Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
File: gijzXzqHKY2z0GmVqcbARXIRIrI.cer (raw, json)
Hash identifier: TQ3HsjBFdQalNiS21Ce2SN0qZbanVmxn4cruoH+GM4E=
Subject key identifier: 82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197F954C5B42F95EF74CAB40A06322F1AF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
caRepository: rsync://0.sb/repo/sb/34/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Fri 11 Jul 2025 11:52:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0d:a040::/29
Validation: Failed, certificate revoked on Fri 11 Jul 2025 12:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:54:c5:b4:2f:95:ef:74:ca:b4:0a:06:32:2f:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 11 11:52:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8228f35f3a87298db3d06995a9c6c045721122b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:5d:bc:19:50:18:0f:4b:7d:d1:c5:f9:50:
96:8e:b9:a9:fb:d6:17:7f:ba:cc:b9:99:4a:49:52:
ec:1f:96:c3:4d:9a:f1:7c:ea:4e:d1:d7:cc:f3:3b:
71:01:0b:73:42:a4:1f:e3:03:88:85:69:12:9f:10:
b3:02:0b:db:cd:f4:1f:e5:d3:0d:89:8d:68:5d:bc:
5b:40:77:1a:1f:64:39:f1:4d:36:6e:b2:cc:76:d3:
06:36:2c:cd:59:1b:43:b1:5c:30:33:5a:92:01:b9:
07:f2:c7:2e:4b:53:3a:86:28:f2:08:61:65:1c:b8:
71:ca:c8:3c:18:bc:81:0e:93:08:56:9a:1a:63:60:
9e:86:c6:8d:88:d7:3c:03:d1:7f:27:5f:48:fc:69:
f4:9b:2f:9c:8d:0b:1a:03:7a:0a:8d:40:8e:06:ea:
47:f0:9c:8d:3b:ae:78:a9:6c:a5:43:8e:a2:f2:0b:
5a:f7:ff:0c:d7:1f:12:3c:37:14:9e:e9:91:62:fd:
fd:a9:31:75:d0:b4:6e:a3:19:1c:2f:76:18:4c:0f:
88:2f:22:f6:e4:12:31:73:94:9c:c6:c6:5c:bf:26:
89:15:9c:be:9e:87:e7:86:07:d3:d6:96:95:43:c1:
4f:43:65:1c:02:1f:5b:54:a6:59:9f:d9:3d:9d:e6:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/34/
RPKI Manifest - URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:a040::/29
Signature Algorithm: sha256WithRSAEncryption
07:49:42:7d:52:f0:b4:9d:f4:27:b5:f0:7d:0e:c1:a4:18:4d:
3b:f8:b2:ae:eb:15:49:08:95:75:d0:29:2a:14:4c:eb:1c:aa:
7c:fe:10:24:58:9d:e5:ae:47:80:6e:b2:ac:33:e4:6c:b8:8c:
93:f2:b7:11:73:af:1c:35:46:99:64:b9:4e:47:18:1c:b4:c5:
cb:0f:21:21:fe:dc:af:57:2c:b8:db:12:38:1b:92:8e:95:40:
d5:97:14:27:4b:cc:62:57:28:eb:f6:e8:bc:c5:e0:f9:e2:c5:
8c:43:9c:77:ba:aa:8f:35:0d:aa:67:b5:46:18:81:ec:46:f7:
62:9a:f8:89:ac:12:70:7f:a9:b2:f6:cf:58:d8:7c:18:37:8f:
e5:6c:2a:f4:78:8a:5c:33:44:62:ad:65:19:65:73:f3:ec:92:
97:1f:9f:35:ee:69:0e:5d:2b:ed:c3:0a:a0:8d:e6:5c:44:00:
e3:43:e5:43:71:47:af:3b:33:9b:ff:8b:93:41:87:0e:a6:67:
61:25:dd:7a:1d:70:19:d5:3f:8d:71:62:c0:1f:24:b6:76:83:
1f:96:12:14:49:61:50:cb:40:08:1a:42:c7:18:e2:12:45:10:
c8:dd:fd:48:44:af:f5:89:04:2c:ae:ab:fe:55:34:c5:06:b7:
a6:0b:38:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:07:09 2025 by rpki-client