Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
File: sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer (raw, json)
Hash identifier: KazS07A9POISzEgHoUd9kH6REOvjsah4sdWTzHQVFpE=
Subject key identifier: B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D588347C0B8DDAE3918820B78D25E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.53.16.0/22
IP: 2a04:c980::/29
Validation: Failed, certificate revoked on Fri 31 Jan 2025 13:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:58:83:47:c0:b8:dd:ae:39:18:82:0b:78:d2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:d3:b8:58:8f:dc:63:b8:0e:7c:14:51:16:
c1:57:81:bb:cf:59:fd:e0:cd:da:9b:f1:57:fe:74:
f7:5c:b4:63:71:d6:2e:a2:8c:2c:80:e2:55:c0:d0:
f0:30:66:cb:3e:10:57:3c:33:5a:a8:cf:b8:07:56:
01:92:cc:7c:06:35:bc:99:28:ba:02:fe:d9:38:8e:
8b:6d:10:26:7a:ca:65:a7:f6:20:a5:55:2c:ff:61:
d3:a4:cb:4a:c7:a3:c3:aa:0e:d3:85:7a:3d:69:01:
b4:88:fa:da:72:35:18:c5:b2:76:77:02:44:e6:af:
6f:32:f2:8e:fb:17:58:45:f7:c2:6b:cc:9c:b4:c0:
8c:b8:07:a1:db:fe:f0:42:a5:03:4e:4e:54:ad:85:
47:99:ae:bd:e3:1b:63:7c:86:e7:f6:10:3c:a0:c6:
5a:b0:f4:a7:a6:6e:63:83:4d:21:60:f7:ef:79:b8:
ca:1d:8d:9b:74:ad:7e:69:12:57:47:5e:ef:b0:ae:
8e:d0:d0:96:05:82:f3:44:60:a9:d2:8c:85:48:66:
3e:1a:dc:f3:11:57:9b:2b:fe:93:8b:75:1b:1d:3a:
64:9e:ea:cf:8b:2d:8c:a6:05:a9:7f:67:2c:30:d7:
71:ba:f3:8c:b4:ca:b9:c9:50:20:86:08:e7:5d:ec:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.16.0/22
IPv6:
2a04:c980::/29
Signature Algorithm: sha256WithRSAEncryption
82:36:ce:84:0a:27:29:27:e5:bc:6d:7d:76:8d:8e:c8:9d:cf:
2d:10:ea:00:c2:8a:8f:85:85:f0:e0:e1:af:cf:70:26:88:23:
0d:cf:96:a1:4a:70:d2:40:27:24:36:20:55:1a:1e:9c:e1:53:
6b:41:3b:33:4b:a8:08:d6:80:30:48:7d:a4:29:79:93:33:79:
11:d2:86:65:3c:dc:d3:2e:79:a6:65:a7:47:1a:ac:ab:37:90:
e7:e2:98:78:d7:eb:d0:ff:b7:07:96:ef:25:00:c2:73:f7:b9:
85:2e:c6:2f:b1:12:e2:04:92:1f:c1:a9:89:f3:bc:f3:2c:f1:
3a:0f:9a:df:d5:97:51:92:e3:75:93:bd:23:2a:3f:23:7e:43:
a8:f0:e3:c4:5c:68:6a:b2:df:e8:f0:61:f3:76:eb:0a:2e:f5:
25:07:cb:ff:27:80:e3:6a:b1:48:b3:65:49:4f:05:e1:ab:46:
1c:4f:a2:19:61:d6:b3:a0:be:1e:be:45:32:ee:bf:c1:a3:33:
ce:8d:98:59:46:b4:14:86:db:cd:3a:e9:96:54:18:14:7e:e2:
50:af:a3:ec:0f:d3:ff:b1:0a:d7:83:0b:cc:5d:3e:aa:fd:0e:
57:7e:09:9c:ea:44:42:5a:2c:c1:c7:ff:e8:05:b8:c7:0d:42:
5f:a2:03:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:29:39 2025 by rpki-client