Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/okUQJcYzmmEXEe_8LPg-PXnybug.cer
File: okUQJcYzmmEXEe_8LPg-PXnybug.cer (raw, json)
Hash identifier: kY0lDjImCr1Amb9P6DgXkO1bNWbhXGH54kkdaCwaRJA=
Subject key identifier: A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942368CD4B75A15CB2A493731F60E5C13C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.98.158.0/24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 15:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:cd:4b:75:a1:5c:b2:a4:93:73:1f:60:e5:c1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2451025c6339a611711effc2cf83e3d79f26ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:c4:be:7e:92:7c:d3:17:4b:fb:76:82:53:
51:8c:f1:5e:e4:1d:ee:2f:45:35:a4:3d:5a:8f:b1:
4e:d4:33:1f:07:a4:42:b2:89:af:de:1f:76:0b:57:
4c:b0:3a:ea:a3:11:ad:cd:9e:bd:53:90:2d:43:a8:
53:28:d7:15:b6:64:97:c1:e8:84:40:0a:5b:2f:32:
f7:05:3b:bb:99:74:d8:b2:91:14:84:aa:3c:25:a0:
fa:c9:1f:67:c7:84:05:37:d1:4f:f3:79:89:bd:fa:
b8:40:46:5e:29:da:09:8a:99:93:65:4b:2d:56:64:
30:51:e3:ff:e5:b8:d2:f9:45:d9:bd:cc:bd:4d:f3:
8c:13:ee:fb:a0:33:54:46:fa:9c:33:c9:20:95:92:
f3:51:04:30:29:47:9d:0e:32:11:c8:5b:34:a9:e9:
5e:50:3e:cd:21:53:20:52:48:72:b6:ee:7c:e2:f8:
7d:90:3d:64:a7:48:71:6f:4b:ce:10:93:5a:b4:f4:
9f:68:4c:82:bd:e0:b8:6b:86:27:62:e7:18:72:7a:
b1:ba:67:2d:60:fe:4c:5b:10:e2:e8:ce:df:2e:bb:
79:66:db:89:38:63:df:5c:cc:dc:39:a2:21:99:14:
5d:c6:96:99:f3:eb:6b:83:05:bc:02:a2:2c:9e:e7:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.158.0/24
Signature Algorithm: sha256WithRSAEncryption
16:73:61:09:f5:38:f2:25:a8:d2:65:5c:04:44:6e:42:a4:64:
c5:b2:1e:79:ea:48:e3:9e:f2:b2:d1:7a:44:6a:cc:be:cd:55:
9b:c5:3c:ff:63:89:c8:84:17:c7:aa:8c:cf:3b:0c:96:06:fd:
08:18:9b:ac:89:6b:3b:1f:f6:8c:72:b7:6f:65:9d:51:32:df:
b0:a9:3a:13:78:10:f5:23:f5:f8:ee:f8:3c:c1:27:2f:ca:20:
8f:9a:57:cc:e6:f8:1c:52:c7:ff:e2:81:49:76:dc:b7:26:62:
10:97:d9:42:f7:f1:17:f7:5a:2a:af:31:dc:76:62:c1:b3:c4:
ab:f9:55:07:4b:79:c9:d6:43:8f:61:7a:43:2e:c6:16:41:ad:
93:47:87:e7:99:78:b4:83:4e:c4:1c:39:95:c6:7f:ec:49:39:
98:07:bb:b5:90:a0:89:2a:1c:3f:27:02:1e:99:b5:bd:83:e7:
e7:63:41:29:ad:4c:7e:07:29:43:70:2a:0d:68:85:62:6a:c6:
55:c8:ae:bb:76:30:00:ca:11:7a:03:6d:28:33:a2:20:8e:77:
cf:0c:9f:3c:88:7c:8f:66:cf:36:33:f7:9e:b8:08:c1:17:9a:
e6:60:2e:2e:19:09:a0:62:97:1c:35:67:d9:fe:9b:7e:f2:b0:
ae:10:75:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:58 2025 by rpki-client