Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lA4qcW5diYld_qLvKQMIHe3pnGg.cer
File: lA4qcW5diYld_qLvKQMIHe3pnGg.cer (raw, json)
Hash identifier: cc9FjHvQNZk2tTa1oiWgb3eh+ioMWZS8kJZCf8ivgPg=
Subject key identifier: 94:0E:2A:71:6E:5D:89:89:5D:FE:A2:EF:29:03:08:1D:ED:E9:9C:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB1C51F6337993AF6FF51F82F4E51E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:970::/48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 08:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:1c:51:f6:33:79:93:af:6f:f5:1f:82:f4:e5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=940e2a716e5d89895dfea2ef2903081dede99c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:9a:f0:91:87:99:a5:3a:b2:d0:40:47:7f:
7a:3d:c4:14:f2:99:9e:c2:20:c7:f6:e7:2b:4d:d6:
5e:f3:12:88:b1:d4:21:16:6e:f2:5e:59:ee:88:5b:
82:14:e6:ac:11:b9:81:69:fa:2f:86:3a:c5:bf:3d:
39:09:73:36:84:a2:de:74:8e:a3:67:dc:a2:1f:7b:
20:a5:52:d8:10:34:46:15:91:90:0a:8e:02:be:c5:
da:dd:ed:c0:4f:33:4e:46:1b:19:2b:f7:0a:24:74:
49:fe:31:1f:7b:73:b6:a9:91:c5:a1:b6:5b:5e:19:
07:8d:60:3c:2f:f6:df:50:8b:84:44:7a:8b:1a:94:
01:81:f2:6c:83:02:ba:54:bb:07:ef:5d:18:8b:28:
f0:77:64:8a:85:e9:95:6e:dc:23:d6:9b:ae:19:07:
c3:83:57:48:01:e8:12:6f:f6:91:b7:87:4e:57:c2:
31:dc:b4:ca:c1:21:bc:7f:17:8d:c3:90:88:ee:0a:
6b:d7:a2:10:8d:38:37:2d:b8:b4:da:04:5f:2d:dc:
72:80:11:4c:16:b5:48:de:5e:ca:1b:f0:dc:75:8f:
08:31:62:6f:9b:47:eb:e6:ed:d9:36:f8:b4:73:79:
18:37:56:fb:da:53:a1:da:5d:2a:4d:ac:4b:2c:f2:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0E:2A:71:6E:5D:89:89:5D:FE:A2:EF:29:03:08:1D:ED:E9:9C:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:970::/48
Signature Algorithm: sha256WithRSAEncryption
39:b0:f8:70:69:00:a7:95:f4:af:6d:49:ac:40:16:3b:ea:52:
f6:60:90:a1:75:7d:dc:d6:bd:36:c3:1a:df:f4:8b:79:8d:c1:
04:91:12:df:d1:99:64:57:16:41:31:24:a8:69:df:1b:d3:35:
e7:4d:07:cc:94:32:d6:7f:51:9d:fe:3a:8a:4e:17:d9:fe:69:
9b:60:db:16:b1:95:7d:d4:38:83:b3:3d:2c:92:33:0a:e9:db:
24:29:17:bf:0d:c2:16:fa:26:52:33:be:50:60:0f:f7:59:6c:
93:3a:c5:84:ab:36:08:f6:fc:16:6b:a8:34:fb:3a:8f:5b:4c:
8d:6c:4e:e5:1d:b6:97:f3:81:5a:a8:06:4d:56:26:54:b0:ca:
cb:41:34:b1:e1:1f:bc:b5:82:05:a3:25:6d:a1:41:6b:21:7e:
e1:48:de:10:68:06:d2:04:5d:71:37:2b:24:2e:2a:68:8f:5b:
b7:70:a6:d6:f7:0a:58:73:44:0e:89:de:38:af:35:fa:6b:9c:
a4:b6:8c:96:05:9d:61:fe:1c:d9:2c:9c:44:48:9b:cf:d8:e7:
9b:52:59:77:21:57:b2:84:af:07:58:21:a8:69:26:50:43:5b:
a7:d8:d3:d7:22:5b:98:6d:6a:2b:35:6e:a9:23:c8:2d:2e:c6:
d8:43:2c:0d
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQi+xxR9jN5k69v9R+C9OUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDBlMmE3MTZlNWQ4OTg5NWRmZWEyZWYyOTAzMDgxZGVkZTk5YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7ua8JGHmaU6stBAR396PcQU8pme
wiDH9ucrTdZe8xKIsdQhFm7yXlnuiFuCFOasEbmBafovhjrFvz05CXM2hKLedI6j
Z9yiH3sgpVLYEDRGFZGQCo4CvsXa3e3ATzNORhsZK/cKJHRJ/jEfe3O2qZHFobZb
XhkHjWA8L/bfUIuERHqLGpQBgfJsgwK6VLsH710Yiyjwd2SKhemVbtwj1puuGQfD
g1dIAegSb/aRt4dOV8Ix3LTKwSG8fxeNw5CI7gpr16IQjTg3Lbi02gRfLdxygBFM
FrVI3l7KG/DcdY8IMWJvm0fr5u3ZNvi0c3kYN1b72lOh2l0qTaxLLPIA2QIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFJQOKnFuXYmJXf6i7ykDCB3t6ZxoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzg1MWQ2
Ni1iOTU2LTRiY2UtOGJkNi01NDUxNDQxZWE2MzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvODUxZDY2
LWI5NTYtNGJjZS04YmQ2LTU0NTE0NDFlYTYzMy8xL2xBNHFjVzVkaVlsZF9xTHZL
UU1JSGUzcG5HZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAlwMA0GCSqGSIb3DQEBCwUAA4IBAQA5
sPhwaQCnlfSvbUmsQBY76lL2YJChdX3c1r02wxrf9It5jcEEkRLf0ZlkVxZBMSSo
ad8b0zXnTQfMlDLWf1Gd/jqKThfZ/mmbYNsWsZV91DiDsz0skjMK6dskKRe/DcIW
+iZSM75QYA/3WWyTOsWEqzYI9vwWa6g0+zqPW0yNbE7lHbaX84FaqAZNViZUsMrL
QTSx4R+8tYIFoyVtoUFrIX7hSN4QaAbSBF1xNyskLipoj1u3cKbW9wpYc0QOid44
rzX6a5yktoyWBZ1h/hzZLJxESJvP2OebUll3IVeyhK8HWCGoaSZQQ1un2NPXIluY
bWorNW6pI8gtLsbYQywN
-----END CERTIFICATE-----
Generated at Fri Jun 13 04:40:47 2025 by rpki-client