Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer
File: lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer (raw, json)
Hash identifier: YvHEtCTltyqM2JjK7nkUPUhEXLi65Wvhn/6ym/xm69s=
Subject key identifier: 96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D681BCA9938FC33AA8343E13A71EFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/lgv_0ND7W2jwhxc4Ug3PQihM-jg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 80.71.150.0/24
IP: 2a11:3d40::/29
Validation: Failed, certificate revoked on Tue 10 Oct 2023 05:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:81:bc:a9:93:8f:c3:3a:a8:34:3e:13:a7:1e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=960bffd0d0fb5b68f0871738520dcf42284cfa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:ea:06:94:3e:23:8e:bb:12:78:fa:70:01:
49:e7:22:0d:78:37:a8:e0:dd:12:28:52:58:bd:3b:
68:45:a4:a8:e5:61:30:67:6f:f0:f8:6b:fd:ce:a1:
85:fc:4e:bc:ad:d6:13:20:db:17:77:35:f4:45:34:
8a:33:00:f8:0e:ff:d9:a9:8f:f3:8c:3e:56:4b:29:
70:12:3c:11:9c:52:15:5d:8f:d6:a2:f6:c4:38:ff:
87:60:ec:be:29:36:2f:74:86:fd:21:24:e4:a9:21:
d3:93:48:1b:07:78:50:82:13:40:21:d3:e1:13:92:
17:18:9a:13:02:db:7e:6e:dc:4f:6f:f3:32:32:45:
7d:00:ff:7e:ff:31:ec:96:b3:6d:cc:93:7d:06:58:
91:b3:cd:e2:61:00:c9:be:47:56:fb:0d:d1:6f:4e:
53:17:74:11:99:ac:20:9b:c3:6f:2e:02:fd:25:1d:
ef:b2:07:97:17:41:dd:b1:31:fc:36:9b:5b:e9:6d:
a7:50:7c:e8:bf:c8:8a:a1:e9:01:c5:f8:c7:1b:65:
3e:87:e8:5a:89:e0:80:cd:a4:b7:0e:35:93:b4:ce:
88:64:f5:bc:f9:b1:63:42:9b:83:34:b1:f3:c0:2c:
7e:b7:ab:79:60:b1:44:c8:0f:ed:ae:f4:d7:c5:84:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/lgv_0ND7W2jwhxc4Ug3PQihM-jg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.150.0/24
IPv6:
2a11:3d40::/29
Signature Algorithm: sha256WithRSAEncryption
57:f8:c3:0b:a4:6e:bc:11:07:10:00:e1:e9:36:66:7a:d2:37:
22:7c:96:88:b6:3d:f9:1d:29:58:62:80:7d:cc:e3:2e:b0:58:
95:90:7d:ba:02:cd:c6:f9:82:04:ea:31:5c:77:2a:fa:f7:06:
c5:08:2b:e8:ac:85:5c:74:36:81:8f:3f:c6:84:fb:26:6e:66:
f6:c3:73:7a:e6:86:14:c4:75:5b:93:28:fd:85:f3:df:d3:d2:
61:bb:0b:81:10:6c:23:b3:ea:93:93:c9:dc:3c:64:8f:2d:8b:
a7:6e:06:dd:8b:b1:dc:6d:77:0a:40:2f:6b:28:e0:b7:49:4a:
a4:06:91:de:0b:5f:38:fe:f0:2b:ea:ee:92:81:f1:fb:06:f8:
e2:65:02:12:1a:a1:f3:fe:5f:6c:d8:88:c0:3b:ce:27:7c:c9:
02:81:47:6d:73:17:78:da:37:8b:07:5c:8d:c1:a2:32:fe:e3:
58:4a:b8:6b:95:21:50:5a:d8:53:d8:62:8e:72:02:34:6d:49:
8c:ff:9a:d5:bb:7c:31:26:67:c8:69:d3:54:ab:53:c1:9c:5a:
a3:0e:ae:35:13:29:e0:75:17:50:f1:4c:a9:fd:2e:a2:b9:50:
a2:ee:95:a0:e8:b3:48:39:10:7d:bc:9a:d2:30:88:ce:06:f0:
34:c0:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:08 2024 by rpki-client on console-ams.rpki-client.org