Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LwLyPuhKRbdcvElYkaunBQGzm9o.cer
File: LwLyPuhKRbdcvElYkaunBQGzm9o.cer (raw, json)
Hash identifier: KbSK9z7va6fT3p9rgLstrjoW75Su98d5qaPzaRf/xaI=
Subject key identifier: 2F:02:F2:3E:E8:4A:45:B7:5C:BC:49:58:91:AB:A7:05:01:B3:9B:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E656C7E13B1CEE3638811B40E58162C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/6788a5-d55a-4d6a-bb4f-75dcc99a97ad/1/LwLyPuhKRbdcvElYkaunBQGzm9o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/6788a5-d55a-4d6a-bb4f-75dcc99a97ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.205.58.0/24
IP: 2a11:9580::/29
Validation: Failed, certificate revoked on Mon 04 Sep 2023 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:6c:7e:13:b1:ce:e3:63:88:11:b4:0e:58:16:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f02f23ee84a45b75cbc495891aba70501b39bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f7:80:a8:38:92:93:8e:a9:4c:f6:ee:61:19:
ac:de:a5:ba:8a:45:90:16:de:d6:c2:63:6f:37:3f:
6c:05:c0:1a:6e:c0:e5:24:43:60:96:69:14:4d:34:
36:1b:98:2d:2c:a6:e6:d9:c0:2e:87:c7:49:36:78:
fb:f2:5e:18:42:d7:05:a5:c2:34:af:74:5f:3e:a0:
e2:6b:db:76:93:0f:53:a7:71:0c:c3:3d:0d:a0:42:
61:b0:55:2c:d3:66:ab:3b:96:24:df:56:64:fb:47:
aa:56:2f:82:52:1a:80:50:fc:72:58:28:30:3b:92:
b1:86:ea:82:4e:6b:2c:91:78:9a:28:e6:88:4d:59:
33:8e:49:f0:9e:89:3f:1d:ce:cd:50:5d:88:71:03:
27:ba:e1:ed:98:9c:bd:89:97:2b:9c:d9:c0:b4:8d:
a8:fd:4c:38:35:b2:33:ef:d8:90:0b:ff:88:34:55:
59:0a:d5:61:4a:24:48:61:5d:ad:6c:89:9f:f2:1d:
90:b5:dc:97:b6:b1:dc:6b:d3:4b:0c:96:fd:07:09:
32:c6:87:74:40:19:4d:36:39:62:a3:24:ac:8d:3c:
46:07:cc:f2:bb:53:96:66:ec:7c:ce:32:61:65:8b:
40:8e:a6:74:0a:99:97:e1:3c:29:29:ce:5c:7a:70:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:02:F2:3E:E8:4A:45:B7:5C:BC:49:58:91:AB:A7:05:01:B3:9B:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6788a5-d55a-4d6a-bb4f-75dcc99a97ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6788a5-d55a-4d6a-bb4f-75dcc99a97ad/1/LwLyPuhKRbdcvElYkaunBQGzm9o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.58.0/24
IPv6:
2a11:9580::/29
Signature Algorithm: sha256WithRSAEncryption
7f:b9:5d:d5:35:97:10:54:19:33:f4:4a:02:8c:35:22:f5:23:
96:42:73:46:d9:cb:81:09:c2:63:25:2e:dc:dd:9e:2e:85:67:
bc:ba:e1:98:fb:37:02:8a:a7:77:dc:8b:fe:3e:88:5e:d2:a8:
47:59:e7:bb:6e:bd:0b:d9:a4:32:66:26:c8:51:f5:1f:1c:0d:
8f:75:a4:29:79:af:03:fd:4c:e9:b8:a8:bd:28:9a:0e:b9:53:
c1:77:55:97:25:01:19:c8:00:e6:54:78:e2:8d:68:4f:24:58:
b9:0f:bf:cc:ea:22:ad:b6:03:f5:43:00:5b:d7:f3:d4:6a:db:
f6:31:56:7d:09:c8:4f:32:56:b6:14:b4:21:4e:c5:41:14:7a:
66:ce:b7:b4:85:81:23:7f:aa:51:7c:92:47:dd:6e:49:ce:00:
a6:bd:9b:c5:ea:a2:d4:6b:21:0f:f2:a5:11:08:f8:81:84:db:
d4:97:3c:e1:7b:0a:ca:fb:3e:75:30:fc:44:fb:0d:42:d1:85:
08:50:c8:d2:03:9b:c3:71:8f:0f:e0:62:89:8a:2a:bf:cb:ca:
db:c4:36:e0:06:be:84:76:aa:e2:70:b5:05:c3:19:00:ea:e3:
70:fa:46:4d:87:31:23:a1:5c:ce:19:a1:29:d4:c3:64:e2:0b:
cc:8a:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:08 2024 by rpki-client on console-fra.rpki-client.org