Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
File: lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer (raw, json)
Hash identifier: 0uyB48H9UQ89Y1rLyJi1lJzqtqcoyrs6Bph3Lym/Sqg=
Subject key identifier: 94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFACCA43D0A3B3251EE6AD3DA9B1902
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.62.0/24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 08:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:cc:a4:3d:0a:3b:32:51:ee:6a:d3:da:9b:19:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94b21640a951055dfe9c09e345739cb820054dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:10:a1:87:b5:d8:c6:d0:52:47:98:c6:08:
24:98:c1:5d:d8:b6:52:77:f0:03:33:8d:ce:63:92:
ae:4e:2b:4c:85:61:99:bf:55:4f:3b:60:aa:5e:fb:
d2:83:d0:3a:18:dd:c3:1e:c6:ee:c8:5f:26:67:dc:
d9:25:ca:45:94:2f:13:6c:fa:d3:3b:18:59:0c:4e:
a7:c6:c4:b3:b5:9f:34:f1:65:bc:2b:ef:bf:e1:5d:
f1:11:39:05:dc:95:68:eb:53:8f:b8:bf:52:cb:3b:
0a:c7:6e:d0:83:09:52:d1:b9:6f:f7:58:90:07:56:
74:38:e8:b6:ec:c7:95:b4:f3:6d:70:46:71:d8:23:
af:8f:20:40:85:4b:d3:83:70:70:1e:c7:0c:87:44:
9c:7a:c9:21:e2:7f:45:80:c3:93:23:eb:e0:de:c1:
7a:cc:e3:9e:69:2c:86:5d:b9:d2:bc:17:ac:24:59:
80:4f:65:44:91:41:3c:83:56:55:fc:05:e6:04:4d:
74:e7:71:a2:85:49:41:7d:93:b0:f7:19:f5:a9:b8:
be:7e:d4:f0:3a:86:5a:5d:4c:99:e3:76:cf:c0:8c:
20:42:e7:21:21:56:9b:78:3f:ca:4f:8c:2b:25:8a:
76:dc:77:d1:ed:7f:7a:ad:91:7e:a8:62:c1:6d:15:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.62.0/24
Signature Algorithm: sha256WithRSAEncryption
15:bd:88:a9:10:c6:3b:38:53:e3:48:7f:50:c0:e2:da:c1:09:
e8:87:a7:b8:0b:0a:00:10:9c:6f:82:a0:86:bb:c2:b3:ed:36:
a1:f8:ee:bb:dc:c3:93:ed:97:7a:d3:77:ed:d1:f9:39:ca:e6:
7e:50:1f:80:bb:e9:73:5b:b3:d2:1f:95:1a:6b:e7:48:56:81:
31:41:9e:37:55:39:35:66:71:7e:7a:54:23:49:4f:cd:f6:ab:
b9:17:c8:ff:c5:73:b6:37:be:d5:bc:e0:9b:f9:82:53:20:1e:
09:e6:5b:0c:53:45:e1:63:e0:c1:b3:5b:ad:af:3e:a9:7d:2f:
e0:d1:d6:01:b8:19:72:b6:e7:b2:a3:3f:ca:e1:c5:be:47:bc:
af:c8:19:eb:d0:47:97:76:e1:3f:b8:8b:d3:ca:e6:b1:97:94:
a8:79:6d:9b:67:f9:2d:b2:ba:74:0b:c0:45:1a:b3:95:11:ca:
f1:bc:80:a2:73:fd:a8:c9:17:86:67:a4:1f:0d:22:4c:dd:a7:
f6:52:09:b3:9f:8a:61:43:49:3a:9d:f1:f7:05:f9:f4:9c:c1:
62:31:44:cc:c4:18:40:9d:1b:44:92:23:05:45:d0:e1:22:dd:
2d:19:85:99:c3:e0:61:1f:84:8e:84:94:b2:bd:59:c9:97:8c:
9b:36:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:04 2024 by rpki-client on console-ams.rpki-client.org