Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7bLx9H-XmgSUB8MJZbfY-9fyOY.cer
File: b7bLx9H-XmgSUB8MJZbfY-9fyOY.cer (raw, json)
Hash identifier: ZUDTkQSytn83WBhal+csCn/c4wQOcuSf9oetJU/ZXDw=
Subject key identifier: 6F:B6:CB:C7:D1:FE:5E:68:12:50:1F:0C:25:96:DF:63:EF:5F:C8:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B24089D4F97E31788157C2E1B623B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.200.61.0/24
IP: 2a12:1140::/29
Validation: Failed, certificate revoked on Tue 12 Mar 2024 08:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:24:08:9d:4f:97:e3:17:88:15:7c:2e:1b:62:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fb6cbc7d1fe5e6812501f0c2596df63ef5fc8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:9c:22:8d:6c:d8:5e:8d:21:d7:30:a5:06:
48:b2:ad:69:9a:cb:9a:9d:d6:a1:57:9a:80:d4:e5:
cc:8e:23:f3:ec:67:48:92:ad:76:52:b5:68:ab:72:
ba:0d:6a:58:1b:ba:5e:4b:72:6a:3e:d0:46:5b:eb:
e2:d4:c6:dd:d8:b3:62:b4:9b:ec:47:83:15:40:8a:
26:c8:c3:8e:b0:e5:c3:2b:70:91:77:9d:82:26:4a:
5d:bb:42:1b:ec:0b:33:32:f8:85:ea:46:df:ff:42:
2b:e4:63:a1:9e:f8:e8:4f:95:56:2f:bf:85:11:25:
1b:72:97:d8:4d:c2:fa:36:cd:d1:0d:6b:6b:e8:39:
37:e3:56:a7:6d:b1:5e:ad:70:75:9e:c9:9d:06:03:
d4:3d:05:f7:49:15:82:c7:a3:be:2c:64:dd:29:9a:
40:af:23:a8:f8:83:cd:eb:40:e7:56:44:6f:3f:40:
2e:f8:3a:78:65:ed:e0:d5:5b:fb:e6:20:22:2b:bb:
e2:ae:c8:6e:74:32:e1:53:05:36:36:08:7a:ce:99:
e2:79:6c:e9:08:1d:c2:75:05:05:a0:94:d2:a0:1a:
52:34:35:28:6d:38:22:05:39:0f:ba:2d:a7:61:9f:
5e:94:fb:75:47:f6:fa:51:28:cf:a2:02:c1:ce:ba:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:CB:C7:D1:FE:5E:68:12:50:1F:0C:25:96:DF:63:EF:5F:C8:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.61.0/24
IPv6:
2a12:1140::/29
Signature Algorithm: sha256WithRSAEncryption
79:58:b2:66:f1:3c:fc:22:cf:aa:d7:a7:dc:7a:1d:97:f5:f0:
bc:4f:64:03:07:38:53:e2:39:98:77:f2:a2:07:41:70:b5:93:
ac:23:37:67:60:cb:0f:b1:d4:0f:25:99:5d:bd:dd:a4:bf:0c:
3c:62:90:a5:d8:f3:8b:67:2a:86:00:b9:dc:84:ca:c0:ca:cc:
db:d8:79:9e:85:28:e0:34:48:87:c6:3d:8d:79:d4:e2:be:46:
e8:d2:ca:df:a8:76:de:81:cd:8e:86:19:4c:48:34:79:48:bf:
d0:dd:ca:6d:71:d4:f9:80:21:5f:75:2b:cb:af:33:96:b6:76:
6b:8b:42:f4:36:b5:d6:d0:17:21:df:91:79:30:fc:a8:5f:bb:
8a:ba:b1:a3:37:ee:61:8f:00:20:98:bf:e2:51:21:eb:56:b1:
11:37:d0:3c:7c:f4:14:7d:29:cf:0d:1a:d7:87:f7:6f:7d:27:
28:77:79:f2:42:32:99:0e:94:e1:95:52:0a:28:43:cb:0e:fd:
87:e3:5e:d4:03:c7:ca:3d:88:1a:52:7a:b2:72:07:8f:05:21:
ff:3c:4b:ae:5a:e8:1c:a1:49:54:aa:35:b2:82:34:40:3c:30:
7b:a1:56:5b:2f:86:9f:2b:77:4a:c3:23:68:79:52:84:3b:09:
99:f7:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:11 2025 by rpki-client