hash identifier: kJuJl26lE4Xm9qncOxGNCsvUplbkjHA98RmcMCEZwzA=
Subject key identifier: 2E:5D:76:A1:B3:B0:5D:E4:24:8F:EB:1C:B5:6F:0F:1B:58:51:BB:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185EBD3202486EA7300F896935723DD93DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/Ll12obOwXeQkj-sctW8PG1hRu7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Jan 2023 02:06:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 209.16.144.0/23
Validation: Failed, certificate revoked on Tue 21 Nov 2023 14:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:eb:d3:20:24:86:ea:73:00:f8:96:93:57:23:dd:93:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 02:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e5d76a1b3b05de4248feb1cb56f0f1b5851bbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:a2:50:ab:8b:b0:cb:06:9e:fa:69:da:a3:
6f:cb:72:1f:5f:1d:7f:43:87:73:8a:70:db:66:83:
15:78:40:97:1e:a5:df:86:13:3b:ac:7f:d5:06:1a:
6e:27:67:94:29:f6:1f:be:dd:14:7c:23:21:d3:5b:
61:a6:3e:86:86:c1:4c:91:77:c3:be:bb:25:40:c6:
2b:58:45:a1:04:d2:d9:85:70:39:91:f4:c1:ab:c8:
77:58:9d:e1:b7:e1:d5:b7:52:7c:a9:b4:69:0f:48:
a5:61:62:21:98:f8:ed:b9:74:43:6b:be:8d:ba:b6:
c3:62:30:5e:c9:18:bf:a8:97:47:db:5d:ad:d9:ef:
09:d4:1d:aa:2d:fc:91:c5:55:a9:2a:32:4b:3b:6b:
44:fd:24:4f:9e:9b:dc:c4:ae:80:41:06:b3:d9:9a:
85:5c:1e:08:2a:cf:e5:0b:0b:c4:19:54:20:8b:b6:
84:be:f0:69:58:93:26:1a:0a:7f:0e:4e:48:d3:9b:
4a:b4:5d:48:00:e9:70:99:81:77:94:f6:eb:67:5a:
3b:9e:d8:bb:fc:6b:92:04:49:b3:6d:71:da:55:ba:
41:16:83:fa:61:7e:e0:71:1f:53:f6:f5:83:50:e3:
0c:ff:3a:0b:4f:e9:fa:3c:66:8f:28:d4:59:a4:a3:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5D:76:A1:B3:B0:5D:E4:24:8F:EB:1C:B5:6F:0F:1B:58:51:BB:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/Ll12obOwXeQkj-sctW8PG1hRu7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.16.144.0/23
Signature Algorithm: sha256WithRSAEncryption
13:0f:a2:43:9e:18:08:0f:30:ad:d3:20:54:d8:db:ea:7d:1d:
da:12:81:90:3c:d2:f8:7d:2d:59:56:1a:c3:c6:8d:de:39:22:
2f:0f:85:89:46:03:4b:28:cc:db:f3:64:2d:4a:51:4f:6b:87:
a8:f0:45:8f:92:05:6e:8e:29:75:e1:f6:1b:26:52:2f:75:61:
61:0c:85:12:4a:0d:26:21:d7:7f:f3:89:2c:12:f2:07:60:11:
78:a0:8e:42:00:a5:3a:60:58:18:12:f7:62:d7:ce:d9:91:d2:
65:c1:80:87:a6:b5:95:7d:32:79:f5:d5:51:5e:1c:23:bc:81:
4c:b7:ec:f7:2d:b6:68:99:52:f2:eb:80:10:5a:77:c2:a7:1a:
2f:28:b8:12:7e:0c:df:54:ae:67:47:ab:41:9a:61:2c:2d:1e:
a4:a9:4f:98:02:8b:de:f0:d3:8b:61:be:f9:65:e9:6b:21:10:
98:48:34:6a:30:49:62:2e:fa:a3:20:59:4e:36:02:98:54:e4:
75:b4:d7:de:b9:ef:07:af:0b:7f:4e:51:7c:a4:b4:49:63:90:
10:df:3a:6c:66:27:cc:fe:00:cf:05:c6:d6:21:7f:b1:71:15:
f5:da:da:9a:87:20:ef:63:41:d1:dd:80:22:93:13:7b:d2:e9:
2e:52:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:06 2024 by rpki-client on console-fra.rpki-client.org