Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M1Fmj1Y2kAwouaSrf624vxmWYQ0.cer
File: M1Fmj1Y2kAwouaSrf624vxmWYQ0.cer (raw, json)
Hash identifier: GpkI3m70W1Ys+9CyVC8YH5KrAT8Xl0I6JLQ+uw/shp4=
Subject key identifier: 33:51:66:8F:56:36:90:0C:28:B9:A4:AB:7F:AD:B8:BF:19:96:61:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CF1CF374C97D89A334FB10D482CA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/30ee61-fa50-4bf1-8efa-4b1f5962e68c/1/M1Fmj1Y2kAwouaSrf624vxmWYQ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/30ee61-fa50-4bf1-8efa-4b1f5962e68c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.228.129.0/24
IP: 2a12:8580::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 11:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f1:cf:37:4c:97:d8:9a:33:4f:b1:0d:48:2c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3351668f5636900c28b9a4ab7fadb8bf1996610d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1e:76:c6:2f:0a:70:c5:01:9f:6d:64:de:58:
a4:85:f2:df:2d:21:47:c7:a3:8c:4c:a2:be:b4:dc:
ea:7f:67:15:20:2f:93:a9:af:c5:7a:d8:96:6c:37:
0b:92:25:95:a8:15:c4:54:df:df:3b:51:c6:97:08:
0e:e3:80:29:d2:61:10:2b:64:c5:37:bd:b9:68:f1:
c7:7f:42:de:bc:f7:0e:3e:fd:22:35:bf:44:23:f7:
2d:37:7e:ab:4e:2b:d3:74:5b:38:81:46:32:a6:c5:
d8:2f:bd:b0:da:c2:8f:11:7f:98:cc:20:68:84:12:
42:9f:19:6a:47:6e:68:99:a9:37:86:91:f7:7b:8f:
e9:ad:29:3d:6f:4b:8f:6e:6c:9d:b8:18:2b:a6:cf:
76:2f:b4:19:76:43:bc:e5:87:1d:17:63:cd:31:62:
3c:bb:51:07:9d:25:4f:c2:2e:68:4b:57:6a:8d:5d:
9c:15:1f:f5:f3:ba:06:bd:54:45:5f:b4:57:83:71:
76:e5:7b:e0:fa:fa:dc:02:fb:9b:6e:88:00:9c:8f:
f7:a7:2e:21:12:05:15:ce:d6:61:4d:dc:04:45:9e:
09:da:b4:9b:fb:87:54:f1:25:cb:00:05:cc:9f:ee:
73:c3:55:c4:fc:56:74:8b:5f:a0:f0:28:03:fe:e5:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:51:66:8F:56:36:90:0C:28:B9:A4:AB:7F:AD:B8:BF:19:96:61:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/30ee61-fa50-4bf1-8efa-4b1f5962e68c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/30ee61-fa50-4bf1-8efa-4b1f5962e68c/1/M1Fmj1Y2kAwouaSrf624vxmWYQ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.129.0/24
IPv6:
2a12:8580::/29
Signature Algorithm: sha256WithRSAEncryption
3d:1a:ad:e2:12:b3:47:da:fc:d6:91:bb:b1:3b:7f:c7:40:7b:
c6:b6:0b:15:48:6a:24:b4:7b:0a:fd:34:a4:e3:c9:ad:fd:ae:
77:90:c2:14:77:df:02:63:c7:4e:fb:00:28:42:1b:e1:58:f2:
75:d3:68:01:0d:26:1b:db:cd:34:a8:d3:c9:f9:34:c8:07:c7:
fd:a6:7c:53:66:3c:d9:0f:b6:60:1d:66:e5:3e:63:a8:15:b7:
41:80:c8:65:29:28:06:a9:c1:7d:69:d2:6d:64:24:22:bc:2b:
35:36:3e:05:82:b7:7c:22:11:fc:8b:63:b0:c2:11:1a:cb:45:
0d:89:8e:1d:ec:da:21:a5:a9:45:17:e0:08:8a:d0:8a:62:e8:
8a:df:57:e0:11:34:5a:52:fb:5f:d7:19:e5:85:b9:ac:a9:de:
6f:fe:40:b7:0a:e8:d5:bb:57:7d:67:9c:8d:be:17:1e:40:0b:
3b:ce:8f:c4:af:f8:17:60:c1:23:6a:a4:95:f6:ac:68:1d:2a:
37:aa:61:30:f1:50:83:67:18:31:d7:d7:e0:75:e3:31:59:fc:
47:c8:9a:f3:85:d4:e6:04:0d:f7:f3:c9:6e:a3:32:6f:32:b1:
1a:41:12:45:ad:96:bd:68:bb:da:65:a3:88:b4:a0:b6:aa:e5:
31:e5:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:29:33 2025 by rpki-client