Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lnYhyIYXIi61J8WhUGzrYJ6jnHQ.cer
File: lnYhyIYXIi61J8WhUGzrYJ6jnHQ.cer (raw, json)
Hash identifier: BrvoYiq3odTZqF1bBPki1AATe/0ZhPIJ/w3/Q+EHh9g=
Subject key identifier: 96:76:21:C8:86:17:22:2E:B5:27:C5:A1:50:6C:EB:60:9E:A3:9C:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185CE9160FA07EBC0CC7B0C0986076FD80A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/68d8dc-ebdd-4e72-a8a2-fa1e50045d13/1/lnYhyIYXIi61J8WhUGzrYJ6jnHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/68d8dc-ebdd-4e72-a8a2-fa1e50045d13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Jan 2023 09:45:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.251.13.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:91:60:fa:07:eb:c0:cc:7b:0c:09:86:07:6f:d8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 20 09:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=967621c88617222eb527c5a1506ceb609ea39c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:3f:27:c7:2e:13:df:ce:4f:81:66:ad:18:
fd:fc:43:57:4b:5b:64:89:83:85:e2:6e:76:fe:8e:
80:70:8a:26:b0:d2:1b:e2:87:6e:60:64:2d:5f:a0:
bd:bc:ae:07:9e:03:c5:e0:4f:66:e5:4b:81:46:af:
86:eb:91:4e:a8:25:a8:2a:ff:de:44:40:66:ac:b1:
2d:d5:89:4d:4f:10:7c:51:c3:d1:b5:63:69:06:94:
92:c7:2f:09:7b:d4:15:2b:98:8b:a0:1e:77:72:ba:
f2:47:7c:44:3e:55:63:aa:02:af:21:a7:aa:a2:64:
6a:02:9e:c5:69:37:34:f9:17:97:d9:33:36:2c:2e:
bc:10:10:ea:b4:fd:44:e2:6e:76:e5:c6:2f:a0:05:
74:e0:0b:50:3c:88:43:9b:b7:b6:42:f0:fa:17:86:
1b:6e:a3:8c:bf:6f:70:da:41:99:ab:e1:f9:9b:02:
d4:cf:68:c6:e5:61:8c:55:00:2d:c6:f5:cc:61:73:
48:95:86:aa:f5:d3:aa:c5:2f:73:ba:6e:3c:e0:03:
cf:c2:5f:6f:14:61:20:63:aa:5c:bf:23:fc:88:4e:
20:93:c9:c2:31:e8:54:ab:58:a4:1f:1c:3b:a4:ca:
de:4a:fe:f3:d7:ed:11:46:3e:43:2b:cc:29:c8:6c:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:76:21:C8:86:17:22:2E:B5:27:C5:A1:50:6C:EB:60:9E:A3:9C:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/68d8dc-ebdd-4e72-a8a2-fa1e50045d13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/68d8dc-ebdd-4e72-a8a2-fa1e50045d13/1/lnYhyIYXIi61J8WhUGzrYJ6jnHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.13.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ba:b7:9c:f5:de:7e:96:9e:ba:81:31:4b:5f:19:ec:bf:c7:
a9:86:7f:40:8a:44:9e:a2:ab:2e:26:d2:c8:3f:cd:4c:23:6a:
1f:7d:42:32:b9:bd:fe:2e:b2:fc:c2:a0:c9:8f:74:31:26:dc:
45:42:9a:1c:c2:5c:d0:51:25:8d:5b:0e:97:06:15:fc:ef:34:
03:2b:20:da:7c:65:b2:1e:d4:c5:fb:7b:00:6c:92:51:9e:10:
54:fb:ef:41:51:fc:6e:47:ca:79:62:8e:d5:da:2e:12:5a:f2:
05:57:ae:47:98:80:e5:d0:ba:6f:fc:6b:5b:31:ed:6f:03:5c:
62:0f:e0:b9:e3:19:29:4e:53:e8:ae:2a:14:85:bb:c8:19:30:
81:97:47:60:05:94:af:82:b6:9c:79:49:ac:c1:81:ce:a4:de:
13:aa:84:ae:05:6a:fd:b3:2a:27:ef:0e:83:e4:86:7f:bc:06:
92:2f:13:d9:c5:e7:7c:73:45:53:9d:13:e7:4b:63:50:bd:55:
79:65:29:5a:c0:a2:58:56:df:88:13:b0:e2:13:38:21:71:f0:
10:b6:fe:de:3d:63:f8:76:d9:a7:c0:65:ac:84:f3:a0:fb:32:
c7:36:44:86:b5:88:f3:3a:18:ea:9f:be:50:cd:99:77:13:5f:
1d:84:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:01 2023 by rpki-client on console.sobornost.net