Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lSMYKrvpBrysyVJMizwUQfrINtE.cer
File: lSMYKrvpBrysyVJMizwUQfrINtE.cer (raw, json)
Hash identifier: vKT2nSmEt64O0uVxyUkBZvHHA2lfMT1uOtfQnP/cQGw=
Subject key identifier: 95:23:18:2A:BB:E9:06:BC:AC:C9:52:4C:8B:3C:14:41:FA:C8:36:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E599810BA1711A6A40F7EB385DE5E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/lSMYKrvpBrysyVJMizwUQfrINtE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.201.31.0/24
IP: 2a12:8180::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:59:98:10:ba:17:11:a6:a4:0f:7e:b3:85:de:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9523182abbe906bcacc9524c8b3c1441fac836d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:b7:06:f7:32:29:cb:9b:d0:56:0d:88:61:
3e:f2:a6:a5:7a:d3:47:2c:11:ff:f9:c4:ec:2e:84:
2e:36:24:39:30:2a:92:be:6e:4c:e1:de:67:62:62:
7b:c1:19:98:63:df:c0:b2:81:6d:cb:bc:30:4f:7d:
f3:e4:d2:9c:51:22:47:14:33:e5:a4:a4:3b:a7:8e:
66:07:24:39:af:11:2d:89:10:d3:c6:e1:29:52:4d:
99:4e:62:f9:98:55:be:6b:5d:6a:a2:57:32:90:b6:
88:9a:2e:c8:e5:62:38:80:ab:26:62:01:ee:ab:02:
8a:fe:6c:6d:7f:cb:85:56:72:ab:99:56:60:a8:90:
7c:19:db:64:d3:d7:b1:ec:0b:cf:1c:71:2e:42:ba:
1b:d2:4d:4a:58:78:cd:f7:bc:9e:4b:bb:01:1b:0d:
52:da:75:22:c0:67:25:ba:20:97:fc:64:ea:39:48:
8a:26:da:c6:99:01:ab:db:60:df:27:6a:63:7e:a6:
c8:9b:00:a7:0d:30:77:e4:b3:cc:1c:e3:82:05:37:
2e:27:82:b8:ba:41:06:74:4b:62:b6:a1:8c:95:25:
7d:a4:9c:ce:53:f3:18:94:7c:b4:c6:90:0d:a8:74:
3c:53:93:ed:bd:f7:33:96:4b:67:dc:27:0e:e1:0a:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:18:2A:BB:E9:06:BC:AC:C9:52:4C:8B:3C:14:41:FA:C8:36:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/lSMYKrvpBrysyVJMizwUQfrINtE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.31.0/24
IPv6:
2a12:8180::/29
Signature Algorithm: sha256WithRSAEncryption
31:d2:b4:e4:90:06:ce:b1:18:61:e3:be:f4:64:a2:ac:a9:dc:
dd:af:39:07:08:57:3f:55:c0:db:04:ac:3f:94:7d:3d:6b:4a:
a7:44:a5:50:05:67:e3:ac:50:9a:78:a2:9b:31:88:4c:15:10:
21:77:e1:2a:4b:53:29:82:b7:31:c2:8b:53:a5:57:26:85:a0:
1b:04:a7:da:22:e5:78:1b:bd:b8:9c:ff:fc:f4:58:8a:e3:51:
4f:bb:95:17:77:cd:a8:62:03:ba:83:59:90:bb:58:bf:9d:8c:
fa:9b:98:f7:7a:57:c9:5a:35:89:fa:3d:41:e1:6d:37:77:f5:
bf:6c:0e:b9:b6:8c:c2:71:66:c7:8e:b4:53:2a:f3:a8:5d:ba:
df:b8:c1:59:c1:06:35:c8:ba:1a:dd:5b:9a:86:b1:33:0c:7c:
bc:35:31:b2:38:d1:fb:3e:60:54:63:c1:d4:89:e5:8c:64:f4:
21:99:7c:c9:88:d1:3c:78:0b:90:7e:ef:80:1d:7c:61:27:c6:
90:83:c7:64:9b:74:48:1a:11:a5:47:33:80:52:d5:30:df:b6:
a8:54:29:a6:14:f9:8a:d4:fd:60:ef:d1:3d:09:37:ce:44:64:
e4:86:3b:66:ef:f6:ec:5e:d1:25:3c:23:bf:37:40:1d:3e:f1:
f7:f9:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:42 2024 by rpki-client on console.sobornost.net