Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer
File: lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer (raw, json)
Hash identifier: 6zfAsh2lyqtub3NBsiH/PUzb8dQPCm00MV0020aJmMI=
Subject key identifier: 96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701C9E8EA71BC9E6CE7881458D6D1B71
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/lh_77d_l3Pd_Agbg1z8WTwzVMmg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:33:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.239.209.0/24
IP: 2a12:8b00::/29
Validation: Failed, certificate revoked on Thu 23 Nov 2023 11:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1c:9e:8e:a7:1b:c9:e6:ce:78:81:45:8d:6d:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=961ffbeddfe5dcf77f0206e0d73f164f0cd53268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5f:8e:86:11:d7:90:3b:3d:b6:ff:d2:e5:33:
3e:ad:d2:5a:5c:32:81:fd:7c:cc:d9:d8:a8:bd:72:
a0:97:82:23:e9:35:82:4a:e1:6f:8b:fe:a6:16:f0:
3c:21:90:c6:ef:4b:41:0c:07:97:d6:62:eb:e3:e3:
7f:f1:2f:a9:0b:d7:ce:37:32:f9:3f:bf:b6:ac:d4:
6b:3e:78:f9:d7:81:54:e9:20:b8:7b:92:aa:db:c5:
0b:ad:7f:8a:40:42:b2:8e:df:d3:e4:42:21:d6:6a:
aa:ce:ec:70:c5:0c:13:08:24:81:b9:46:49:2c:66:
eb:f6:d0:13:c8:02:75:86:38:7a:2e:25:32:ad:0e:
66:8a:ed:99:de:95:da:38:4e:59:e4:c8:f9:c1:d1:
41:ef:8c:cb:58:01:f4:de:82:61:24:1b:5f:39:bd:
33:8c:69:05:8f:33:67:28:54:4b:3d:e2:fa:16:e8:
4b:d1:02:ae:5f:f6:8f:78:9a:2e:c1:91:96:c4:47:
ef:c4:e5:0c:e7:fa:37:0c:ac:59:6d:1a:24:2e:e8:
02:db:6d:36:2d:21:7f:dd:b0:bf:ed:d0:32:d2:63:
16:6d:3a:df:57:91:07:9a:dd:33:7b:f8:c9:4e:cd:
1b:f7:05:71:4d:a6:9b:ba:cf:c7:e8:d1:60:54:85:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/lh_77d_l3Pd_Agbg1z8WTwzVMmg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.209.0/24
IPv6:
2a12:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
31:86:c9:9c:1b:7c:6c:b2:ad:15:a2:0c:8b:48:68:cc:65:58:
4b:12:cb:38:78:2b:14:a9:cd:c9:de:9a:15:b0:74:2a:2f:97:
0d:52:c4:15:0d:ea:9c:8e:9e:78:ec:89:17:26:20:57:38:a4:
35:1b:ce:18:76:2d:9b:dc:81:36:bc:20:31:60:10:81:cb:de:
b2:b5:29:32:f2:4e:cc:43:e9:50:d6:12:bd:c5:fd:80:1a:9e:
79:61:02:85:6f:cb:42:ad:71:e8:47:c8:17:8c:16:01:7b:e6:
3d:66:78:a1:f0:85:16:1c:12:c3:26:0a:60:88:95:9c:eb:b3:
0e:e3:c0:9e:cb:44:22:9a:2b:24:ec:3e:71:ba:f4:17:c8:32:
ac:1a:67:8c:96:e6:33:bc:50:0d:65:d0:2b:82:b5:e1:41:5c:
f6:c4:10:a4:c4:a1:71:aa:d3:ea:f3:ee:2a:4a:0d:b9:18:fd:
f6:27:3a:9a:bf:19:b7:0c:d0:9d:30:c4:16:cb:4a:0c:67:05:
c9:1f:a2:b6:0c:40:6e:b1:ae:e6:6f:59:c1:88:49:ec:77:91:
9c:14:67:b9:51:cb:42:11:78:7f:1a:08:43:94:dc:a0:c6:32:
2c:70:7c:1e:ee:07:de:35:5b:a7:58:a7:0e:5d:40:d3:f9:38:
47:98:85:42
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVwHJ6OpxvJ5s54gUWNbRtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjFmZmJlZGRmZTVkY2Y3N2YwMjA2ZTBkNzNmMTY0ZjBjZDUzMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+V+OhhHXkDs9tv/S5TM+rdJaXDKB
/XzM2diovXKgl4Ij6TWCSuFvi/6mFvA8IZDG70tBDAeX1mLr4+N/8S+pC9fONzL5
P7+2rNRrPnj514FU6SC4e5Kq28ULrX+KQEKyjt/T5EIh1mqqzuxwxQwTCCSBuUZJ
LGbr9tATyAJ1hjh6LiUyrQ5miu2Z3pXaOE5Z5Mj5wdFB74zLWAH03oJhJBtfOb0z
jGkFjzNnKFRLPeL6FuhL0QKuX/aPeJouwZGWxEfvxOUM5/o3DKxZbRokLugC2202
LSF/3bC/7dAy0mMWbTrfV5EHmt0ze/jJTs0b9wVxTaabus/H6NFgVIVmFQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJYf++3f5dz3fwIG4Nc/Fk8M1TJoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2VkNmNj
Zi05MjlhLTRlNDktOTZmYy1iNWViMDNkYmY1NTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZWQ2Y2Nm
LTkyOWEtNGU0OS05NmZjLWI1ZWIwM2RiZjU1Ni8xL2xoXzc3ZF9sM1BkX0FnYmcx
ejhXVHd6Vk1tZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwe/RMA0EAgACMAcDBQMqEosAMA0GCSqGSIb3
DQEBCwUAA4IBAQAxhsmcG3xssq0VogyLSGjMZVhLEss4eCsUqc3J3poVsHQqL5cN
UsQVDeqcjp547IkXJiBXOKQ1G84Ydi2b3IE2vCAxYBCBy96ytSky8k7MQ+lQ1hK9
xf2AGp55YQKFb8tCrXHoR8gXjBYBe+Y9Znih8IUWHBLDJgpgiJWc67MO48Cey0Qi
misk7D5xuvQXyDKsGmeMluYzvFANZdArgrXhQVz2xBCkxKFxqtPq8+4qSg25GP32
Jzqavxm3DNCdMMQWy0oMZwXJH6K2DEBusa7mb1nBiEnsd5GcFGe5UctCEXh/GghD
lNygxjIscHwe7gfeNVunWKcOXUDT+ThHmIVC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:08 2024 by rpki-client on console-ams.rpki-client.org