Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
File: bB9GgejH55bRvFrZhnBdmYqK1O8.cer (raw, json)
Hash identifier: gg9mvVT0I4ou0LwS0S+BMD9++row5PM656VMiOPv948=
Subject key identifier: 6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D92D987A09FB38402311F03352A84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.91.221.0/24
IP: 2a13:6240::/29
Validation: Failed, certificate revoked on Wed 06 Mar 2024 13:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:92:d9:87:a0:9f:b3:84:02:31:1f:03:35:2a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:d9:1d:16:9c:50:5a:36:56:6c:ae:90:11:
c3:c8:e6:c4:1c:5c:c6:d7:a3:72:ee:33:06:97:86:
5e:24:b5:0d:15:b7:78:24:cd:3c:f1:fd:f0:b9:74:
3a:36:a5:35:fd:1d:cd:20:23:a0:18:57:b2:62:b8:
41:09:71:05:56:b1:5b:c9:81:4e:c7:ba:31:b2:b2:
f2:70:0a:82:50:e1:7a:7f:2f:58:71:c8:da:63:e6:
ce:1b:25:a4:ce:08:82:6a:7d:19:1e:2a:96:a0:26:
0b:1e:13:00:aa:79:6d:1f:f7:16:4f:b2:2c:d2:e6:
21:51:bd:ad:b4:29:df:df:ac:58:05:de:77:7b:0f:
ad:ef:0a:26:d8:44:bf:c3:61:50:8e:52:e8:a8:91:
f2:55:9d:3f:e6:97:3d:6d:90:3d:46:9c:6f:35:39:
bd:c5:6e:e1:f9:74:3b:70:40:b9:23:9c:92:a4:84:
e2:6c:d0:a7:7d:ba:fc:1c:49:18:1b:29:06:e4:40:
a8:77:48:e2:25:7f:52:3d:71:eb:40:50:c0:b3:86:
26:82:e7:c4:06:73:cd:3b:07:ba:1d:51:f8:46:d5:
96:26:e7:56:b5:d7:f3:56:a1:f0:5d:54:e0:58:86:
f8:8c:37:62:82:0a:97:c2:d4:99:23:ca:6e:41:11:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.221.0/24
IPv6:
2a13:6240::/29
Signature Algorithm: sha256WithRSAEncryption
64:e4:17:83:64:68:90:3d:a9:cc:65:1e:b8:1a:3b:5a:44:29:
59:26:38:b1:10:d6:e2:0a:9f:69:c0:f6:25:72:96:65:d9:ee:
22:c6:bc:1f:14:30:72:6c:bf:88:cd:ef:da:b3:70:4b:0b:63:
1e:0f:71:05:af:cd:23:7e:89:e0:26:32:f8:62:f8:a2:04:64:
02:47:3e:dc:4a:5d:80:96:c0:27:1e:54:dd:9e:52:84:f9:6c:
86:97:a5:c9:44:78:94:50:3d:18:92:eb:29:3f:ae:ff:f2:fd:
e9:e9:16:61:94:c6:f9:6c:27:45:b8:fe:c8:42:99:c1:fa:c6:
68:c7:e1:c9:b1:0f:dd:13:b3:c3:29:27:be:89:d6:cf:e3:a7:
e8:90:04:59:73:a5:8c:ba:84:99:e9:0d:f6:fc:c5:d4:51:2b:
ff:1e:2c:81:ca:5f:c7:86:cc:35:bd:8e:80:96:93:57:8e:ac:
0d:be:10:7f:23:79:d5:4a:a0:79:bc:44:ce:df:c4:5f:7e:6f:
0c:3d:9a:66:4c:73:8f:78:14:48:1a:4f:6d:81:57:af:69:0f:
b1:7c:fb:56:e7:57:ce:af:6a:76:14:56:c6:78:70:e1:d1:62:
98:7c:68:be:2f:83:42:d7:6d:b8:c5:f4:9b:c7:e0:1b:2c:75:
d7:27:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:23:02 2025 by rpki-client