Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
File: BtoZ9ChesE0DEHM_SsABB7czN60.cer (raw, json)
Hash identifier: A3WcRnSza/dXNeteP6sw5y6nJuO6UXTKPRSHSoNlviI=
Subject key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CF4160743E61D5A0BA3305978B6E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.156.116.0/22
IP: 91.228.168.0/24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 08:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:f4:16:07:43:e6:1d:5a:0b:a3:30:59:78:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:b9:e8:55:24:7f:d7:84:97:2a:91:cf:b4:
75:2a:93:e1:3d:60:bd:eb:df:ef:ee:48:5a:40:5b:
e3:81:b5:93:7f:c5:dd:01:7f:8f:d7:ec:39:52:6c:
b4:e8:3e:8a:62:46:e8:b6:22:62:90:b4:74:14:33:
18:81:12:ad:e5:9c:7d:9f:80:20:30:b5:78:be:e6:
fa:be:5c:1b:35:43:f0:c7:53:99:ba:0b:dd:30:b1:
a8:b1:ee:57:da:f1:06:2f:9e:b7:ea:4e:20:3d:b8:
bf:63:b1:e7:83:7e:fb:59:89:c0:ff:07:b2:d4:4a:
65:27:4a:bb:93:46:ac:bc:54:da:11:3e:0b:ca:8d:
e1:7f:82:7f:f9:e5:0f:9d:15:f1:33:c0:aa:3f:ed:
b4:29:e4:c7:be:af:2c:e7:68:df:14:dd:27:0f:b0:
36:4c:6e:93:50:99:66:72:1b:35:84:66:5a:5b:eb:
0f:8e:e1:97:c9:c3:1c:8c:95:2b:5c:25:7a:56:f3:
90:aa:07:21:97:e6:85:50:da:4d:3b:cd:47:e0:63:
da:5d:ef:4c:d0:32:8a:1e:5e:7a:05:71:4d:90:14:
24:e3:59:0e:fb:26:25:eb:87:fe:72:9e:e2:d4:8b:
15:3a:83:ca:57:73:12:3e:d4:5d:fc:22:69:d5:ad:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/22
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ec:25:5c:35:fe:c6:2c:22:ab:f9:3c:e3:7d:29:84:6f:14:
d9:9e:f9:d6:75:13:ee:65:f1:7b:11:25:d5:b5:7f:25:3e:7e:
24:2e:18:b9:6f:7e:ed:31:4f:07:43:a7:04:b2:97:21:ce:b5:
99:c3:f3:d8:ce:6b:bb:dc:c7:cf:4a:54:c4:d2:f1:f8:4e:e2:
9d:28:2f:4e:7b:44:6a:9c:ca:d9:e0:3e:57:26:7e:91:e9:54:
2d:f1:55:57:ab:ee:53:ef:12:33:8d:6c:41:1d:4d:7d:2a:d2:
f0:fa:e3:b3:0b:71:41:7b:e3:1d:c2:05:d5:d1:c1:4b:cd:65:
65:47:5b:16:de:b6:07:f5:c5:6e:0a:8b:d0:61:3c:41:79:cf:
f3:0b:40:54:93:22:15:19:0a:c9:74:69:2b:ca:58:f0:e8:8f:
50:39:8d:74:61:c1:d9:a8:7b:f0:0a:45:64:11:dd:90:3b:01:
7e:98:92:41:a0:6d:29:19:15:0d:00:98:ac:77:1c:fc:a5:55:
38:6f:ed:fa:54:8e:e4:48:08:80:8c:5a:05:6a:19:11:f2:94:
a1:50:0c:b1:8e:ed:13:b1:e0:58:e0:6a:9d:92:f3:46:6a:30:
37:4f:09:ed:b6:7c:e1:e3:f5:e3:50:5d:f1:41:35:b8:34:2e:
42:15:3a:45
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQfjPQWB0PmHVoLozBZeLboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmRhMTlmNDI4NWViMDRkMDMxMDczM2Y0YWMwMDEwN2I3MzMzN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5+56FUkf9eElyqRz7R1KpPhPWC9
69/v7khaQFvjgbWTf8XdAX+P1+w5Umy06D6KYkbotiJikLR0FDMYgRKt5Zx9n4Ag
MLV4vub6vlwbNUPwx1OZugvdMLGose5X2vEGL5636k4gPbi/Y7Hng377WYnA/wey
1EplJ0q7k0asvFTaET4Lyo3hf4J/+eUPnRXxM8CqP+20KeTHvq8s52jfFN0nD7A2
TG6TUJlmchs1hGZaW+sPjuGXycMcjJUrXCV6VvOQqgchl+aFUNpNO81H4GPaXe9M
0DKKHl56BXFNkBQk41kO+yYl64f+cp7i1IsVOoPKV3MSPtRd/CJp1a3KpQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFAbaGfQoXrBNAxBzP0rAAQe3MzetMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzM3MGJl
NmNkLTI1ZDItNGY4Yi04OGE0LWI1MTA5ZjQ5NDYyZC8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzcw
YmU2Y2QtMjVkMi00ZjhiLTg4YTQtYjUxMDlmNDk0NjJkLzEvMDZEQTE5RjQyODVF
QjA0RDAzMTA3MzNGNEFDMDAxMDdCNzMzMzdBRC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAME
Ai2cdAMEAFvkqDANBgkqhkiG9w0BAQsFAAOCAQEAj+wlXDX+xiwiq/k8430phG8U
2Z751nUT7mXxexEl1bV/JT5+JC4YuW9+7TFPB0OnBLKXIc61mcPz2M5ru9zHz0pU
xNLx+E7inSgvTntEapzK2eA+VyZ+kelULfFVV6vuU+8SM41sQR1NfSrS8Prjswtx
QXvjHcIF1dHBS81lZUdbFt62B/XFbgqL0GE8QXnP8wtAVJMiFRkKyXRpK8pY8OiP
UDmNdGHB2ah78ApFZBHdkDsBfpiSQaBtKRkVDQCYrHcc/KVVOG/t+lSO5EgIgIxa
BWoZEfKUoVAMsY7tE7HgWOBqnZLzRmowN08J7bZ84eP141Bd8UE1uDQuQhU6RQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:54:51 2025 by rpki-client