Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yVshRCuZuKbxE2EvwPsy2l9siBM.cer
File: yVshRCuZuKbxE2EvwPsy2l9siBM.cer (raw, json)
Hash identifier: yrDVH61BtsOsZ9GBGlH+zecbirYEO8QFrPB1rZVjUBc=
Subject key identifier: C9:5B:21:44:2B:99:B8:A6:F1:13:61:2F:C0:FB:32:DA:5F:6C:88:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29E2253BA09788085A6075D016E82F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/yVshRCuZuKbxE2EvwPsy2l9siBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 137.121.0.0/16
Validation: Failed, certificate revoked on Wed 21 Feb 2024 11:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e2:25:3b:a0:97:88:08:5a:60:75:d0:16:e8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c95b21442b99b8a6f113612fc0fb32da5f6c8813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:84:78:9e:11:85:e9:ac:4a:98:01:f6:c2:
84:ac:b1:65:01:fc:5b:5b:93:96:1a:e0:72:8d:d6:
3a:b6:17:1f:e7:6d:3c:a8:78:00:f4:a6:38:b5:91:
87:86:b7:03:29:a7:79:b0:b8:2d:8f:34:63:c4:bc:
c1:96:e9:66:81:d1:4f:fd:1d:49:86:cf:54:53:d6:
a3:83:05:31:6c:04:86:f5:e3:74:4d:74:25:99:f3:
56:54:95:23:05:69:71:1f:5a:f4:07:3f:cd:ac:49:
b3:db:81:68:48:ed:0b:da:20:33:0d:2f:c5:05:f8:
4c:32:ef:5e:56:03:75:98:cb:9b:87:aa:7d:b7:44:
ee:7e:3c:5c:8f:02:b7:4d:ce:e6:a5:c4:85:d9:fe:
fc:46:fe:da:61:a4:76:6f:55:16:00:50:30:68:31:
c6:e7:59:48:dd:1d:92:86:89:03:23:e5:8a:42:af:
21:36:ce:a8:2e:5f:4b:be:c6:01:aa:4f:72:88:7c:
57:9a:38:f5:c1:cc:9e:67:c1:44:f2:e3:64:1c:7b:
b4:91:cc:13:b8:d8:05:48:11:65:f1:18:30:63:30:
f3:82:f1:36:a8:0a:16:79:22:a5:34:9e:f2:04:61:
fb:e7:4d:77:3a:4c:ce:74:43:f1:94:9e:5b:2b:8a:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:21:44:2B:99:B8:A6:F1:13:61:2F:C0:FB:32:DA:5F:6C:88:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/yVshRCuZuKbxE2EvwPsy2l9siBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:27:7a:60:0e:c1:d7:c1:b4:bc:6d:40:20:f0:9c:d3:07:2b:
f6:b4:7f:2c:d6:09:a0:ca:8d:f6:a8:77:63:e3:a2:53:84:bf:
63:d2:65:0c:f1:38:35:04:5e:f7:4c:1b:b1:de:b0:7b:2c:74:
8a:6b:2e:91:ef:aa:3b:c9:0f:b9:41:79:51:fe:76:b9:42:35:
ae:9d:51:9e:fc:7f:ad:77:85:1e:15:75:40:47:dd:7b:86:cc:
fa:e7:29:40:5a:cd:ce:79:24:d8:d0:f0:e7:d7:f8:76:6f:da:
e7:52:0f:8b:09:06:ad:f6:86:6b:c6:74:7d:37:20:d0:94:69:
ee:0f:57:6d:12:4c:2d:73:ba:7f:35:a9:02:a7:90:76:d7:18:
bf:83:27:de:93:92:9a:27:68:5e:23:4b:6a:96:08:5f:be:de:
b8:66:cc:4d:db:89:14:03:35:ab:55:1d:b3:f5:8b:bd:d3:a1:
a6:05:89:eb:45:64:9b:eb:2b:7e:8b:62:cb:8c:3d:77:3d:33:
0f:a9:5e:ea:a4:fe:f1:67:71:d5:83:ea:46:47:41:5e:58:84:
e3:ac:8a:d2:d9:9f:09:47:c3:2e:31:9b:45:01:77:55:a8:e0:
1c:30:ae:75:29:63:c0:65:e0:12:9f:cf:c4:c4:bd:3e:4f:37:
f1:b2:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:13:42 2025 by rpki-client