Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lqTP09bFzLqGMpsD9vKAE3MHoaU.cer
File: lqTP09bFzLqGMpsD9vKAE3MHoaU.cer (raw, json)
Hash identifier: VWgvQ5JifkP2iZJ52q2M1rtbmbWY+3hOoHgTomqN+cY=
Subject key identifier: 96:A4:CF:D3:D6:C5:CC:BA:86:32:9B:03:F6:F2:80:13:73:07:A1:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAE238D9FEB11B76D8B809C0C13453
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/lqTP09bFzLqGMpsD9vKAE3MHoaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.136.108.0/24
IP: 2a0d:1e80::/29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 07:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e2:38:d9:fe:b1:1b:76:d8:b8:09:c0:c1:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96a4cfd3d6c5ccba86329b03f6f280137307a1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9f:80:fc:c8:db:f9:1e:00:77:9f:93:9c:54:
61:97:60:43:1c:8c:ab:51:ad:27:2c:72:0f:6c:a0:
75:73:90:b6:f8:b9:b2:d9:3f:f9:7c:8e:10:80:ad:
1d:9a:7f:f1:e9:27:7c:ce:50:72:ba:82:27:d1:81:
d5:11:cb:6e:4d:50:a5:85:f0:de:f6:fa:07:c3:1a:
c9:69:6d:b3:2d:74:82:2f:ca:89:ae:7f:e7:c8:d5:
74:9c:31:b8:23:8a:e4:a2:15:6d:f0:fa:15:56:7b:
c8:22:3c:01:7e:ad:17:a4:93:9f:c4:5c:62:81:f1:
1a:63:04:93:af:cb:fd:f2:88:39:89:ec:7b:d5:63:
a4:63:8d:9d:0d:61:8f:74:da:a7:31:af:69:e6:94:
cc:62:a6:d5:a7:7a:20:5c:2d:2f:54:01:ca:ad:37:
d0:1b:04:83:a7:7e:e7:70:99:bb:ed:3b:1c:8b:6f:
7f:21:06:2c:be:fc:ec:a9:0a:b1:19:16:e0:07:47:
00:af:85:a8:16:d8:87:63:48:e1:d0:0f:66:86:01:
68:41:3f:e4:bd:da:65:f8:3a:82:e1:89:23:c5:cd:
7b:7f:cb:7c:ad:2e:5b:b1:d0:0a:2e:5e:d7:bd:13:
57:ab:d8:7b:50:00:65:01:00:11:17:cb:29:56:c4:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A4:CF:D3:D6:C5:CC:BA:86:32:9B:03:F6:F2:80:13:73:07:A1:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/lqTP09bFzLqGMpsD9vKAE3MHoaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.108.0/24
IPv6:
2a0d:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
94:41:5e:e7:f2:ee:f8:27:d1:30:2f:d9:df:62:ba:72:72:40:
6c:9e:50:10:b6:21:a3:9b:1a:a9:3b:ad:79:e7:6e:ed:c3:e2:
6b:05:7d:c3:52:50:d6:77:cd:72:fb:25:4d:38:e5:95:23:f0:
62:20:43:5f:2d:62:c6:5f:ad:2c:b8:ae:ca:27:4a:3e:20:7c:
ce:b4:13:a3:7d:0b:30:e0:06:fb:01:97:27:92:99:da:c1:e7:
63:84:a8:8f:fd:12:90:8f:16:dd:11:a1:44:16:bd:66:6e:f2:
7f:f7:80:b2:0a:6c:77:73:7c:23:42:6f:94:73:d9:bf:ae:0c:
5a:4d:6c:96:0b:a1:71:d8:33:d9:d1:3c:13:62:0e:2f:ca:c3:
50:ed:cd:86:3c:d8:c4:be:47:9a:69:c2:a5:ca:46:01:f2:0f:
2d:04:37:8f:9e:5d:b4:f1:14:b4:01:2c:6e:12:45:15:98:ff:
81:d6:94:9a:18:b0:5a:87:41:18:2a:18:e6:47:76:0f:64:71:
c5:57:f0:aa:c4:26:0f:87:bc:6f:aa:2d:22:a3:3d:4a:79:ee:
f6:cb:7c:b1:41:b7:5a:21:8f:f7:75:98:66:51:fe:73:fc:72:
60:ed:11:50:f3:17:d7:53:20:26:f8:66:fd:f7:3a:87:c2:f1:
24:30:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:11 2024 by rpki-client on console-fra.rpki-client.org