
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
File: 0D_r_VN-Mgy77CtOImd7muZvYE4.cer (raw, json)
Hash identifier: vIYG1X3h6jHnjW7Y0HYdyLohd6aWFqOqyZ4imG/Ddl0=
Subject key identifier: D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF5222C8C1B4DBE48D9B4138EA8289E80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 13:51:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.91.213.0/24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 10:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:22:2c:8c:1b:4d:be:48:d9:b4:13:8e:a8:28:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 29 13:51:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:ad:d0:e3:ab:7e:c4:76:19:b1:95:10:7c:
2d:73:2a:91:6a:fc:50:7d:9a:fd:e2:8f:9e:da:c7:
26:4a:b6:69:a2:30:be:34:67:3b:cf:e8:f4:b5:82:
3e:a3:26:73:43:be:16:3f:72:1b:07:3b:01:b2:9b:
c1:4f:74:8f:cd:36:4a:d0:94:5a:e6:2b:5d:6d:63:
f2:38:20:91:bb:80:6f:8f:e5:0c:7b:88:b9:62:c0:
ca:53:46:60:7e:85:e7:e9:9c:fa:af:da:a3:20:55:
03:21:50:3c:2a:da:74:5f:0e:91:e6:85:8f:03:c9:
f5:ae:42:4f:06:f9:25:bb:63:f2:db:26:ea:c6:bf:
71:da:c1:f7:56:bd:4a:fe:e8:fc:c8:7f:55:70:05:
cd:0a:35:5f:5f:36:cd:85:8a:9e:f3:b6:95:9a:b6:
07:21:17:b0:e1:61:02:65:a4:3e:b9:a2:0e:75:76:
36:da:e6:d0:d8:04:b3:62:e2:53:ff:b8:48:ee:06:
3c:4b:ac:ba:ab:03:6d:22:f4:07:cb:aa:f6:4b:bb:
98:f8:25:0d:e7:a0:8a:34:f5:d2:fc:77:42:8c:f3:
75:96:c0:36:67:a5:b7:b2:29:15:b1:5d:13:7f:05:
74:42:0a:55:47:9a:18:82:6c:d5:11:b7:05:96:21:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.213.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a4:38:a9:0c:a7:0f:ab:d0:da:7c:85:e1:fd:79:d4:0c:f2:
c8:15:39:b0:db:f8:6a:7e:ad:f0:b2:b6:46:b9:5d:e2:0d:8b:
5e:aa:8c:00:09:f4:86:1e:60:79:62:d4:e3:d1:78:1a:7a:33:
80:9f:21:8f:1c:13:1d:fe:38:0a:63:d1:93:15:25:58:78:c4:
c2:ef:38:c0:d2:bb:28:77:76:17:86:e0:6e:17:5e:7a:2f:91:
24:63:70:d2:b0:00:af:91:b1:3f:a1:33:3e:1e:a6:00:6b:42:
c3:2c:7d:2b:c5:44:f8:3a:bd:8b:ef:1e:31:d4:a5:71:00:96:
15:a6:de:93:af:8e:79:fb:8c:00:f6:d8:3e:0f:7a:aa:e4:68:
21:ba:14:0f:8d:8b:da:47:73:10:64:c1:a0:6a:31:c2:f3:a6:
90:74:ff:eb:0d:27:37:9a:66:a0:91:70:ad:d0:3b:26:45:dc:
0e:19:78:05:07:23:da:07:55:ef:cc:24:ee:b8:14:c9:ee:67:
68:ab:00:d1:90:21:bb:10:83:cb:6e:1e:a2:a2:08:c0:56:26:
0e:f1:06:d1:e5:c3:91:20:be:e2:15:a0:82:1f:0f:0f:a9:11:
fe:cd:35:79:fe:df:d9:2f:f0:51:e3:69:98:e3:0e:4c:17:0a:
29:5e:e6:96
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY31IiyMG02+SNm0E46oKJ6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjI5MTM1MTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDNmZWJmZDUzN2UzMjBjYmJlYzJiNGUyMjY3N2I5YWU2NmY2MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy+t0OOrfsR2GbGVEHwtcyqRavxQ
fZr94o+e2scmSrZpojC+NGc7z+j0tYI+oyZzQ74WP3IbBzsBspvBT3SPzTZK0JRa
5itdbWPyOCCRu4Bvj+UMe4i5YsDKU0ZgfoXn6Zz6r9qjIFUDIVA8Ktp0Xw6R5oWP
A8n1rkJPBvklu2Py2ybqxr9x2sH3Vr1K/uj8yH9VcAXNCjVfXzbNhYqe87aVmrYH
IRew4WECZaQ+uaIOdXY22ubQ2ASzYuJT/7hI7gY8S6y6qwNtIvQHy6r2S7uY+CUN
56CKNPXS/HdCjPN1lsA2Z6W3sikVsV0TfwV0QgpVR5oYgmzVEbcFliE5ewIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNA/6/1TfjIMu+wrTiJne5rmb2BOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2ExMTU2
Ny0yNTllLTRkMWItYmZjYi0yODFmYWRlMjgzNGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYTExNTY3
LTI1OWUtNGQxYi1iZmNiLTI4MWZhZGUyODM0Yi8xLzBEX3JfVk4tTWd5NzdDdE9J
bWQ3bXVadllFNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAUFvVMA0GCSqGSIb3DQEBCwUAA4IBAQBlpDip
DKcPq9DafIXh/XnUDPLIFTmw2/hqfq3wsrZGuV3iDYteqowACfSGHmB5YtTj0Xga
ejOAnyGPHBMd/jgKY9GTFSVYeMTC7zjA0rsod3YXhuBuF156L5EkY3DSsACvkbE/
oTM+HqYAa0LDLH0rxUT4Or2L7x4x1KVxAJYVpt6Tr455+4wA9tg+D3qq5GghuhQP
jYvaR3MQZMGgajHC86aQdP/rDSc3mmagkXCt0DsmRdwOGXgFByPaB1XvzCTuuBTJ
7mdoqwDRkCG7EIPLbh6iogjAViYO8QbR5cORIL7iFaCCHw8PqRH+zTV5/t/ZL/BR
42mY4w5MFwopXuaW
-----END CERTIFICATE-----
Generated at Tue May 13 02:05:33 2025 by rpki-client