Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oYTrB7vAzG8zAZhvg5LkifdVSyo.cer
File: oYTrB7vAzG8zAZhvg5LkifdVSyo.cer (raw, json)
Hash identifier: Yo1ZOae2HOAZWHssrFuIJYBdHLm/0AH3begTqNZz8cE=
Subject key identifier: A1:84:EB:07:BB:C0:CC:6F:33:01:98:6F:83:92:E4:89:F7:55:4B:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019306C43B39566FA93ABB83780C7D4AEE1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/8f0c68-b22f-4d7e-90eb-e8244e36a9ec/1/oYTrB7vAzG8zAZhvg5LkifdVSyo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/8f0c68-b22f-4d7e-90eb-e8244e36a9ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 Nov 2024 13:15:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.229.249.0/24
Validation: Failed, certificate revoked on Fri 20 Dec 2024 12:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:c4:3b:39:56:6f:a9:3a:bb:83:78:0c:7d:4a:ee:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 7 13:15:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a184eb07bbc0cc6f3301986f8392e489f7554b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:ad:76:e6:04:74:45:47:2e:e1:25:67:b9:
2c:ef:ae:ad:3e:9d:45:94:d8:14:34:31:d6:c7:cb:
0e:78:97:13:56:60:a6:a0:83:ac:14:2f:93:e2:33:
06:91:86:c3:86:f6:13:50:54:fd:fe:45:fe:82:7c:
9d:78:7c:92:23:ae:43:f2:fe:10:60:44:f0:98:70:
5c:91:46:14:3b:0c:34:b5:c0:c6:d3:0c:b1:97:ce:
fe:8a:40:4b:1c:7a:97:65:7a:0a:cd:a0:f9:8a:53:
4c:98:29:ef:1e:21:72:fc:e7:21:c2:53:01:0f:d6:
ff:c9:b8:d6:d0:0c:7a:84:26:c3:01:7e:61:55:95:
a4:73:07:52:70:73:6e:32:a0:dd:b1:74:66:c8:8d:
1b:f8:c3:41:13:ec:d5:52:1c:d0:c1:a1:cd:e5:94:
dd:7d:b1:4a:48:26:0e:53:4b:da:a2:e2:70:8b:e9:
d1:f1:c6:31:e5:bb:11:90:71:61:7c:db:1f:68:55:
3c:64:d0:dc:f2:61:22:f5:3f:f0:13:0d:76:f2:18:
2a:14:1f:1b:0d:3c:60:0d:04:3f:15:aa:6b:ad:fe:
bd:9b:b3:52:0e:21:c5:9b:b2:45:b9:87:19:ea:ee:
c4:6e:42:46:1d:51:96:e7:ba:0a:ac:0d:43:f6:f6:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:84:EB:07:BB:C0:CC:6F:33:01:98:6F:83:92:E4:89:F7:55:4B:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8f0c68-b22f-4d7e-90eb-e8244e36a9ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8f0c68-b22f-4d7e-90eb-e8244e36a9ec/1/oYTrB7vAzG8zAZhvg5LkifdVSyo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e1:65:f4:17:52:2d:42:76:e6:04:e0:28:cf:39:71:94:8c:
ad:1e:83:d6:a3:7f:10:e3:40:99:db:42:bb:de:3c:da:35:d7:
b0:1a:fb:50:e9:a5:90:6d:d8:f7:87:10:aa:2e:08:3b:53:ed:
9d:54:77:2d:27:4d:a3:78:ea:32:d2:f7:74:43:5b:3b:44:eb:
41:fc:4b:f2:99:9e:ed:28:68:f0:06:4e:13:c1:40:dd:9c:81:
44:46:3f:59:ef:3f:a5:c7:0d:89:74:ac:70:1e:df:92:2b:30:
e6:31:d2:7b:48:ef:f5:c5:8f:73:13:23:88:4a:e6:7f:b9:c8:
ea:2e:f4:5a:26:fc:c6:cf:56:de:86:fb:67:c8:09:cb:09:c5:
19:c3:71:28:6d:cb:f9:91:47:6d:6c:eb:95:74:b6:ee:81:76:
6f:6d:24:20:18:6c:cd:d4:36:f8:5f:d7:5b:e8:f0:64:ab:2c:
ba:84:d0:2e:a9:bf:19:7b:97:a0:fd:0b:86:43:69:8b:ff:c8:
57:ef:87:31:9a:cb:7f:c2:04:74:93:23:d8:7f:31:a9:1b:56:
47:89:d4:8e:55:55:08:cc:57:15:6c:d1:04:4a:b0:d0:0b:96:
b4:23:2a:64:34:b7:fb:e3:15:6f:5f:ea:66:a5:eb:e7:70:10:
d6:82:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:53:25 2025 by rpki-client