Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer
File: ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer (raw, json)
Hash identifier: mcNcTm+M8y1HlfItuTea5ZjjVZv+SwaDcvqUflxMmqM=
Subject key identifier: 65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72753BD2F1212E655AC7FC1C2488248
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.38.32.0/22
Validation: Failed, certificate revoked on Fri 15 Nov 2024 13:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:53:bd:2f:12:12:e6:55:ac:7f:c1:c2:48:82:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65d3f80ae668b13cfb6258c5b19f86802a74fd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:c6:bd:78:24:58:b3:f2:98:a0:9f:df:bc:
82:dd:1a:1d:83:92:7d:87:52:d2:4b:0e:d7:95:7c:
02:66:f0:56:68:6a:f8:17:68:9f:b0:07:bd:c8:3b:
e8:32:60:6f:d4:ca:17:35:6e:dc:8f:d1:cc:60:84:
86:cf:b0:08:36:1c:ad:f4:c5:56:f3:2c:e4:e0:53:
a4:c9:1f:42:88:05:b2:2c:43:75:45:c2:71:45:a6:
59:a3:e4:4a:4a:0c:4b:7f:1f:d6:25:66:8d:e5:e4:
ab:05:f1:d9:c6:81:76:6e:1c:d3:5d:3b:f2:d4:43:
d7:38:02:90:07:49:fb:e7:55:13:3f:82:9f:4a:a9:
88:cb:80:1e:f4:f4:59:11:3d:88:59:41:f3:02:f8:
d5:9a:9b:f0:35:f3:4e:90:f3:43:9d:62:4d:87:d5:
bf:a4:98:1f:c5:23:71:90:39:7b:03:b4:d2:95:81:
ff:6a:a8:70:ce:67:9b:5a:9c:a7:ca:71:02:45:ea:
fe:79:5d:bd:21:ad:e2:e5:d8:d4:8b:05:f7:9b:d4:
50:37:19:93:ad:12:0f:7f:22:f8:28:8d:fa:62:0b:
6c:53:65:d0:bb:6f:82:34:dd:a1:b1:ec:bb:73:d7:
b2:7c:40:11:fb:44:23:cc:58:e9:ed:cd:04:2e:77:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.32.0/22
Signature Algorithm: sha256WithRSAEncryption
91:11:9d:a6:c1:9d:61:35:66:be:b0:c2:b8:e9:10:55:b7:20:
b4:09:6b:47:6d:86:4a:9b:b7:68:40:fa:7a:8a:6e:4b:0d:74:
65:aa:82:a5:9e:4f:32:fa:ac:9c:6c:42:50:de:71:cb:e6:53:
fa:75:c1:4a:0e:46:ff:05:00:96:f0:f9:5e:43:ca:6d:65:b1:
d7:73:a3:f2:11:a8:34:e1:8f:d3:dc:99:31:76:53:64:2f:68:
57:fc:a2:85:3b:4f:49:dc:b5:c4:7a:fc:61:bb:70:a8:35:0b:
a1:f4:5b:7d:70:08:53:16:75:13:d0:4b:a5:85:83:2b:c4:54:
7e:59:ac:68:61:94:71:44:86:e5:61:b6:16:a9:1e:aa:c4:f6:
3c:99:ec:7b:a3:48:6e:f5:39:43:45:7a:1a:a7:2f:b7:7a:f3:
c7:28:66:dc:52:c5:7f:13:57:de:78:22:78:c1:04:a4:52:8b:
f9:b6:11:54:19:4b:b7:58:dd:8e:d5:9b:ac:94:21:c5:b2:a5:
6b:64:8b:57:f7:74:ea:b5:0d:b0:39:e2:7c:52:6b:10:91:0d:
b3:ea:ca:d6:bc:dc:54:8a:0b:87:b5:09:9c:aa:c1:6a:26:b6:
16:8b:5b:a6:9a:24:36:43:41:e8:3b:5c:00:81:d3:fd:e0:da:
9a:09:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:06:32 2025 by rpki-client