Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gGleuZBCelhc8Dsi2AWHhwnJENI.cer
File: gGleuZBCelhc8Dsi2AWHhwnJENI.cer (raw, json)
Hash identifier: 7vLnj7hMTm8g5bM/8KZHsWvbobeh++src9pKFfNv/fw=
Subject key identifier: 80:69:5E:B9:90:42:7A:58:5C:F0:3B:22:D8:05:87:87:09:C9:10:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB474208B5841108F138485DBF8E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/gGleuZBCelhc8Dsi2AWHhwnJENI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2.59.128.0/22
IP: 2a09:f3c0::/29
Validation: Failed, certificate revoked on Tue 26 Mar 2024 11:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b4:74:20:8b:58:41:10:8f:13:84:85:db:f8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80695eb990427a585cf03b22d805878709c910d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:20:06:a6:8c:a8:0d:13:a8:dd:2b:cb:9e:
7d:67:00:31:dd:08:f2:c9:f2:9e:3a:28:d7:54:01:
a6:9f:18:f6:c9:04:fb:46:54:e5:f8:48:5e:6e:7d:
b3:c3:fd:56:3e:f9:c6:00:ab:2a:89:6a:10:81:0f:
75:38:f9:4c:d7:10:c6:93:3a:59:81:64:ab:a8:f8:
86:e9:82:fe:73:58:63:3c:83:0b:b4:87:d2:ca:75:
52:c9:3f:40:18:db:fc:40:40:26:56:76:9e:27:c2:
9f:5f:4c:46:87:08:27:27:f3:57:62:56:ba:d2:98:
c9:1e:8d:1d:25:16:94:20:24:e2:78:4e:7d:e6:0a:
21:e3:72:e3:80:82:6d:65:b6:76:3d:1d:6f:2e:87:
a3:ae:f2:03:b7:53:f3:15:df:af:25:f8:24:bd:e0:
6e:6a:a1:46:87:28:f0:d8:41:c3:69:2d:5c:0d:af:
66:6a:2b:c5:2f:65:4a:76:c1:87:9e:d1:ca:ff:b1:
8a:06:fd:1b:cd:b3:a7:85:22:e4:e7:da:07:b1:08:
fa:9d:6b:44:fa:a5:0e:45:94:cc:41:61:c7:bb:b1:
e5:20:d5:bb:68:91:b4:a9:b0:46:2c:df:c7:15:d3:
14:e1:ec:14:21:2b:b8:54:1c:ef:a1:93:ca:03:82:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:69:5E:B9:90:42:7A:58:5C:F0:3B:22:D8:05:87:87:09:C9:10:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/gGleuZBCelhc8Dsi2AWHhwnJENI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.128.0/22
IPv6:
2a09:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:19:d9:fd:96:d1:f9:f0:82:6f:5c:5f:35:4d:7c:82:99:19:
1f:bd:cb:12:ec:e8:61:2c:bf:71:69:d6:aa:b6:19:0c:a8:0b:
d0:2e:e5:58:f1:11:0e:18:62:ca:aa:aa:0e:ca:6a:50:1b:2e:
23:20:42:e4:4d:5c:fe:59:a2:5d:e9:9c:4a:5a:0c:c1:68:cd:
e5:e2:30:d6:55:55:2a:97:61:b4:75:a4:f4:c1:bd:9d:91:5c:
8a:ed:3e:49:c9:3f:b3:ed:88:d9:6c:45:da:5c:4f:bf:5c:f0:
f1:27:5a:8e:c0:d5:d7:bd:ae:79:8e:2a:e1:e7:bb:a4:18:3d:
5f:94:e2:7d:4e:3a:f5:e8:89:64:35:f2:98:6d:81:19:2c:b0:
38:54:db:5a:5f:0f:dd:0b:9f:57:a5:6e:65:d4:39:ab:ad:d0:
e5:26:fc:e1:90:b0:e9:bb:e2:a0:08:2b:71:86:e7:fe:c3:cc:
45:be:4a:d7:a6:06:5a:61:5e:9d:e9:11:85:a7:cd:5c:cb:ed:
67:f5:2c:29:b6:a0:1d:13:66:c0:15:9f:fb:60:b0:84:d0:0c:
90:15:34:a5:d7:72:70:6f:d4:62:00:04:34:11:d2:4b:80:71:
01:96:af:da:be:0d:5d:97:3d:af:6f:0b:ee:7d:b3:88:ef:af:
d8:84:6d:c0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzC2rR0IItYQRCPE4SF2/jpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDY5NWViOTkwNDI3YTU4NWNmMDNiMjJkODA1ODc4NzA5YzkxMGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHEgBqaMqA0TqN0ry559ZwAx3Qjy
yfKeOijXVAGmnxj2yQT7RlTl+Ehebn2zw/1WPvnGAKsqiWoQgQ91OPlM1xDGkzpZ
gWSrqPiG6YL+c1hjPIMLtIfSynVSyT9AGNv8QEAmVnaeJ8KfX0xGhwgnJ/NXYla6
0pjJHo0dJRaUICTieE595goh43LjgIJtZbZ2PR1vLoejrvIDt1PzFd+vJfgkveBu
aqFGhyjw2EHDaS1cDa9maivFL2VKdsGHntHK/7GKBv0bzbOnhSLk59oHsQj6nWtE
+qUORZTMQWHHu7HlINW7aJG0qbBGLN/HFdMU4ewUISu4VBzvoZPKA4L1IwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIBpXrmQQnpYXPA7ItgFh4cJyRDSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzRlNDMy
MC1jMzg0LTQ4NDctYjIzOC1lZTY3YTk2NmIwOTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNGU0MzIw
LWMzODQtNDg0Ny1iMjM4LWVlNjdhOTY2YjA5Mi8xL2dHbGV1WkJDZWxoYzhEc2ky
QVdIaHduSkVOSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCAjuAMA0EAgACMAcDBQMqCfPAMA0GCSqGSIb3
DQEBCwUAA4IBAQB/Gdn9ltH58IJvXF81TXyCmRkfvcsS7OhhLL9xadaqthkMqAvQ
LuVY8REOGGLKqqoOympQGy4jIELkTVz+WaJd6ZxKWgzBaM3l4jDWVVUql2G0daT0
wb2dkVyK7T5JyT+z7YjZbEXaXE+/XPDxJ1qOwNXXva55jirh57ukGD1flOJ9Tjr1
6IlkNfKYbYEZLLA4VNtaXw/dC59XpW5l1DmrrdDlJvzhkLDpu+KgCCtxhuf+w8xF
vkrXpgZaYV6d6RGFp81cy+1n9SwptqAdE2bAFZ/7YLCE0AyQFTSl13Jwb9RiAAQ0
EdJLgHEBlq/avg1dlz2vbwvufbOI76/YhG3A
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:47 2025 by rpki-client