Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SDydnQnj_31yjAN5LXStGZaM4n0.cer
File: SDydnQnj_31yjAN5LXStGZaM4n0.cer (raw, json)
Hash identifier: Tux0QhVAyF6kowbg4rOuzlzmuAwITj5UW4wPt9nn/4s=
Subject key identifier: 48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500276FAAA05123FBDEB2623B998608
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/SDydnQnj_31yjAN5LXStGZaM4n0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 93.177.105.0/24
IP: 2a11:fa40::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:27:6f:aa:a0:51:23:fb:de:b2:62:3b:99:86:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=483c9d9d09e3ff7d728c03792d74ad19968ce27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:f1:cd:17:07:4e:a1:27:cd:e8:d4:10:e6:
fe:8f:7c:de:25:6b:8c:fa:b0:80:c6:0c:9c:e5:76:
8e:52:9b:fe:47:bb:e2:1d:a5:f8:b6:b4:4a:89:c0:
f1:1b:83:cd:8c:cc:0f:02:b1:82:c9:5b:84:2d:38:
7e:90:39:c8:84:8d:f5:c2:17:1b:fb:c6:7c:07:97:
09:c9:92:26:e8:d4:8d:28:38:46:94:02:0f:7b:ae:
4a:f9:af:6e:af:cd:3b:bc:44:27:af:a3:5e:6e:23:
bb:09:d1:ee:55:d5:ed:eb:3b:86:9a:cb:89:e9:c3:
fa:70:72:75:cf:9d:ac:73:92:b9:69:e2:3e:82:0e:
18:e9:cd:9d:a7:f4:0f:63:6b:8d:d5:2c:99:ad:fb:
49:d4:be:0d:b5:dc:4b:64:59:c1:a9:d3:6e:a4:72:
2c:c3:e8:96:ee:c3:6d:d1:08:d9:a5:35:f5:1a:af:
9d:a4:d9:5f:47:b0:07:60:3f:3f:61:81:b9:5b:a0:
ad:6d:87:af:d8:c8:db:14:8e:05:9d:37:ad:06:e3:
91:60:4c:fb:16:17:5a:1a:64:a8:32:56:70:be:df:
ab:dc:76:af:42:a9:76:f9:56:62:05:88:90:8e:7a:
c6:8d:f5:0a:43:9d:27:64:55:20:71:41:4a:8f:47:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/SDydnQnj_31yjAN5LXStGZaM4n0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.105.0/24
IPv6:
2a11:fa40::/29
Signature Algorithm: sha256WithRSAEncryption
a5:ae:a2:15:ee:19:63:3b:a2:b3:d6:f0:84:2b:57:29:db:91:
8f:42:a8:7d:bb:87:b2:19:d5:16:3d:07:95:e8:f6:13:88:f4:
3f:d3:1c:f8:8d:5e:6d:43:05:93:08:5d:96:30:06:e9:27:02:
18:d1:b2:07:2f:2e:19:c3:60:fb:b0:82:8a:d3:00:27:2b:a1:
2b:4a:29:b8:57:4c:44:0b:1a:90:7d:d3:13:70:92:0c:e2:76:
05:6c:7d:ae:18:ed:60:3a:52:e4:f9:ce:f2:eb:7e:a5:8e:a3:
7a:f3:0c:28:c4:e4:b7:a6:8d:d9:a5:52:1e:1a:40:ac:52:32:
51:02:54:6a:72:e2:b5:6d:bd:d6:57:79:0f:80:c4:e9:e9:a5:
4e:38:20:96:cc:61:e2:15:eb:8d:e7:c9:11:90:f0:44:c8:f4:
8c:f5:45:c6:83:fd:df:51:72:4e:71:58:3a:2b:68:3b:b3:72:
67:e0:d7:38:ee:a7:b0:d8:89:70:19:1d:5a:90:07:ea:43:b1:
db:4e:aa:08:be:08:10:ed:59:33:15:bf:82:52:fd:7e:6a:db:
0e:42:16:d7:58:54:84:ad:fd:d4:93:18:49:91:91:c7:d0:6c:
1b:a0:29:10:51:f6:35:29:71:ab:30:b0:ba:bb:be:69:96:53:
f3:3b:9f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:11 2025 by rpki-client