Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rFu6hrF3Sk5X9H_C_gs3jUZdI0Q.cer
File: rFu6hrF3Sk5X9H_C_gs3jUZdI0Q.cer (raw, json)
Hash identifier: XRXZVEKlZOdKLuXp20R14r5QWnOOfQnrCvhosQkxe4Q=
Subject key identifier: AC:5B:BA:86:B1:77:4A:4E:57:F4:7F:C2:FE:0B:37:8D:46:5D:23:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5D5E11AE3B1740C75B22E6931343F25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/36/AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.mft
caRepository: rsync://0.sb/repo/sb/36/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 16:22:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.147.221.0/24
IP: 2a00:8340::/29
Validation: Failed, certificate revoked on Mon 30 Dec 2024 08:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:d5:e1:1a:e3:b1:74:0c:75:b2:2e:69:31:34:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:22:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac5bba86b1774a4e57f47fc2fe0b378d465d2344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:84:e7:1d:ab:22:96:70:ad:83:8f:00:1c:46:
92:72:3b:e3:11:b7:67:14:96:43:94:47:66:86:92:
a0:90:9a:45:c3:c5:74:65:71:88:49:cf:f1:95:7e:
e2:82:75:a3:9b:bd:37:97:06:49:7d:2e:5e:87:72:
d9:ed:90:e0:c4:ec:38:90:9b:ca:fe:5f:80:a9:30:
54:a1:ff:69:51:73:88:69:4b:30:b6:e3:21:02:01:
99:4d:aa:bc:b6:c6:1d:f5:94:fa:3e:69:48:0e:48:
a2:cb:8f:7c:c4:15:86:49:d5:24:10:aa:40:5a:8f:
52:0a:4a:4e:29:0c:0e:a9:b9:10:e4:2b:af:a7:40:
4d:79:9c:dd:6e:e8:3c:8b:1c:ff:0e:d6:2a:e2:00:
bf:21:da:fc:71:49:93:c5:a6:b7:45:e8:07:0b:b6:
73:91:d8:fa:60:a8:da:50:56:8c:a4:55:e5:f7:c2:
db:46:dc:50:b3:56:fc:6d:76:59:b0:2c:47:78:2f:
f0:4a:f5:6a:28:0e:13:34:f9:cc:e4:05:a5:c0:29:
a5:06:71:2c:54:97:62:eb:78:ec:44:9e:ac:56:c0:
6a:22:dd:69:9f:79:66:9d:68:26:66:51:91:c9:7f:
33:c3:d0:2f:5a:e7:4f:8a:8a:7c:37:0a:27:b6:17:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:BA:86:B1:77:4A:4E:57:F4:7F:C2:FE:0B:37:8D:46:5D:23:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/36/
RPKI Manifest - URI:rsync://0.sb/repo/sb/36/AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.221.0/24
IPv6:
2a00:8340::/29
Signature Algorithm: sha256WithRSAEncryption
03:64:23:88:30:43:e4:9c:ca:3c:0d:f0:c7:06:6f:1c:c5:ba:
36:f6:2b:60:9c:c2:2c:dd:aa:a6:84:cc:a1:e5:de:3b:38:ce:
bb:5d:ba:87:05:4a:04:d4:ec:02:57:85:94:cb:2e:21:cc:3b:
a5:c2:81:13:ed:94:75:59:bd:a9:4b:9c:f7:d6:b5:9b:59:0a:
ab:15:5c:8b:4e:10:71:08:d1:89:61:00:6a:a0:33:c4:11:67:
03:17:66:54:ac:b0:34:26:22:cc:84:56:08:3b:0f:66:9e:b3:
56:bc:08:f8:a5:c7:54:f3:d2:5d:80:56:ed:2a:a0:09:3f:33:
e0:14:3a:5d:70:a9:9a:7f:7b:cf:23:1f:68:72:aa:2a:08:bb:
8f:8d:f4:7b:d7:87:2c:7b:cc:57:3b:8f:bd:17:92:46:6d:61:
87:3f:8a:93:9d:02:6a:56:8f:47:5c:be:91:f4:a9:41:7b:46:
a1:46:90:ef:2a:4a:01:3d:60:7d:20:87:4b:07:09:e2:c1:d0:
2e:24:27:9b:c0:4f:a3:ea:d8:6c:a9:5e:0a:9d:af:46:48:70:
98:78:cd:93:99:29:f1:33:61:35:fc:94:1d:70:06:25:e8:a6:
e7:02:ca:e8:e3:8f:ae:74:48:c0:12:bd:e7:28:6a:c8:16:af:
57:86:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:54 2025 by rpki-client