Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GKp1ajfUz8vBciugRAMZtHpjclU.cer
File: GKp1ajfUz8vBciugRAMZtHpjclU.cer (raw, json)
Hash identifier: l/u8yhol8oaKEFDAQkltRL79UzxPSplmHvi91vHVp1k=
Subject key identifier: 18:AA:75:6A:37:D4:CF:CB:C1:72:2B:A0:44:03:19:B4:7A:63:72:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5002214C422EFA7CB0938BA53A8094B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/7d0f19-503e-4e77-b5c8-adf618581325/1/GKp1ajfUz8vBciugRAMZtHpjclU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/7d0f19-503e-4e77-b5c8-adf618581325/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.145.54.0/24
IP: 2a12:31c0::/29
Validation: Failed, certificate revoked on Fri 26 Apr 2024 08:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:22:14:c4:22:ef:a7:cb:09:38:ba:53:a8:09:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18aa756a37d4cfcbc1722ba0440319b47a637255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:8e:1f:6b:ef:60:fb:07:d7:94:a7:0b:33:
e5:68:74:4b:06:94:36:af:d1:0a:9e:f5:29:ca:fe:
da:db:f8:a3:c7:0a:b3:d3:2d:af:d7:5f:32:92:41:
0d:09:f7:af:7c:ea:4c:e3:07:bd:af:e8:d1:5e:11:
73:3d:92:7b:1f:b9:36:0c:a0:84:37:17:45:a3:9c:
e5:66:46:e4:2d:50:8a:9d:b5:5b:9f:88:fb:ea:20:
a0:0a:ac:49:79:4e:09:ea:17:73:a5:a6:76:a0:10:
06:38:cb:12:cf:2d:fb:62:36:76:d7:ce:32:2e:84:
34:c5:36:6f:ce:97:82:d1:ab:54:84:cf:73:42:d3:
a6:75:9f:cb:99:3f:c4:6e:42:f3:ee:01:65:c7:46:
b2:0b:82:78:cf:50:21:9d:76:8d:40:de:d9:14:df:
e7:a9:71:89:24:50:59:c4:69:0b:c8:3f:86:07:e8:
d9:07:23:3c:88:bc:a6:d2:6b:93:03:e9:21:b4:eb:
ff:32:26:33:71:3e:3d:20:f9:38:37:e7:42:0d:b0:
93:3f:04:b8:57:cf:8e:fa:16:c4:a2:83:08:3f:14:
98:0e:af:6a:0e:86:1d:fd:02:3d:c6:78:0d:24:8d:
85:0c:60:54:d0:af:fe:f5:09:49:bc:b9:db:9d:f5:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:75:6A:37:D4:CF:CB:C1:72:2B:A0:44:03:19:B4:7A:63:72:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7d0f19-503e-4e77-b5c8-adf618581325/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7d0f19-503e-4e77-b5c8-adf618581325/1/GKp1ajfUz8vBciugRAMZtHpjclU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.54.0/24
IPv6:
2a12:31c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:68:7b:78:05:4c:bf:a3:e8:e8:29:ad:b3:7a:51:52:d1:1c:
b2:67:15:26:de:98:a9:9a:3f:71:1e:b5:7e:62:b7:70:42:3b:
e5:3d:16:94:86:75:61:f4:5a:ca:95:a3:17:bc:0d:58:9b:3c:
93:a2:52:ed:94:7c:b7:cf:14:22:42:ea:96:75:5d:0b:4a:c1:
d3:6f:ec:94:c9:ff:f8:6f:d1:4c:df:77:95:8b:34:26:14:2e:
75:7b:c3:af:d6:2d:3d:fc:37:50:43:0e:c3:5b:6e:fa:c9:03:
0e:a0:eb:7d:0d:b1:31:18:d7:96:45:66:69:33:df:20:f4:a5:
d0:48:b3:94:44:ba:f7:80:b2:10:5f:33:d1:4a:9d:f9:60:e0:
72:49:b5:17:f1:d3:c9:c9:d0:26:1a:2c:40:bf:77:88:d9:a3:
8f:f6:55:32:8b:16:8c:2e:41:75:e8:42:12:37:5c:e5:73:0f:
db:7d:09:0e:9c:65:1e:0d:d0:44:16:4b:9a:4f:5a:62:a2:a0:
be:b2:eb:4a:46:c5:44:89:e9:51:22:78:81:7a:47:ca:44:e4:
07:24:8a:d9:b3:8c:49:0b:57:47:2c:82:d8:24:af:b7:1d:2a:
36:02:f5:6e:4d:25:2f:ac:ae:c2:d2:71:91:93:32:56:a8:3c:
fc:ec:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:32:23 2025 by rpki-client