Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer
File: ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer (raw, json)
Hash identifier: sLGbKVeRsiUXvRh27hD/Rxb9XrKs0EpW6dyUNjrOEgU=
Subject key identifier: 8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6AD78453A98F89C993D3B217AAB79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.93.252.0/24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 11:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ad:78:45:3a:98:f8:9c:99:3d:3b:21:7a:ab:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eeebe4a6c22d2b0fed176cb77510d9916f1811f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:81:fe:c0:1f:32:05:b1:eb:92:80:90:83:
98:b5:3f:44:94:1c:b8:e6:50:9b:a3:3a:ef:27:3e:
7a:9b:56:7f:ce:bf:16:5c:b8:6e:47:d9:e1:e4:40:
44:f6:07:0a:52:8b:a7:d8:5b:d5:43:b4:a5:20:dd:
ac:b9:3d:c0:ab:39:64:e9:9e:93:63:f3:e4:86:7c:
48:a1:d6:58:b2:e3:c8:7f:1a:f8:4f:8d:de:60:10:
2a:c8:21:2b:35:df:94:1f:79:0b:2a:4f:83:f6:d9:
1a:d0:e1:bb:6b:59:da:4d:22:ca:4b:e0:8a:83:2c:
07:41:29:70:9d:b1:ae:1a:49:28:b3:2c:b6:a1:6e:
76:99:57:35:12:38:39:95:5d:d6:91:93:6c:d3:ac:
6c:7f:c6:c7:18:90:89:4a:ea:a0:f1:0c:b9:d5:e7:
df:77:4c:b1:4d:e1:d3:bb:98:7b:2f:9c:f6:51:03:
f9:46:c5:f1:b6:07:4c:cc:b3:72:47:fb:84:4c:0e:
67:4b:0d:85:61:7f:d7:18:2d:33:22:dc:4a:95:58:
12:4b:e0:9b:8e:0f:7f:15:f0:65:c7:ee:8d:76:47:
fa:03:03:9d:74:18:9c:5c:a4:41:fd:9c:dd:45:a7:
a9:8b:8f:39:d7:54:15:d6:84:d8:98:c0:a5:dd:ff:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d0:0b:9a:2c:86:de:bb:8f:c3:96:9e:4c:a7:0a:f9:46:4c:
05:55:40:64:7a:1d:51:cf:8c:c2:76:50:af:df:db:50:ff:9b:
2d:6f:92:cd:7e:dd:0e:28:76:1d:f8:8d:50:f1:6d:b0:c1:48:
03:84:88:9b:3b:b7:d0:30:7b:cd:40:0b:1b:ca:e4:04:e7:0f:
37:92:3a:3a:48:27:2e:37:ae:d1:a9:b8:26:df:88:fe:c3:0d:
db:5f:5b:9c:2e:e1:d4:6c:d3:ad:eb:6c:ce:62:78:d4:af:00:
7c:be:37:38:6c:96:d8:64:b1:38:49:93:5f:cc:45:f9:fc:61:
f3:84:38:55:ec:5b:4b:9f:3f:a3:3a:61:4f:a1:b8:16:50:ab:
49:d3:48:0c:56:e4:93:1f:d4:a7:16:f7:ab:e6:9e:ef:7f:80:
d2:32:9a:da:8b:aa:e7:79:79:6a:6a:fb:fb:64:3d:88:b0:2d:
e7:f0:4d:7c:41:5c:20:96:34:a1:44:a4:d8:62:35:d3:66:42:
69:01:2c:35:b9:c5:9b:8f:17:70:29:72:f5:3d:da:02:16:74:
47:57:db:b9:57:51:47:79:c5:e5:8e:ec:05:bd:18:d6:d5:d1:
ec:03:11:16:1f:35:47:9f:8d:a9:7e:8a:05:2a:70:60:85:9f:
d7:a3:61:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:03:46 2025 by rpki-client