Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w2I_-80tgfezefq0JXNlFKnIv1M.cer
File: w2I_-80tgfezefq0JXNlFKnIv1M.cer (raw, json)
Hash identifier: MzuwsyipoYMCdjTOXLjYU+0FPlsI93V0ZkNCkLx7IEg=
Subject key identifier: C3:62:3F:FB:CD:2D:81:F7:B3:79:FA:B4:25:73:65:14:A9:C8:BF:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01936417EE558138AAFE1D60188BB840827C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/64e19c-3ef3-4fbb-85ae-e6c60032208c/1/w2I_-80tgfezefq0JXNlFKnIv1M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/64e19c-3ef3-4fbb-85ae-e6c60032208c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 25 Nov 2024 16:11:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 103.145.40.0/23
IP: 103.145.80.0/23
IP: 139.28.132.0/22
IP: 2a09:640::/29
Validation: Failed, certificate revoked on Thu 28 Nov 2024 14:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:17:ee:55:81:38:aa:fe:1d:60:18:8b:b8:40:82:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 25 16:11:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3623ffbcd2d81f7b379fab425736514a9c8bf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:eb:e3:dc:5f:b9:b0:48:99:dc:46:ae:60:
a5:e0:63:64:ff:08:cb:46:c1:67:c8:8f:78:a1:67:
e3:49:e2:7b:db:71:22:a3:91:e5:76:16:ea:7d:25:
05:9b:7b:ab:52:89:86:19:af:88:9d:79:ae:de:de:
35:df:6f:7f:0f:32:c7:73:4c:22:ad:47:29:22:dd:
5d:87:08:6a:55:7e:81:87:6e:1e:99:82:1e:27:4d:
95:ff:24:ed:00:0e:a8:9f:a5:27:64:93:a1:a6:93:
f6:7d:40:a3:69:5b:51:e6:03:4c:74:09:69:87:eb:
6e:d0:db:a6:ac:a1:0d:f6:10:79:b2:78:36:01:02:
42:55:9f:42:63:bb:28:84:80:cb:dc:3e:c1:c0:68:
4d:10:b6:e0:8b:e0:fc:45:d1:7c:e8:ed:62:66:fe:
e5:ff:34:aa:6d:b4:15:c9:20:89:9d:f8:4b:95:04:
c5:80:7e:33:ed:f9:fc:bc:3a:ca:ae:ca:59:da:0f:
5a:e2:1c:7e:de:4a:ff:8a:45:8b:bb:9a:59:87:e5:
c9:0e:93:72:66:a8:10:85:97:d4:8d:5c:63:e0:9e:
37:eb:9c:dd:a1:81:1d:2b:d4:9a:27:7f:e3:07:c4:
f8:f9:2c:89:bd:9a:64:85:76:ab:6a:d4:0f:6c:a1:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:62:3F:FB:CD:2D:81:F7:B3:79:FA:B4:25:73:65:14:A9:C8:BF:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/64e19c-3ef3-4fbb-85ae-e6c60032208c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/64e19c-3ef3-4fbb-85ae-e6c60032208c/1/w2I_-80tgfezefq0JXNlFKnIv1M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.40.0/23
103.145.80.0/23
139.28.132.0/22
IPv6:
2a09:640::/29
Signature Algorithm: sha256WithRSAEncryption
41:9c:fc:98:b4:64:4c:fa:8a:a8:5a:4b:5c:ae:7a:0c:87:21:
8e:17:b1:0c:68:76:5a:f1:ff:24:a6:3f:c1:86:a9:64:48:12:
fd:25:b7:d1:4d:df:d1:74:a7:b4:3b:23:16:28:5a:a8:92:75:
fd:4b:11:0f:19:43:da:49:f2:96:11:1b:6e:25:a3:8f:44:cd:
e8:d0:51:3a:58:95:b1:03:54:5e:2b:27:23:43:53:a1:6e:f1:
5e:20:d9:95:34:c6:70:30:3a:26:ec:53:d2:fd:43:3f:ba:1e:
00:7d:dc:0c:26:36:2b:81:54:11:fe:9a:38:16:96:ae:59:59:
55:3b:6c:ea:74:2b:60:06:9e:f2:27:60:9e:0c:47:50:ed:93:
54:2d:ab:62:91:38:d7:6b:c8:62:64:c8:c1:dc:18:59:a6:b2:
39:34:42:4b:c5:5b:68:d8:d8:0f:60:f2:8c:9b:7e:91:1c:ca:
f9:d1:1c:77:9e:1b:6a:f4:6c:5b:8f:d7:89:7b:76:23:c3:a3:
b1:e6:99:9e:bc:7d:50:63:4f:32:5b:0d:c2:27:a3:90:db:62:
cd:1a:7c:ef:f0:37:f7:5b:b3:c1:55:cc:b8:b4:f1:6a:4e:cf:
9d:8a:6a:47:4a:88:a4:09:06:cc:2e:de:f5:44:f5:af:6a:2e:
a5:9e:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:46:31 2025 by rpki-client