Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LKPMyS_fO9P5iBJqV4aWNWkwYVc.cer
File: LKPMyS_fO9P5iBJqV4aWNWkwYVc.cer (raw, json)
Hash identifier: kb/dODptEKMkjaGInQLO5TDd6U/tM0JFGOGmWWzaTg4=
Subject key identifier: 2C:A3:CC:C9:2F:DF:3B:D3:F9:88:12:6A:57:86:96:35:69:30:61:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAE83A46E7F24862D145F4C408FFF4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/85d5f3-49b0-4eab-b85f-aca2a26e045a/1/LKPMyS_fO9P5iBJqV4aWNWkwYVc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/85d5f3-49b0-4eab-b85f-aca2a26e045a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:06 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.56.59.0/24
IP: 193.56.61.0/24
IP: 193.56.107.0/24
IP: 193.56.118.0/24
IP: 2a05:cac0::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:ae:83:a4:6e:7f:24:86:2d:14:5f:4c:40:8f:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ca3ccc92fdf3bd3f988126a5786963569306157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:6b:84:74:7e:de:92:0d:54:98:c0:78:77:
fd:b0:84:00:23:91:bc:6f:4a:91:cc:a2:12:bc:b0:
65:a3:62:7d:d9:02:8a:b7:b3:1d:42:4e:4b:57:8d:
b9:61:54:5a:11:80:2a:66:63:82:75:70:b4:fa:78:
a1:05:0c:f1:5b:30:0f:77:4a:93:c8:6d:97:58:15:
96:25:df:5d:f5:eb:ae:4a:83:52:15:7e:b8:53:6c:
6b:0b:52:a9:cb:f2:80:81:eb:0f:8e:11:71:0c:22:
cf:64:42:ee:05:9c:c5:70:6c:a2:5a:b2:2b:3b:68:
02:50:56:f0:14:b5:65:11:c4:bf:7f:36:d8:6f:38:
75:f6:53:93:77:48:fa:f2:3f:22:72:40:7d:c5:6e:
2c:00:d0:9b:4b:3b:2c:bb:b3:b6:02:dc:69:d2:a0:
9d:3c:25:45:47:96:e0:38:df:77:d0:e4:1b:87:18:
f8:fb:33:a8:92:cb:ff:ba:41:94:03:14:58:a3:f5:
3c:eb:c3:83:56:18:bc:99:06:e3:59:4f:66:c1:cd:
d9:0e:49:60:8b:aa:5e:31:55:a1:eb:dc:b9:87:6c:
c6:10:70:4c:c6:02:6c:b2:b5:c0:b0:02:a2:1b:06:
0f:3f:9f:1c:01:16:b8:96:44:43:d8:fb:ea:54:40:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A3:CC:C9:2F:DF:3B:D3:F9:88:12:6A:57:86:96:35:69:30:61:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/85d5f3-49b0-4eab-b85f-aca2a26e045a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/85d5f3-49b0-4eab-b85f-aca2a26e045a/1/LKPMyS_fO9P5iBJqV4aWNWkwYVc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.59.0/24
193.56.61.0/24
193.56.107.0/24
193.56.118.0/24
IPv6:
2a05:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:d8:a1:4c:57:1c:fc:40:fd:62:45:57:18:b2:e0:ca:39:65:
f8:f8:ef:a2:cc:07:5e:ed:56:de:1f:38:84:8a:f0:cc:ea:e5:
89:0d:1a:f5:b0:17:24:87:7e:b4:5d:96:46:92:7b:6c:f1:74:
95:51:dd:1e:75:7f:05:eb:40:02:e0:0d:9c:47:91:bf:2b:92:
f6:b6:b3:c4:c8:2e:60:be:0c:af:0b:53:e3:12:3d:3f:1f:96:
db:8d:4b:ca:7e:14:80:15:be:1d:e9:39:6a:d2:c6:6a:26:47:
8d:02:7f:9b:b2:49:5f:25:1e:f7:e7:e5:3e:c3:9a:62:d4:20:
3b:21:dd:86:ad:ef:c0:12:5a:2d:75:4c:05:ad:97:f0:9f:d9:
52:fb:a5:97:97:6c:1d:ee:f2:48:e5:3b:96:2b:71:e5:81:9a:
9a:52:7e:aa:ce:c9:dc:3d:cc:fd:a4:df:08:0f:29:01:d6:a8:
6d:57:c1:45:19:a5:99:27:65:7f:a9:f4:47:5a:f0:32:de:70:
54:2d:33:93:97:89:50:08:bd:29:3a:26:11:18:37:b2:1d:0b:
44:f3:53:37:1e:a0:af:35:bb:91:b9:87:38:05:e4:af:81:08:
c6:55:8f:70:dd:54:8c:73:65:d7:86:99:af:22:e0:cf:a3:3e:
dd:86:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net