Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
File: zNdhWb_Z4zdSPukw898RHWuucwY.cer (raw, json)
Hash identifier: eJOsi76k2I0/QMJUWicAl9WMrZbkwIYx0Hyz6enXg+k=
Subject key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196FCAC37BFEE0E358ACB98A56FC369D283
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 May 2025 10:24:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.150.240.0/20
IP: 91.188.244.0/24
IP: 91.214.117.0 -- 91.214.119.255
IP: 91.241.180.0/23
IP: 176.103.80.0/20
IP: 176.119.142.0/24
IP: 194.187.100.0/22
IP: 195.3.180.0/23
IP: 195.95.216.0/23
Validation: Failed, certificate revoked on Mon 26 May 2025 11:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:ac:37:bf:ee:0e:35:8a:cb:98:a5:6f:c3:69:d2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 23 10:24:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:df:50:3c:c8:32:a0:34:00:3a:b4:1f:ba:
2a:72:25:e0:94:ba:de:47:dc:3a:4b:e7:b2:02:8a:
c1:a2:ee:9e:c7:4c:66:94:cf:d0:92:ca:6b:c4:bc:
4e:50:4d:72:8d:b9:a9:5b:83:2a:17:14:14:c2:25:
db:81:2b:ac:52:90:3f:1f:ca:64:f9:b0:d0:e9:f8:
1f:d2:42:05:3e:88:05:a2:7e:72:30:e2:c3:90:4e:
ed:bd:f6:b7:73:05:93:87:a1:01:42:25:4a:9d:2c:
93:66:1b:3f:6c:62:bd:10:d9:49:99:7c:46:fe:5a:
29:8a:00:47:e3:ee:43:3c:bd:04:11:bc:50:41:85:
cf:b7:02:bf:21:17:f7:cd:d7:b8:bd:71:53:66:2c:
0f:bb:8a:0f:87:87:fd:d6:48:b9:f8:6a:c9:09:de:
dc:a6:6c:17:50:a8:94:8c:5a:06:6e:a7:16:f1:2d:
ff:15:f6:95:0f:74:cf:d8:e0:1c:06:b5:99:b2:f9:
e1:37:11:92:e7:8b:b6:ab:f6:62:e0:05:d7:48:ca:
9c:9f:c1:7a:22:ab:04:89:c3:61:2a:fe:ae:62:66:
c1:ea:4f:30:f2:fb:c5:de:0a:e1:20:92:58:68:80:
2b:b6:a5:d8:8c:a8:ec:c5:c5:49:38:a3:49:82:06:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.240.0/20
91.188.244.0/24
91.214.117.0-91.214.119.255
91.241.180.0/23
176.103.80.0/20
176.119.142.0/24
194.187.100.0/22
195.3.180.0/23
195.95.216.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:75:b2:46:29:fd:ac:eb:74:4e:3c:43:b2:c0:57:3c:25:0c:
59:46:93:66:1b:aa:a3:37:5e:50:8d:71:8f:71:a6:34:ef:86:
9a:fa:c0:d8:7f:a0:9b:3f:e4:80:39:e1:74:a2:3a:34:ab:cd:
ad:19:c8:81:1e:42:dd:24:6e:59:e0:42:64:f7:84:e3:8d:d1:
b4:db:10:ac:63:c8:de:52:67:0c:a2:e7:08:5c:9e:ee:50:77:
a9:68:51:54:62:85:eb:e9:95:dd:69:54:73:61:29:f8:61:ba:
7c:1d:1d:d7:bb:8a:0c:17:81:12:f6:dc:ca:af:2b:77:5a:24:
6f:a1:92:bd:b5:da:18:91:3c:0b:12:e2:51:f6:f0:83:a2:c1:
8c:7f:70:ae:20:2d:e4:3f:4f:ea:98:39:a4:4a:1f:42:ef:64:
cd:6c:4c:db:da:7f:2f:28:3c:09:84:93:8f:2d:2a:89:94:eb:
28:81:21:27:55:fb:6d:b2:16:b3:0d:e1:87:e6:37:c8:45:08:
8d:ef:56:e7:e4:4b:ea:3b:f5:c9:ea:d9:d4:ca:64:d5:29:45:
c4:7d:a1:0c:54:cf:1a:4d:e8:00:53:fa:45:f3:64:ee:64:b7:
51:a9:13:99:c3:47:df:be:a5:29:b2:b1:52:4e:cb:c4:f3:48:
72:81:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:14:51 2025 by rpki-client