Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/guGrpuiUf5I4q8y-6gm6OKWdb1w.cer
File: guGrpuiUf5I4q8y-6gm6OKWdb1w.cer (raw, json)
Hash identifier: S3UH94GdBhLZbUuh+bnrwzVs6iWmS+50CrG4+8Coou8=
Subject key identifier: 82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBE9D0FCF0C9E042FD9F6D9E447285
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/guGrpuiUf5I4q8y-6gm6OKWdb1w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.212.141.0/24
IP: 2a12:2680::/29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 09:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e9:d0:fc:f0:c9:e0:42:fd:9f:6d:9e:44:72:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82e1aba6e8947f9238abccbeea09ba38a59d6f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:57:60:f1:ee:db:e3:5b:de:16:9c:ec:c0:
bb:0c:80:9f:87:a5:e2:20:ef:4e:2f:32:e8:50:f0:
2c:c7:7c:5d:0d:8e:bf:91:6c:bd:ad:1a:36:2e:d6:
bc:37:30:5b:0f:6f:69:d8:fb:c5:1f:c9:9e:8e:d3:
d4:7c:21:37:3f:24:ba:38:6a:03:e2:05:eb:4b:49:
c6:c0:93:47:e5:56:77:2f:0e:9c:fa:9b:39:ea:e4:
85:e6:ef:9d:c2:09:fe:be:a3:d0:a5:06:35:d0:bc:
01:c3:bb:56:08:00:92:bd:0c:05:f4:1b:fd:1e:1a:
fc:92:79:dd:8f:f5:31:a4:69:e9:e0:0d:cb:0f:7d:
33:9b:47:03:47:7d:69:6d:df:cf:3f:b8:f8:9b:6c:
23:33:27:61:66:c1:53:23:af:52:22:d8:1b:ef:63:
5d:33:cf:2b:25:86:1a:ce:07:26:7f:f8:d7:ab:c2:
54:9a:ef:dd:ce:7e:4d:37:9f:37:a3:9f:0d:f3:9b:
bc:97:37:4a:c3:a5:25:18:41:43:e1:69:53:eb:df:
7e:35:3b:b0:89:d6:5a:72:2d:da:2d:13:7d:d4:df:
07:d2:6e:5a:a5:b7:48:e9:63:e5:8e:69:c7:c5:7b:
87:45:a9:27:2c:c5:15:16:0a:96:b8:1d:ad:2b:67:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/guGrpuiUf5I4q8y-6gm6OKWdb1w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.141.0/24
IPv6:
2a12:2680::/29
Signature Algorithm: sha256WithRSAEncryption
02:6f:9a:f8:d8:13:56:53:e6:f6:2a:ec:df:52:68:ab:14:50:
51:78:ef:6e:9b:54:79:63:28:dd:64:18:b4:72:3b:d2:a3:fc:
d8:27:03:a5:4a:fd:c5:03:8d:24:7a:80:34:d6:46:54:e3:3d:
80:a8:ce:e7:ba:f7:83:05:6e:11:f0:1c:fc:50:f8:b7:d3:45:
21:d7:a3:22:1a:29:72:a1:07:1c:aa:f3:fa:55:d7:53:9a:32:
88:13:dd:ea:a1:4e:c6:4b:e8:43:04:87:ed:9e:d1:b1:ae:dd:
6e:16:26:a8:ec:c7:96:84:0e:ed:36:77:c0:db:c0:75:d0:73:
7f:b7:30:07:57:a2:a6:21:eb:b7:21:a6:ab:75:0b:c8:db:52:
70:79:78:6e:f1:25:9a:cd:85:5a:e6:cc:d1:33:93:a4:13:9b:
03:84:75:b2:48:ac:0c:66:a5:3e:54:9e:fc:0e:4d:8a:50:68:
a6:eb:8c:39:50:43:27:1d:7b:68:69:41:4e:ef:d5:6a:07:4e:
83:a5:9b:38:c0:bb:91:05:54:fb:17:f8:b2:23:cd:a1:6f:fc:
75:fc:f7:86:e0:99:00:de:f0:6f:83:45:8d:f6:97:62:ba:6b:
5b:f0:5e:ee:36:93:3e:4a:87:84:b9:cc:4f:78:91:8d:f3:08:
39:3b:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:46:52 2025 by rpki-client