Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lo5TCUpiB6CmXN7sLomLLIEmeuE.cer
File: lo5TCUpiB6CmXN7sLomLLIEmeuE.cer (raw, json)
Hash identifier: 4YdvFq2HVPUGBTZMSxvDfqe+HMz35FqBOIbgyP/0SbU=
Subject key identifier: 96:8E:53:09:4A:62:07:A0:A6:5C:DE:EC:2E:89:8B:2C:81:26:7A:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF77944EB4539F49B5730F5FCB26C1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/514258-0fd0-4831-bcf6-d4d69a1d4347/1/lo5TCUpiB6CmXN7sLomLLIEmeuE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/514258-0fd0-4831-bcf6-d4d69a1d4347/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 51297
IP: 178.255.200.0/21
IP: 2a01:a440::/32
Validation: Failed, certificate revoked on Mon 20 Nov 2023 08:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:79:44:eb:45:39:f4:9b:57:30:f5:fc:b2:6c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=968e53094a6207a0a65cdeec2e898b2c81267ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:6c:d8:f8:44:2f:17:4d:62:55:8d:4d:10:
eb:40:6e:6a:d9:07:85:ab:86:99:2a:03:d5:3f:3e:
7c:c7:01:14:2b:39:41:85:95:e5:03:6d:81:aa:5d:
58:8f:3f:46:e3:a2:ab:2a:e4:b1:9a:5f:90:43:70:
52:c4:cd:8f:14:cc:c9:95:dd:c4:e0:08:2a:bb:bd:
58:70:d6:87:2b:06:35:ff:16:f0:ee:ea:1a:ad:c7:
ed:fd:dc:e3:58:1a:a4:0d:2c:c2:09:cd:85:88:66:
e1:45:35:32:db:eb:9b:97:c2:28:a4:41:7e:53:31:
7c:2a:3c:f7:10:f7:ad:90:2a:32:ee:a2:5c:7c:17:
d2:f7:22:a5:fc:7b:0f:64:9a:35:e3:f2:8a:04:f6:
08:b1:7f:2b:9d:76:6e:b6:6c:c0:ec:dd:fa:0e:9d:
de:d4:50:f1:59:81:96:65:9a:67:84:05:3b:6b:92:
b1:7b:48:2e:c7:1d:7b:9f:1d:80:f1:b2:43:4a:b9:
3b:23:04:cd:f9:7f:a5:e5:9a:c5:06:9f:23:b5:47:
44:d8:7c:8d:8e:6f:73:ac:c5:c7:fe:4d:8b:b9:bc:
7e:28:96:99:6b:7b:d3:6a:7b:7e:fe:e9:cb:2b:23:
08:3d:da:59:8a:6f:8d:a7:68:3c:f8:f6:db:04:d2:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8E:53:09:4A:62:07:A0:A6:5C:DE:EC:2E:89:8B:2C:81:26:7A:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/514258-0fd0-4831-bcf6-d4d69a1d4347/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/514258-0fd0-4831-bcf6-d4d69a1d4347/1/lo5TCUpiB6CmXN7sLomLLIEmeuE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.200.0/21
IPv6:
2a01:a440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51297
Signature Algorithm: sha256WithRSAEncryption
55:68:d3:0a:ba:b1:83:3d:e7:1d:a8:b6:6e:f3:81:13:ce:ca:
24:5e:99:cb:0b:a5:c8:af:64:d1:71:71:70:89:f3:b9:f0:f2:
a2:71:fd:2f:bb:eb:1d:22:42:6b:b9:a6:21:bd:a1:e5:f6:07:
73:67:d0:21:42:d0:d4:8e:42:b8:0b:61:08:3b:e8:ea:39:49:
44:84:6e:64:c9:e5:d4:f5:80:36:3f:9d:33:f3:fb:04:f7:64:
96:a3:52:ef:24:37:b4:4f:3c:ac:c3:62:5a:c3:e6:bd:19:b4:
56:00:7c:22:1d:20:e0:91:d9:44:77:77:67:dd:e8:f2:f7:7b:
96:f0:9e:02:73:e6:7b:f2:e1:73:41:c9:de:45:d9:f4:c6:1e:
91:2d:d3:95:80:f9:cb:9f:27:e8:d5:ae:0e:11:7e:34:17:58:
89:0e:44:32:b1:c7:ea:78:ab:10:21:b6:ad:7b:84:e9:2f:82:
80:5a:a6:93:3c:17:9b:49:94:c1:a6:df:c9:0b:86:fd:e2:6c:
d4:24:7d:f1:46:e6:e8:30:79:2c:d3:e3:83:5c:e5:e4:d4:31:
db:82:73:35:e3:5e:66:61:cf:0c:41:6e:65:9c:fb:2f:a6:04:
92:fd:67:88:9d:e4:d0:dc:7e:16:68:38:ce:4a:69:9d:be:fa:
33:aa:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:11 2024 by rpki-client on console-fra.rpki-client.org