
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eL6wfollqs5RD0Q1MkLJzE1Rojc.cer
File: eL6wfollqs5RD0Q1MkLJzE1Rojc.cer (raw, json)
Hash identifier: RMEpqoXfSX6TGGroYuTVQCg0jI1pfhxjit/+vZwg0ss=
Subject key identifier: 78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5001A21980A69D029BB81685B692742
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.198.153.0/24
IP: 2a12:ad80::/29
Validation: Failed, certificate revoked on Mon 05 Feb 2024 09:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1a:21:98:0a:69:d0:29:bb:81:68:5b:69:27:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78beb07e8965aace510f44353242c9cc4d51a237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:fe:a4:05:54:2a:78:1a:f0:c9:bd:bd:f2:
bb:c7:ef:ac:a2:e1:20:88:b0:98:c7:8c:29:6b:dd:
93:36:42:a8:3f:b9:ef:b6:21:9b:cc:a6:35:e4:27:
72:53:47:b7:bd:7f:6a:a2:32:1c:1d:64:6b:0b:48:
71:60:85:f3:37:94:1f:af:b9:2e:45:c7:af:12:e8:
f5:c0:57:71:d6:6c:a4:5f:0f:94:93:f0:95:82:c6:
f5:6c:d3:cd:2e:cf:21:6f:4b:e8:c7:59:a3:23:0b:
a0:f6:d6:d7:2b:81:d1:2e:14:da:f9:99:2a:82:79:
7d:f0:37:ae:af:08:3f:ed:0d:21:3d:76:dc:68:a6:
a7:db:1f:ce:f2:d1:33:c8:44:25:e0:26:63:a0:d8:
36:f6:ed:9c:58:ac:ca:74:76:88:c2:f6:67:1a:0a:
34:c0:ff:e8:3e:33:75:a8:89:e0:48:90:62:6b:dc:
42:42:27:1d:e9:82:76:3c:fb:cc:2c:bb:fa:00:68:
2b:f0:f5:26:44:9f:5c:83:65:f5:6f:65:89:f3:32:
75:a7:62:f7:11:dd:65:0b:00:f9:0e:6f:1e:80:bd:
11:25:c7:5e:6f:e8:8f:3c:a9:22:e7:3d:f0:01:87:
85:4e:d7:29:24:47:75:c0:d7:80:d0:11:04:5c:cb:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.153.0/24
IPv6:
2a12:ad80::/29
Signature Algorithm: sha256WithRSAEncryption
27:ba:72:84:ff:f9:22:6e:c1:55:17:2d:11:06:d6:c1:a5:09:
79:68:3e:f0:f1:69:a6:7c:57:f6:24:52:62:e1:cb:87:68:30:
ed:e3:23:eb:14:fc:cd:8f:64:02:3a:e1:40:e9:da:59:b2:fd:
de:4d:de:57:39:8e:fe:db:a3:b3:d9:8f:6f:eb:66:43:19:f7:
61:b7:69:12:57:d5:c6:3d:fd:c5:7d:60:1f:e8:38:83:b7:eb:
2b:1d:b4:22:d3:4c:d4:27:de:8b:47:ec:e6:05:eb:fb:72:e8:
7d:23:b3:d5:b4:8c:51:fd:c0:9c:c1:71:29:fb:f0:bc:9f:b0:
15:4e:84:82:60:a0:0e:ad:a3:6c:0c:71:89:ac:39:ac:a8:ae:
f4:54:a8:5f:cc:d7:76:dd:34:22:2d:fb:0c:e2:5f:df:7f:2b:
e3:84:a1:5e:31:2e:f0:eb:03:5f:8d:c2:04:10:1b:fb:64:f1:
4b:7a:c6:5f:4f:ae:11:b1:86:ab:23:a3:d1:ec:00:0f:f4:07:
3b:f7:42:b1:49:40:f3:a9:f8:77:4e:53:eb:2f:46:74:19:03:
a1:a7:b2:80:22:be:1c:2d:f2:db:71:94:6e:e0:91:3f:c6:a4:
71:f9:68:62:03:60:92:49:cb:36:91:32:11:a6:7b:ab:d5:a0:
a3:69:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:05:30 2025 by rpki-client