Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jU7DoZCD2p2bqfL6XMDSEj-zAbs.cer
File: jU7DoZCD2p2bqfL6XMDSEj-zAbs.cer (raw, json)
Hash identifier: UaCbDwsSeiDcNjoMA/bKGnMdCyB/VBc08e2bFn5N9As=
Subject key identifier: 8D:4E:C3:A1:90:83:DA:9D:9B:A9:F2:FA:5C:C0:D2:12:3F:B3:01:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D953DB2B908C6E065E5BD5897FE8BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.91.222.0/24
IP: 2a0c:19c0::/29
Validation: Failed, certificate revoked on Thu 23 Jan 2025 13:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:53:db:2b:90:8c:6e:06:5e:5b:d5:89:7f:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d4ec3a19083da9d9ba9f2fa5cc0d2123fb301bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:e7:e7:c8:c0:97:a1:03:b3:ed:93:be:39:
1b:2e:1f:5c:c9:9d:17:43:31:79:3d:25:ad:b9:02:
4c:da:34:d2:6a:f1:b0:8f:ed:6e:66:89:9e:3e:3d:
eb:1a:87:6c:ac:41:e9:43:57:09:7e:62:ac:18:f2:
06:1f:07:69:df:22:95:b9:44:20:d3:ab:c4:d0:9c:
bc:aa:0d:70:78:42:f3:4a:e7:db:34:f6:3b:62:ff:
7f:c9:12:d5:99:53:ad:da:97:64:e4:c2:8f:fe:8f:
97:5c:cf:c8:5f:3b:da:ce:68:1d:9b:cc:39:44:2f:
c4:94:0f:94:70:19:56:22:bb:e5:28:f8:23:e9:f5:
17:41:e1:47:93:25:d9:61:a4:9b:f2:45:ba:2a:ea:
5d:91:ca:cc:f7:87:dc:7e:71:1c:5f:e5:94:c5:1a:
70:3a:7d:75:fd:83:25:cc:da:3d:5a:ba:99:6c:ad:
11:8e:ba:d0:e0:b8:87:ac:ee:61:2b:67:32:fb:cd:
cd:7f:ac:15:7f:3c:31:b7:f5:b1:dd:73:ef:f3:2f:
53:93:81:7b:87:32:b6:df:11:61:f2:d1:13:e6:c3:
e2:bc:ae:96:cf:b0:4f:4e:dd:e2:ae:9d:e8:cf:4a:
92:7e:82:8a:fe:7e:62:dc:61:1b:c3:9e:fe:af:03:
1b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4E:C3:A1:90:83:DA:9D:9B:A9:F2:FA:5C:C0:D2:12:3F:B3:01:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.222.0/24
IPv6:
2a0c:19c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:df:d5:85:d8:b9:d7:b9:46:06:0b:6b:b3:ef:20:fa:fc:f5:
93:4b:4c:9b:de:68:12:12:da:d3:9b:67:7b:56:92:e9:13:1b:
b0:eb:64:f1:d1:99:6a:6f:18:d5:dc:2d:8f:e9:69:1c:a9:c8:
b4:b2:d9:08:ae:ee:e4:3a:bb:5b:b2:63:9f:a1:e0:0d:ed:71:
bd:46:05:1a:fe:d4:91:bb:c4:f4:55:b7:41:7a:3e:05:3b:db:
82:bc:f2:50:23:7b:72:ec:63:49:f8:54:2d:4f:c2:26:6f:ef:
78:85:ec:3e:5b:18:48:37:17:04:93:eb:ca:6e:2a:fb:98:88:
83:7f:b9:43:f3:68:db:69:1f:0a:0c:e9:7f:d4:2a:c1:4b:8e:
3c:ba:5e:cb:b8:03:ca:dc:af:44:2c:3b:80:02:89:64:a7:6b:
68:b2:bb:fe:8a:ec:96:ae:e4:ad:98:25:51:1a:74:7d:d2:87:
b2:a4:28:f1:fa:87:b2:ca:f3:3a:a2:54:ff:38:c9:c5:c9:fc:
1b:ec:a8:8e:12:43:db:a6:99:fb:d9:e7:49:e2:24:2f:6d:77:
4d:a5:51:b5:4f:e4:0f:fe:46:03:3a:fa:71:23:ae:50:72:3b:
38:d3:a8:7e:5b:51:26:ae:c8:7d:91:64:37:ec:ef:6e:e8:69:
94:9f:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:17 2025 by rpki-client