Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6dYVh9b9fIFrcQFNc9OXiDzeKro.cer
File: 6dYVh9b9fIFrcQFNc9OXiDzeKro.cer (raw, json)
Hash identifier: ELUkq5z0h5X3k0D57eQi8V75+VriS6PiYeS732VVpvg=
Subject key identifier: E9:D6:15:87:D6:FD:7C:81:6B:71:01:4D:73:D3:97:88:3C:DE:2A:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCCC46B6FE3EBC5E53DE337AC478F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/6dYVh9b9fIFrcQFNc9OXiDzeKro.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61981
IP: 185.53.4.0/22
IP: 2a01:bda0::/32
Validation: Failed, certificate revoked on Thu 14 Nov 2024 12:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:cc:46:b6:fe:3e:bc:5e:53:de:33:7a:c4:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9d61587d6fd7c816b71014d73d397883cde2aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:37:ce:b5:9b:55:cd:ac:c9:28:c5:6c:c9:25:
4d:46:04:89:d3:bc:73:94:c2:21:a0:00:32:0d:84:
cf:49:58:56:60:36:6b:04:ee:ea:88:90:86:ad:dc:
9e:6a:7d:58:a0:55:0c:34:b3:34:64:d9:2d:12:a8:
c1:52:10:0c:4f:a6:a5:68:f6:8e:31:04:f5:bf:0c:
a8:7e:91:2f:2d:0f:41:e7:1d:a0:c0:c2:fe:aa:f4:
19:67:fe:ed:fa:fe:1c:f4:bc:d3:6b:f1:de:ba:dc:
3f:5d:4f:83:b2:5c:e0:5a:ec:f2:e6:0b:1d:14:44:
ab:3f:f7:f2:bf:06:96:e7:df:10:55:6b:af:50:81:
80:d6:24:f1:75:3f:ad:5e:c4:6c:b8:6a:c3:e7:92:
b9:98:9b:cf:40:a9:ec:ee:ec:40:f9:c1:05:c9:e2:
60:4a:bd:b5:cc:e6:c0:29:7c:c5:64:9a:53:a7:89:
4f:b8:f9:87:67:55:a6:59:fa:7b:60:f8:12:34:af:
21:83:67:ca:d5:a1:15:06:8d:4e:76:54:ff:81:b2:
9c:84:35:c1:d1:13:78:0e:e9:a0:79:db:62:ce:f5:
4c:ea:e5:b1:35:98:e8:20:7d:34:c6:7a:fd:76:bb:
91:1b:40:ad:1f:d1:69:69:06:65:52:47:4f:63:cc:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D6:15:87:D6:FD:7C:81:6B:71:01:4D:73:D3:97:88:3C:DE:2A:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/6dYVh9b9fIFrcQFNc9OXiDzeKro.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.4.0/22
IPv6:
2a01:bda0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61981
Signature Algorithm: sha256WithRSAEncryption
5c:04:40:5e:3b:cb:09:9f:b5:53:30:8b:8e:40:da:aa:67:c7:
9b:ad:48:8f:68:16:41:9e:90:51:19:86:4e:46:ab:bc:cd:ad:
83:0f:e1:09:d3:5f:5e:90:a7:78:6e:8d:d6:04:d3:4a:87:d9:
32:1c:a1:38:41:ab:f3:5c:62:bd:ab:2d:01:8e:14:1f:07:29:
91:dd:54:34:75:fb:9c:00:d4:56:1b:8b:a1:44:7c:ed:bb:fe:
d7:e9:92:63:ee:2f:59:fb:cf:00:33:65:01:5e:8a:27:31:72:
e5:25:fb:4d:c8:e9:f9:8c:e5:08:63:b7:d6:1b:52:1b:22:38:
4b:31:da:da:94:c6:2a:7f:1e:a0:f5:f2:f7:c8:bf:1a:a1:88:
0a:e1:30:4b:52:b0:d7:94:17:7a:c2:52:9f:df:89:1c:ed:05:
61:87:41:d2:09:06:cf:0f:c0:ed:8d:d1:1d:95:2b:e9:27:29:
dc:78:2d:bb:9e:09:0c:d3:0f:f0:82:db:02:c4:fb:64:f2:7d:
f2:f1:ca:52:50:3f:97:61:e5:dd:d8:f5:22:f7:c0:2e:17:f1:
13:f5:e3:1d:a2:b0:0a:55:85:99:a9:cb:f6:21:67:b1:f2:5f:
e2:e1:ce:bb:cb:47:ee:82:24:96:f2:81:ae:8f:0c:55:95:0d:
00:7f:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:38:14 2025 by rpki-client