Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
File: jlXKALthb9xHR8v6S1RFbCPzcoQ.cer (raw, json)
Hash identifier: yTUdqRQjTGGUkkztlbJZFQxJuhzldQtkNFkbWIH5WBU=
Subject key identifier: 8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CA493534A38E30BF46FA0499BE8AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203201
IP: 78.142.240.0/24
IP: 80.80.239.0/24
IP: 185.142.152.0/22
IP: 185.145.192.0/22
IP: 2a07:2e80::/29
Validation: Failed, certificate revoked on Thu 30 Jan 2025 13:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a4:93:53:4a:38:e3:0b:f4:6f:a0:49:9b:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e55ca00bb616fdc4747cbfa4b54456c23f37284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:e6:00:64:c9:89:da:07:60:25:20:1c:64:
5c:2c:7f:fe:7f:f3:66:0b:09:59:77:32:94:d1:18:
6e:b4:8d:da:46:ef:d3:49:92:4f:a9:0b:66:43:02:
0b:45:a1:92:9a:b5:9e:eb:d5:9c:ea:b3:4b:84:cb:
f7:da:1b:22:47:bc:1d:92:f1:dc:de:72:4e:88:7e:
50:13:d9:8a:61:94:77:02:39:ce:6e:36:31:6e:38:
25:f0:09:2f:41:68:14:70:02:43:30:27:08:e6:d4:
44:28:63:31:18:96:74:16:4a:fe:61:91:9f:54:f5:
82:79:5e:81:97:0c:61:3b:de:a1:63:10:cd:58:cd:
7f:b2:c0:48:02:ed:d7:66:48:17:1e:69:22:57:a1:
0e:aa:e2:44:78:69:10:b9:8e:e4:1a:6f:b3:11:a4:
b8:17:db:d5:d3:6b:21:c0:7e:83:eb:37:63:5a:32:
9e:38:e3:d0:91:36:29:cd:43:6c:d8:80:47:9f:b7:
01:73:0d:d6:47:e4:42:9f:87:12:03:49:fc:fd:5e:
aa:2d:61:02:71:b7:e5:dc:22:d0:f3:d1:16:b4:22:
b3:40:49:25:26:29:fe:77:a4:ff:00:b2:48:b8:94:
e0:24:4e:43:6f:12:68:8b:ff:5e:af:b5:55:a3:e6:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.240.0/24
80.80.239.0/24
185.142.152.0/22
185.145.192.0/22
IPv6:
2a07:2e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203201
Signature Algorithm: sha256WithRSAEncryption
03:1b:af:20:6b:64:2a:8b:83:3b:8e:f4:89:75:bf:d1:50:4f:
04:8e:ce:78:b7:dc:64:32:cb:d9:ae:7f:01:93:0a:8c:f3:65:
25:ee:39:3e:f5:63:d7:b9:f8:45:da:6e:61:73:7d:6e:51:14:
4d:c7:0c:c7:37:17:d2:05:a4:df:49:e1:4d:de:af:41:e1:fd:
0b:25:4b:3a:7c:8e:d3:6d:d0:5b:eb:c6:13:53:de:bc:02:5a:
7a:75:5c:d8:ef:68:11:7c:bb:9f:4a:f6:2e:d1:17:43:4a:93:
c3:61:bf:b0:c0:7c:3c:0f:c4:19:cf:50:b4:db:d2:0c:1b:42:
14:0e:e0:00:c0:48:d4:36:46:90:5f:e3:2e:08:ec:ab:80:89:
dc:fe:1c:08:27:57:97:1c:10:e5:71:a2:28:96:65:52:d7:44:
eb:ac:61:30:3e:c1:b5:20:72:b6:11:f9:22:6a:46:da:f9:95:
fd:c9:c7:c1:a3:60:2d:8e:7b:12:ba:00:aa:0a:ae:3a:1c:bc:
4b:2c:ca:8e:0a:fd:fb:cc:78:0b:ce:05:7b:05:a3:1b:59:c0:
25:2b:5d:c3:cb:ff:c6:49:67:a8:46:90:87:45:37:d3:b8:13:
25:a6:5f:cb:99:b2:31:45:e4:0c:05:53:d4:ea:64:37:95:a3:
59:2f:ad:ab
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAZQfjKSTU0o44wv0b6BJm+isMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTU1Y2EwMGJiNjE2ZmRjNDc0N2NiZmE0YjU0NDU2YzIzZjM3Mjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllnmAGTJidoHYCUgHGRcLH/+f/Nm
CwlZdzKU0RhutI3aRu/TSZJPqQtmQwILRaGSmrWe69Wc6rNLhMv32hsiR7wdkvHc
3nJOiH5QE9mKYZR3AjnObjYxbjgl8AkvQWgUcAJDMCcI5tREKGMxGJZ0Fkr+YZGf
VPWCeV6BlwxhO96hYxDNWM1/ssBIAu3XZkgXHmkiV6EOquJEeGkQuY7kGm+zEaS4
F9vV02shwH6D6zdjWjKeOOPQkTYpzUNs2IBHn7cBcw3WR+RCn4cSA0n8/V6qLWEC
cbfl3CLQ89EWtCKzQEklJin+d6T/ALJIuJTgJE5DbxJoi/9er7VVo+ZRNQIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFI5VygC7YW/cR0fL+ktURWwj83KEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2YxNGRk
Yi1kYjU5LTQ4NWMtOTk0NC1lNzExNWJhNDIwOGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZjE0ZGRi
LWRiNTktNDg1Yy05OTQ0LWU3MTE1YmE0MjA4Zi8xL2psWEtBTHRoYjl4SFI4djZT
MVJGYkNQemNvUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQATo7wAwQAUFDvAwQCuY6YAwQCuZHAMA0EAgAC
MAcDBQMqBy6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMZwTANBgkqhkiG9w0B
AQsFAAOCAQEAAxuvIGtkKouDO470iXW/0VBPBI7OeLfcZDLL2a5/AZMKjPNlJe45
PvVj17n4RdpuYXN9blEUTccMxzcX0gWk30nhTd6vQeH9CyVLOnyO023QW+vGE1Pe
vAJaenVc2O9oEXy7n0r2LtEXQ0qTw2G/sMB8PA/EGc9QtNvSDBtCFA7gAMBI1DZG
kF/jLgjsq4CJ3P4cCCdXlxwQ5XGiKJZlUtdE66xhMD7BtSBythH5ImpG2vmV/cnH
waNgLY57EroAqgquOhy8SyzKjgr9+8x4C84FewWjG1nAJStdw8v/xklnqEaQh0U3
07gTJaZfy5myMUXkDAVT1OpkN5WjWS+tqw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:35:46 2025 by rpki-client