Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d-6XM7SOilLkmzRr-B1UPd4RZY4.cer
File: d-6XM7SOilLkmzRr-B1UPd4RZY4.cer (raw, json)
Hash identifier: OZ4W88CUAyrZer1j+Q2KzHutArb8rfbt4Noxw5dm+Ds=
Subject key identifier: 77:EE:97:33:B4:8E:8A:52:E4:9B:34:6B:F8:1D:54:3D:DE:11:65:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01973BFD90B5821435D9DABAF3003D964AF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddc651-432d-4776-bad9-44caafb30aac/1/d-6XM7SOilLkmzRr-B1UPd4RZY4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddc651-432d-4776-bad9-44caafb30aac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Jun 2025 17:29:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a07:eb80::/29
Validation: Failed, certificate revoked on Wed 04 Jun 2025 19:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:fd:90:b5:82:14:35:d9:da:ba:f3:00:3d:96:4a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 17:29:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77ee9733b48e8a52e49b346bf81d543dde11658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:92:0e:9d:72:5f:12:fa:13:98:6d:f0:5a:
f3:7a:95:3c:f6:11:69:b0:33:0b:02:71:1a:fe:4e:
91:0c:7e:81:c3:64:82:f4:33:37:a0:fe:8e:03:4d:
d0:41:a6:2f:1a:60:83:68:a8:ea:49:3c:aa:9d:f8:
a2:38:45:41:fb:03:49:86:42:87:c5:20:0b:32:f5:
01:ac:00:62:0f:db:5c:16:f8:91:19:e1:5e:ae:3b:
0d:1a:ca:16:82:97:69:04:66:a9:d0:6e:4b:88:cf:
4c:28:72:dc:a5:cb:76:0a:08:32:f0:b2:72:fb:4c:
5c:80:31:d1:d3:79:de:94:d3:68:0c:54:60:84:18:
e5:12:0e:52:2d:fc:45:3d:ab:9d:7e:9b:57:58:6b:
ba:19:75:bd:87:16:e9:5e:e0:d8:c0:07:26:d4:17:
5a:fb:78:ce:df:9b:b2:61:bf:b0:9c:7c:55:8b:dc:
9e:f5:1f:61:02:f5:a8:a3:d5:22:4d:c3:fb:ee:7d:
54:ba:27:03:e9:8c:5c:37:3c:c7:a5:11:f3:9d:af:
49:1e:1a:32:33:cf:45:c5:30:f2:6b:7f:1a:5c:2b:
bc:14:15:ce:35:ea:cd:73:c0:4d:5f:9d:5c:fb:e2:
69:fd:70:1e:e0:ab:77:14:4a:a1:d2:11:49:0f:13:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:97:33:B4:8E:8A:52:E4:9B:34:6B:F8:1D:54:3D:DE:11:65:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddc651-432d-4776-bad9-44caafb30aac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddc651-432d-4776-bad9-44caafb30aac/1/d-6XM7SOilLkmzRr-B1UPd4RZY4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
a8:eb:d8:0e:8f:ee:0c:81:23:f7:80:43:95:5a:58:67:8d:1e:
62:3d:ba:61:56:f2:a8:80:33:5e:db:06:27:24:30:2c:69:f5:
41:5a:c1:f9:c3:8b:4a:bc:89:72:4d:d4:92:9e:17:29:be:6e:
63:e7:70:c8:e2:d0:e9:99:33:54:20:66:b1:cd:43:51:e4:c0:
5e:68:9a:a1:33:14:4a:83:0d:ab:53:d0:bb:1b:fa:b1:74:5a:
a8:bc:91:94:6a:19:20:2c:da:c5:4f:cb:7c:43:23:f5:1f:18:
1e:46:44:ef:87:37:52:5d:68:f9:1b:b8:87:3e:da:7c:01:75:
02:81:2a:38:69:f7:70:71:02:ef:53:b0:18:b4:ee:96:91:43:
76:4a:08:14:a1:69:3d:2a:44:a8:23:53:e5:12:9b:20:a9:59:
44:fe:29:bc:cd:c9:54:ff:41:ef:7a:24:cf:e8:0c:aa:78:52:
84:37:6c:d2:2b:de:fc:0f:87:57:b0:3b:f9:da:6d:0c:e6:81:
e4:06:33:46:40:6c:5e:f2:fe:e6:8f:0a:96:8b:7f:b6:1f:7d:
5b:03:07:54:9c:21:0e:4e:2e:88:62:31:e1:6d:b7:be:9b:a1:
2a:da:7d:93:53:ea:b9:7e:40:66:a0:75:90:12:41:93:76:dc:
d7:43:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:34:50 2025 by rpki-client