Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o3QjR8c-ez1QD2D7ZQuCoBwh90k.cer
File: o3QjR8c-ez1QD2D7ZQuCoBwh90k.cer (raw, json)
Hash identifier: T0dem72HeE7hM/dhyHZFYGepFvAxrF50xXk/IyybJZA=
Subject key identifier: A3:74:23:47:C7:3E:7B:3D:50:0F:60:FB:65:0B:82:A0:1C:21:F7:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D65E987E22378E803D1707067608B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.45.71.0/24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 09:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5e:98:7e:22:37:8e:80:3d:17:07:06:76:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3742347c73e7b3d500f60fb650b82a01c21f749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:1f:bf:99:6d:17:e0:df:e3:fd:d6:9f:74:
12:26:aa:a1:90:b0:4c:47:df:af:77:f7:80:a6:76:
86:e3:8a:8b:d4:42:0d:e9:2b:7d:e7:c4:e4:5a:12:
d7:66:74:15:5f:9c:6b:f2:6a:ce:1b:b6:41:19:9f:
e6:2b:00:b8:6c:1e:1d:da:55:2a:aa:06:f2:e8:08:
a7:f8:7a:b7:8d:a6:1c:e9:81:0a:30:61:79:2a:bb:
62:80:12:55:13:90:01:9b:2c:2f:e4:47:69:25:6a:
d7:c1:6f:80:a7:f8:8d:56:5e:8b:d6:a2:1f:a5:32:
b3:df:6b:4c:d8:73:77:6f:35:38:7f:8f:ac:41:2e:
e3:d1:ba:e0:0b:7d:eb:7f:25:ae:2e:c2:9b:38:dc:
c0:94:44:bd:c8:7e:78:b0:73:94:f1:6b:79:c6:a6:
f1:17:14:00:42:7e:27:eb:4b:97:66:2c:50:08:a1:
47:99:f4:99:9f:e3:e2:7e:15:4e:8a:64:dc:fa:4c:
64:82:28:b0:2d:e2:03:b3:bc:1a:e3:42:36:1f:5a:
73:1a:a3:f0:d6:73:d9:f6:f8:f3:62:7d:a3:45:26:
16:9a:fa:b4:80:37:4e:48:46:26:9e:c5:f2:a5:b4:
fd:f9:68:dc:66:e8:97:5c:01:78:44:f4:f1:c6:87:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:74:23:47:C7:3E:7B:3D:50:0F:60:FB:65:0B:82:A0:1C:21:F7:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:13:07:81:7c:41:28:69:c4:d1:34:0d:43:ee:a0:78:bf:de:
52:19:73:3d:34:ad:9f:de:60:ce:6d:33:a8:17:19:c7:a7:9e:
0b:bf:a5:73:c7:81:1b:59:b0:7d:e9:41:9f:34:46:5b:0a:ff:
7c:8c:73:9d:49:1e:5d:c1:bc:d2:d2:22:3b:9b:cc:33:03:26:
a0:23:f6:0b:01:ab:fe:88:b7:fb:c9:05:a0:dd:4f:5e:2b:29:
5a:b6:42:b8:63:18:bf:7b:b8:57:3c:89:84:bd:2b:c7:f5:17:
56:b2:a5:35:c7:bc:01:bc:f5:27:dc:ea:a1:b6:b7:21:a5:bf:
d7:7c:16:c5:e5:de:ed:d2:c7:e8:8e:65:45:c0:97:18:95:95:
eb:39:ef:86:df:9a:bf:9a:c1:90:c3:2c:b1:7c:f4:19:69:7e:
b7:0a:8a:bd:21:d9:c9:12:7b:06:cb:e4:09:c4:47:fb:f9:82:
ec:4e:b4:61:21:50:06:81:fd:03:b9:ee:20:1e:27:35:b2:e3:
18:35:ce:31:2a:b0:61:18:75:5a:e8:71:fc:93:5c:a2:f3:19:
3d:4a:66:58:89:db:ea:64:51:41:83:8a:b6:59:ce:a3:de:06:
90:c0:e7:09:4d:01:45:15:f8:21:8e:b0:84:de:03:ac:c7:0d:
6a:a4:9a:e3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQg1l6YfiI3joA9FwcGdgi0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzc0MjM0N2M3M2U3YjNkNTAwZjYwZmI2NTBiODJhMDFjMjFmNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrsfv5ltF+Df4/3Wn3QSJqqhkLBM
R9+vd/eApnaG44qL1EIN6St958TkWhLXZnQVX5xr8mrOG7ZBGZ/mKwC4bB4d2lUq
qgby6Ain+Hq3jaYc6YEKMGF5KrtigBJVE5ABmywv5EdpJWrXwW+Ap/iNVl6L1qIf
pTKz32tM2HN3bzU4f4+sQS7j0brgC33rfyWuLsKbONzAlES9yH54sHOU8Wt5xqbx
FxQAQn4n60uXZixQCKFHmfSZn+PifhVOimTc+kxkgiiwLeIDs7wa40I2H1pzGqPw
1nPZ9vjzYn2jRSYWmvq0gDdOSEYmnsXypbT9+WjcZuiXXAF4RPTxxoe9ewIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKN0I0fHPns9UA9g+2ULgqAcIfdJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzVlOWRm
Ny0xYzg4LTQ0NDktOTNkYS1iNjQyNzM5NWQyOWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvNWU5ZGY3
LTFjODgtNDQ0OS05M2RhLWI2NDI3Mzk1ZDI5Zi8xL28zUWpSOGMtZXoxUUQyRDda
UXVDb0J3aDkway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwi1HMA0GCSqGSIb3DQEBCwUAA4IBAQAvEweB
fEEoacTRNA1D7qB4v95SGXM9NK2f3mDObTOoFxnHp54Lv6Vzx4EbWbB96UGfNEZb
Cv98jHOdSR5dwbzS0iI7m8wzAyagI/YLAav+iLf7yQWg3U9eKylatkK4Yxi/e7hX
PImEvSvH9RdWsqU1x7wBvPUn3Oqhtrchpb/XfBbF5d7t0sfojmVFwJcYlZXrOe+G
35q/msGQwyyxfPQZaX63Coq9IdnJEnsGy+QJxEf7+YLsTrRhIVAGgf0Due4gHic1
suMYNc4xKrBhGHVa6HH8k1yi8xk9SmZYidvqZFFBg4q2Wc6j3gaQwOcJTQFFFfgh
jrCE3gOsxw1qpJrj
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:36:42 2025 by rpki-client