
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNOBziQjEGGBXzIEPGUiZq272GU.cer
File: CNOBziQjEGGBXzIEPGUiZq272GU.cer (raw, json)
Hash identifier: rr+N1INuQztCX1GP1hGGVfcmtzxhPrBZqkN+omc57UA=
Subject key identifier: 08:D3:81:CE:24:23:10:61:81:5F:32:04:3C:65:22:66:AD:BB:D8:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D64530166F5777CA63ECEBE35AAB60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/CNOBziQjEGGBXzIEPGUiZq272GU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.117.104.0/21
Validation: Failed, certificate revoked on Thu 09 Jan 2025 10:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:45:30:16:6f:57:77:ca:63:ec:eb:e3:5a:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08d381ce24231061815f32043c652266adbbd865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:91:5f:91:6d:ff:01:37:e0:8f:3f:d5:20:
4f:7a:be:d6:e2:61:e9:c1:fd:2a:ab:6e:54:64:5a:
1d:ab:85:c9:40:91:04:be:3c:0e:68:b8:90:5b:e0:
8a:b6:ba:b1:d6:96:6f:13:f1:c9:4e:98:09:82:0a:
06:64:0b:64:44:cf:44:42:bc:9f:cc:78:ab:66:3e:
a5:b5:8c:c6:ab:9d:71:79:9c:b8:e2:a5:4d:73:50:
a8:ce:a1:93:7e:e4:30:f2:6f:a7:9d:4e:46:cc:d8:
75:fa:2d:71:0f:1e:c2:7d:a4:90:ca:83:2b:e8:fc:
72:57:f4:1d:eb:a7:c8:4f:26:8f:c1:19:18:2d:ba:
60:78:f8:e4:b3:b3:4e:f8:c1:a2:3c:ae:ff:6a:b1:
2d:b8:28:3b:eb:0c:89:ce:97:fc:cc:b7:b6:43:60:
5b:84:4a:0e:64:31:e8:96:d6:5c:7c:f5:82:00:94:
9f:7a:25:88:12:28:43:78:bd:68:53:f6:ed:d7:e7:
63:2b:bd:79:2b:e9:ea:5a:1a:9f:a4:7f:53:dd:20:
18:22:df:c8:fb:b1:87:f9:1a:8e:fd:2b:a6:e5:8c:
91:49:c7:42:ce:4f:63:da:31:27:7c:11:82:f0:5e:
d7:89:cc:bd:4a:51:cd:c1:e8:52:45:18:1c:33:9a:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:81:CE:24:23:10:61:81:5F:32:04:3C:65:22:66:AD:BB:D8:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/CNOBziQjEGGBXzIEPGUiZq272GU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.104.0/21
Signature Algorithm: sha256WithRSAEncryption
48:a9:c0:dc:f7:cb:af:3f:76:11:69:c1:40:9f:9d:23:ac:8d:
e0:a9:9b:f1:de:be:0e:5a:e8:d4:b1:55:6e:a3:e8:f5:14:bc:
a0:a4:a1:c3:0e:b8:5c:54:63:c0:46:28:af:2a:66:62:67:46:
62:ed:bd:90:0c:0b:84:fa:41:35:ba:85:65:ef:28:ad:03:62:
71:ba:32:6a:a0:b3:e5:b2:03:99:27:d2:45:dc:4d:2d:6c:4f:
c7:38:a3:39:f4:e6:01:29:56:a3:53:6d:52:d1:cb:11:a3:1c:
53:58:54:1b:7a:37:8c:c9:83:49:71:8b:da:39:2c:c2:2f:31:
69:8a:42:86:40:8f:1c:8e:03:e2:0b:17:9f:42:ce:db:e8:27:
f5:f2:0c:04:9c:f1:bd:30:59:04:ce:41:61:4a:97:6c:77:43:
ab:d2:83:e9:f6:74:73:71:a7:7e:3c:73:5d:12:f8:9c:d0:1e:
80:f1:66:f5:10:a8:58:7a:b0:de:b8:08:04:68:f2:f2:5e:0f:
0f:b7:2e:27:e6:b0:43:1e:e5:6a:6e:4c:6b:35:74:bb:14:ba:
03:89:1b:83:67:d3:5a:6c:24:d9:66:ec:e8:09:8c:2c:1c:bb:
48:6c:70:1e:81:ac:76:b5:33:b3:82:5a:7b:b6:58:36:3a:d0:
69:f5:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:19:12 2025 by rpki-client