Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
File: WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer (raw, json)
Hash identifier: l1QLjkwrs+PWq6VWtoYdFThtGY4yXKj8fKZcYCcTV8s=
Subject key identifier: 58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B4F59B4F4562DCC76BB36635D8D0DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.138.77.0/24
IP: 2001:678:8e8::/48
Validation: Failed, certificate revoked on Thu 10 Apr 2025 13:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:f5:9b:4f:45:62:dc:c7:6b:b3:66:35:d8:d0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=588db30c807839cc534dd6d11ab90420f873d639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:ec:04:d4:74:68:90:ce:18:ab:27:6c:c9:
1e:fc:16:21:38:9a:8d:87:54:af:57:f1:db:df:1d:
ec:96:9e:39:14:40:fd:8e:a4:6f:d2:a1:f2:8c:5a:
33:03:4f:d6:b8:20:3e:fa:80:15:93:58:d7:d2:5f:
71:5a:2b:05:11:20:04:ec:8a:b1:b6:1d:b7:e3:97:
4f:0d:04:91:dc:6e:42:6b:1e:f8:4a:a2:8f:7d:a9:
84:60:9f:57:81:e9:14:06:34:07:ec:a7:b3:31:bb:
de:b0:34:58:6a:3c:f4:25:33:16:4b:8b:6c:ea:26:
50:6d:83:40:dc:f6:8d:c2:24:0f:0a:af:ce:78:36:
44:09:36:57:39:69:c6:e2:b9:e4:3d:fd:76:2a:45:
b6:5f:9f:b2:6d:f8:24:41:cd:89:e8:96:02:7e:e9:
03:39:67:2d:c4:4d:d8:fd:df:63:aa:c5:28:1b:36:
59:93:97:ad:4e:d4:b4:5e:2e:72:7d:55:2f:8d:14:
47:82:ea:4a:e7:b9:17:8c:ec:a9:25:41:7a:5f:5e:
56:64:c7:96:1c:7c:d6:89:26:e4:87:f4:95:6e:dd:
84:06:01:61:9e:06:42:b5:06:78:ff:52:ee:10:25:
d7:90:ba:71:46:da:34:17:6b:9b:03:cb:2a:e6:b0:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.77.0/24
IPv6:
2001:678:8e8::/48
Signature Algorithm: sha256WithRSAEncryption
63:c3:8e:34:07:83:7d:83:2e:51:f4:b3:ec:9f:cc:aa:9e:52:
8e:9f:dc:d9:54:8a:95:2b:2a:df:4f:9b:92:05:c8:cf:30:3c:
19:72:a6:39:2d:18:63:86:45:d8:34:e1:f2:fa:26:95:45:07:
58:f4:36:01:86:0b:f3:87:97:ac:04:e7:be:06:5d:7f:29:26:
89:db:47:61:2d:ff:8e:4d:fa:a4:3c:42:37:d5:59:46:19:2e:
d6:4c:02:cb:6a:36:29:5c:6c:8a:36:ca:8f:bf:74:14:19:73:
20:13:a9:71:4f:4f:48:44:08:cc:9b:62:e7:f0:49:fa:68:0e:
14:e8:ec:11:20:19:2e:26:90:5b:f6:72:e2:92:73:c9:70:1e:
5a:53:17:cc:b0:07:5f:69:51:68:52:3f:d8:ce:03:6b:51:d7:
01:73:49:09:a3:1c:14:9c:b1:21:a2:38:d9:2c:16:7d:ed:f4:
84:d3:5e:f4:af:be:dc:44:67:91:59:5a:11:04:c1:62:d0:be:
d0:2f:0e:cb:aa:d9:55:8d:fe:9c:bb:da:c1:29:2d:27:fd:48:
65:2c:70:f8:d3:af:30:2a:da:b0:92:44:b2:3f:f4:8d:11:75:
1d:23:80:96:f3:43:af:e3:d6:2f:31:57:94:3e:f7:2d:e0:c4:
fc:e3:e6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:52:52 2025 by rpki-client