![](/console.gif)
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rii7zW7stRjIvolEZSwD7t7A0f4.cer
File: Rii7zW7stRjIvolEZSwD7t7A0f4.cer (raw, json)
Hash identifier: 26J8yGeODMQV7PjKY7kumIDnq/+XplJGrvwHiL3545I=
Subject key identifier: 46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D65A5DC268F85F221495B4651F550
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.168.151.0/24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 06:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:65:a5:dc:26:8f:85:f2:21:49:5b:46:51:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4628bbcd6eecb518c8be8944652c03eedec0d1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:c4:35:b6:34:a2:9f:a9:a9:cf:7c:b9:af:
ba:56:ab:67:c8:0d:c0:0d:68:cc:7e:ef:5b:8a:72:
1d:9f:2f:9f:9d:6f:7d:37:91:43:ea:cc:7f:25:88:
fe:19:7d:58:9f:fd:7e:39:7b:6c:0a:76:a8:f6:bb:
9a:ab:d4:48:c5:39:c1:d6:ff:e3:b9:7a:26:9b:6a:
76:61:25:51:7e:f6:f3:28:cf:a1:15:dc:cd:45:43:
e3:65:1a:a9:b8:66:17:26:69:90:13:b2:1d:1d:df:
c4:2d:94:19:5e:9a:29:e6:a2:aa:fc:4b:32:99:28:
e5:3e:04:4a:64:91:45:9d:6c:45:8f:93:2c:3e:18:
53:aa:4e:4e:cf:65:a9:91:39:f3:13:99:de:e3:a5:
49:2e:5f:5b:39:b4:26:e8:e5:54:7d:44:f7:d7:67:
de:ab:f2:56:d9:2d:20:5b:e8:7a:d3:0b:d9:6e:5f:
d3:05:cc:8d:c0:af:b1:ee:a3:a8:c9:4f:d1:5d:e3:
f8:ab:eb:08:ef:13:37:48:8b:55:ab:3f:a5:db:3f:
c8:89:af:0f:09:3b:05:7e:cd:b4:73:41:6e:3b:12:
69:b3:16:60:70:15:70:bb:d3:7d:6c:0f:ef:14:92:
b8:aa:c4:82:36:05:58:cb:ce:87:95:e8:ca:03:67:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.151.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f8:ac:14:a0:c7:e2:b1:d8:12:15:09:85:a6:a3:cc:4b:09:
b7:04:45:0e:b0:a0:d1:a7:46:2e:98:de:b9:74:30:32:eb:2f:
8f:9d:cc:4d:ec:41:6f:0a:91:a4:c4:b1:da:76:97:d0:78:0b:
5d:bb:23:04:53:b6:23:63:2a:d6:d8:34:9e:3d:e7:d0:06:ea:
67:31:5d:50:c6:14:dd:4e:de:0d:14:97:3e:13:d6:eb:a5:85:
ab:b8:07:89:ce:51:12:19:dc:1f:e1:4b:94:f8:ba:4e:af:4a:
be:55:e3:9a:a7:24:4c:cb:67:4d:bf:33:7a:7a:be:7e:9e:00:
55:bd:92:b1:da:ca:14:ce:bc:9b:40:77:ba:4b:90:8d:12:b7:
70:1f:0a:27:07:45:da:f2:fe:fe:1e:49:8e:eb:d4:c8:87:e7:
c9:07:5c:cf:8f:5c:05:24:dc:35:1c:34:41:d3:d0:2f:77:24:
25:e7:90:36:1b:d3:69:44:b6:5b:3e:26:57:c4:57:67:0c:ee:
b6:ef:64:7a:02:42:cd:e1:dc:f7:da:38:a4:d9:d0:fe:6b:44:
46:ea:68:6c:d1:02:3c:9c:a9:64:65:af:c3:8a:99:d8:ae:55:
f2:a4:a1:14:db:f9:98:e3:db:bc:c8:7b:0f:f1:31:7e:99:ee:
f8:f5:00:c8
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzCbWWl3CaPhfIhSVtGUfVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjI4YmJjZDZlZWNiNTE4YzhiZTg5NDQ2NTJjMDNlZWRlYzBkMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvPENbY0op+pqc98ua+6VqtnyA3A
DWjMfu9binIdny+fnW99N5FD6sx/JYj+GX1Yn/1+OXtsCnao9ruaq9RIxTnB1v/j
uXomm2p2YSVRfvbzKM+hFdzNRUPjZRqpuGYXJmmQE7IdHd/ELZQZXpop5qKq/Esy
mSjlPgRKZJFFnWxFj5MsPhhTqk5Oz2WpkTnzE5ne46VJLl9bObQm6OVUfUT312fe
q/JW2S0gW+h60wvZbl/TBcyNwK+x7qOoyU/RXeP4q+sI7xM3SItVqz+l2z/Iia8P
CTsFfs20c0FuOxJpsxZgcBVwu9N9bA/vFJK4qsSCNgVYy86HlejKA2crpQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEYou81u7LUYyL6JRGUsA+7ewNH+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzJkMWM1
NS00MjViLTRjYjgtODE3Mi1iNDM1NDEyNzJhYmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMmQxYzU1
LTQyNWItNGNiOC04MTcyLWI0MzU0MTI3MmFiZS8xL1JpaTd6VzdzdFJqSXZvbEVa
U3dEN3Q3QTBmNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuaiXMA0GCSqGSIb3DQEBCwUAA4IBAQAx+KwU
oMfisdgSFQmFpqPMSwm3BEUOsKDRp0YumN65dDAy6y+PncxN7EFvCpGkxLHadpfQ
eAtduyMEU7YjYyrW2DSePefQBupnMV1QxhTdTt4NFJc+E9brpYWruAeJzlESGdwf
4UuU+LpOr0q+VeOapyRMy2dNvzN6er5+ngBVvZKx2soUzrybQHe6S5CNErdwHwon
B0Xa8v7+HkmO69TIh+fJB1zPj1wFJNw1HDRB09AvdyQl55A2G9NpRLZbPiZXxFdn
DO6272R6AkLN4dz32jik2dD+a0RG6mhs0QI8nKlkZa/DipnYrlXypKEU2/mY49u8
yHsP8TF+me749QDI
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:23 2025 by rpki-client