Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
File: 3f3F4pPp59caluYcPb9oWF1PgwU.cer (raw, json)
Hash identifier: W99feba1yFhFRrphtlT12jPQ+bjNl5qMYP4mKj6BLpU=
Subject key identifier: DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236957475CF1A0F420DB107312950DA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.247.194.0/24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 13:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:57:47:5c:f1:a0:f4:20:db:10:73:12:95:0d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:1d:be:bb:5e:72:44:ca:cc:e5:6f:17:30:
3b:8d:dc:9e:d3:83:dc:e1:74:91:f7:a2:30:2e:02:
3a:12:e8:65:05:a5:87:29:93:58:0f:e7:20:16:d9:
de:32:55:8e:32:41:8f:99:7e:c5:f3:de:b5:84:91:
16:bf:c7:24:0b:d4:64:ef:74:2a:9f:f7:cd:e1:dc:
26:3b:5a:57:74:f5:a5:a4:ed:10:de:e7:b8:02:7b:
b0:4e:c0:67:b8:c8:ad:90:0a:61:85:cb:09:34:71:
09:f4:4e:6b:2b:4e:21:89:2a:62:c8:9e:f2:13:f6:
d8:3b:26:7b:a5:f2:c1:57:29:96:71:b2:d0:1a:17:
4c:9b:7d:7e:70:99:d0:bd:e0:56:90:63:bf:12:b8:
71:85:04:ec:46:a7:17:95:e2:72:6b:2f:37:23:91:
99:8c:f7:4e:c8:89:ab:3e:67:b3:dc:07:98:86:82:
ee:23:bf:f4:5d:c6:a3:7f:f9:3e:42:74:0e:e4:27:
40:a8:44:c6:c2:90:c5:59:ca:c4:e7:dd:3c:d9:f9:
3a:49:6a:27:13:2e:05:39:be:ba:85:b5:cd:3e:c8:
0f:cb:fb:54:df:0d:21:fc:46:17:b4:1c:8d:45:3c:
4f:2f:c6:ad:81:d6:6f:a5:9e:c1:2f:de:d6:56:43:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.194.0/24
Signature Algorithm: sha256WithRSAEncryption
22:98:fb:17:c2:3e:9c:34:cc:ae:5c:c0:13:2f:37:cb:4d:04:
2e:52:d3:c0:a5:86:f9:e4:28:b8:07:21:1e:54:91:d8:a6:4e:
d4:0e:4f:70:49:19:c0:9f:6c:2c:d4:62:99:23:1b:9d:08:da:
2a:c5:29:cf:46:99:8c:a2:3f:46:6b:2a:54:54:af:dd:f1:cd:
11:4d:1a:7d:b3:03:82:54:bb:e8:f7:b2:25:44:2c:54:e0:88:
1f:6a:0a:af:8d:a5:5a:9a:63:8c:75:b9:80:b4:89:73:86:eb:
c0:21:7f:78:b6:f5:87:91:9c:e0:fd:39:44:8c:52:04:df:3d:
39:84:63:4f:61:e0:f7:68:1d:b3:97:f5:57:67:1b:b3:49:ce:
7b:61:55:30:67:1c:b5:26:3d:86:27:82:c6:7b:45:12:af:e7:
87:17:33:c1:f9:22:90:cd:db:a8:7a:95:f3:4f:06:8d:82:ff:
42:09:a5:71:49:c0:16:3e:b1:28:fc:7e:8f:a6:bc:ba:78:9a:
45:30:c8:c4:c4:b5:06:9b:93:64:48:c6:7a:2c:63:a8:32:6f:
61:85:62:ce:00:f3:19:54:0a:66:52:cb:4f:83:f7:5a:35:dc:
34:35:3b:38:2a:dd:85:eb:9d:66:2b:47:f8:af:d3:af:45:ed:
2a:70:d7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:18 2025 by rpki-client