Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer
File: y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer (raw, json)
Hash identifier: BQkhhHee6b2BdTDmZmI0m6lDsUxV1zT8HyCyTOawsTE=
Subject key identifier: CB:F6:F8:AE:AB:EB:31:67:D1:19:2D:62:84:80:C7:E2:BF:D9:72:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7BCBA28D15C69F4B6EA89F32C7D3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.103.12.0/22
Validation: Failed, certificate revoked on Fri 24 Jan 2025 14:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:bc:ba:28:d1:5c:69:f4:b6:ea:89:f3:2c:7d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbf6f8aeabeb3167d1192d628480c7e2bfd97248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:8f:c7:33:7f:cc:58:93:01:33:18:e2:da:
22:dc:ca:8b:d5:bc:df:7d:ac:df:33:46:77:8c:a1:
39:8d:f8:80:b4:99:22:61:41:60:28:6d:88:91:fc:
ba:78:13:bf:c8:c6:d6:47:33:ec:3f:62:19:24:45:
5b:ce:c7:5d:4c:e5:5c:b7:19:f2:dd:ec:ec:83:78:
f9:e3:62:92:c2:84:30:d9:4d:0f:eb:82:35:8e:f0:
87:db:99:16:63:34:e1:bc:01:73:a7:b2:b3:b2:4f:
a0:6d:9f:23:87:49:30:b9:be:81:16:d5:38:3a:85:
38:47:8b:7e:b4:96:43:cb:86:14:57:6c:ec:ec:4a:
93:98:74:70:12:c1:84:3b:d6:91:af:cb:34:89:79:
d1:99:35:68:90:b9:c0:d7:03:91:be:0f:de:4d:d5:
0f:64:4e:91:c3:01:b2:e9:2a:19:af:6b:79:9f:25:
f3:54:4f:49:21:82:99:1d:b0:93:a2:82:47:8f:08:
c0:25:d0:bc:f7:ec:74:12:16:99:60:bf:f5:59:07:
97:db:3c:3a:e2:36:d4:8a:b0:06:8e:e2:77:53:1e:
20:00:64:d6:26:f4:9e:88:81:1b:df:60:c0:45:be:
3d:c8:04:6a:d2:2d:a6:2a:aa:7b:88:4e:09:ef:53:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:F8:AE:AB:EB:31:67:D1:19:2D:62:84:80:C7:E2:BF:D9:72:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:fd:ab:40:ec:f0:92:72:02:4c:b2:b3:de:d3:60:c7:e6:b0:
b5:70:37:3b:2d:0a:8c:a6:ae:24:8a:dd:1c:53:e5:31:0b:ce:
6e:80:27:05:97:cc:b1:6d:b3:a6:7a:39:34:72:d6:39:a7:18:
ce:4f:f7:8c:8f:53:10:10:af:77:ba:6a:91:00:09:4a:fa:b2:
b1:6f:bc:58:ac:35:fb:31:ed:3c:fb:df:93:34:21:64:11:f0:
00:78:8a:00:46:49:1a:2e:ec:f5:ad:39:3a:cf:a2:1e:91:f4:
7a:3b:71:86:9f:6c:19:74:04:bf:ff:48:1f:0b:0c:26:d8:12:
31:e5:81:6e:a7:ab:2d:78:c1:a1:99:f4:7f:1b:8d:55:84:b3:
63:38:d4:d7:4f:cc:13:bb:e0:b1:2b:a1:64:cd:d8:a5:92:c5:
de:c5:37:c4:bb:97:1c:8f:11:5c:b5:9c:88:3a:94:f4:fe:a6:
e7:81:09:47:a6:3c:83:e0:e5:8a:da:12:33:0a:f4:97:ff:cd:
16:74:01:ca:1f:d1:22:3c:55:ca:ec:89:5b:39:8b:8d:d8:0f:
22:8a:b6:45:18:96:e7:a9:0a:50:f1:fb:d5:5f:6a:4c:55:96:
3d:df:af:e9:81:61:f9:05:7f:f2:02:14:6c:c9:38:32:36:4e:
3b:cf:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:25:04 2025 by rpki-client