Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
File: DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer (raw, json)
Hash identifier: cpghj3GktQCV+9RABXSynldhrVJRE4MKGYbfBcqThCw=
Subject key identifier: 0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CA693E528A649FCF8A7E25766747C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.8.46.0/24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 09:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a6:93:e5:28:a6:49:fc:f8:a7:e2:57:66:74:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:56:37:38:50:fe:f4:03:e7:d9:3c:67:fc:
66:fd:b9:07:6e:ef:20:34:fd:66:2a:81:01:45:ee:
91:71:a9:a5:b3:02:68:49:34:39:47:57:26:6f:45:
08:91:3f:77:89:63:89:21:44:b1:a2:9a:29:e8:e0:
ab:83:fd:39:13:2d:d4:ac:72:c1:42:7f:dd:49:ad:
60:00:11:58:df:a8:78:83:69:26:08:17:87:0d:86:
08:2c:d6:a3:96:7f:47:38:5c:b8:6a:0f:d9:91:10:
76:9e:8b:34:2c:75:94:6e:05:a6:6c:5d:ee:a4:61:
11:04:e9:de:4e:50:51:86:3d:b8:43:e2:f2:07:0c:
40:de:84:c4:5f:f7:0f:bf:9d:05:3c:22:92:fa:7c:
26:7e:aa:4c:0d:fd:f0:a2:e3:0b:cc:ed:8a:9d:71:
64:b9:8a:20:d8:5f:75:74:11:21:1b:4d:da:0f:fd:
9a:77:aa:e7:12:38:c6:45:e8:46:f2:33:25:d9:71:
47:45:f5:80:3e:36:e2:00:38:5e:78:9b:b7:2f:38:
85:5a:fe:d5:d5:4d:e0:74:c7:de:fd:b5:1b:14:ef:
8c:75:60:39:b1:d5:98:1e:61:c9:9f:f9:3d:63:69:
6c:42:e5:45:c6:7d:f9:91:9d:de:78:06:49:51:dd:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:61:27:a1:4e:0a:70:e9:19:1e:0e:26:d4:e7:13:2b:41:9e:
32:dd:8c:6b:2f:31:8c:41:74:8a:a0:21:df:44:01:33:7f:cc:
06:12:8a:34:4e:b5:dd:83:ce:60:71:ea:2d:01:1d:6c:77:58:
80:49:f3:43:5a:f4:26:78:9f:b1:a4:0b:13:55:41:a7:8d:83:
74:24:e2:e2:b1:93:17:8f:96:08:43:ed:ed:0c:da:6e:e5:4d:
cd:26:6d:91:e1:9c:f9:68:a5:12:ae:7d:dc:31:ad:c0:76:09:
82:7c:ed:d3:a4:2e:32:0f:62:e1:11:f8:67:32:ab:f6:52:25:
03:ea:4d:22:81:63:7b:e2:21:a1:24:28:d3:c8:1a:93:30:bc:
e6:3d:54:2f:65:7a:48:91:41:77:94:6c:ec:b6:b6:f4:8d:f7:
d1:a6:63:5e:34:75:bd:2f:92:ca:44:5f:b5:0c:3a:d2:91:ff:
84:13:87:21:b1:56:d7:f4:b6:d7:de:ca:c0:e8:53:2b:1d:84:
8f:fd:b7:fd:62:09:36:65:37:7f:fe:56:3c:a8:b0:49:4f:85:
5d:3e:4e:ad:9a:c5:88:11:28:87:d4:1c:e2:7e:bb:9c:97:cd:
3e:c0:f9:87:81:a9:53:86:73:8a:9a:6f:db:07:49:a2:6a:90:
33:6c:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:59 2025 by rpki-client