Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
File: 5L3Wsev8lYmaWDM9yUz4Khmms74.cer (raw, json)
Hash identifier: yk8dyPg2pKIwZhDSHGx6RDkpGzOK4yAY4U1It9kaf0o=
Subject key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01957FE4B5CCC61ACA65D7134E3C154DEF90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Mar 2025 11:50:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.159.236.0/22
IP: 80.77.114.0 -- 80.77.116.255
IP: 80.77.118.0 -- 80.77.121.255
IP: 80.77.126.0/23
IP: 185.115.21.0 -- 185.115.23.255
Validation: Failed, certificate revoked on Mon 24 Mar 2025 12:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:e4:b5:cc:c6:1a:ca:65:d7:13:4e:3c:15:4d:ef:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 11:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:12:13:c2:3d:2a:a1:3a:56:46:b0:ec:61:
54:11:89:6c:43:a3:79:65:dc:20:1f:59:48:c7:80:
2b:f3:18:6b:8c:3f:3b:b5:2a:64:87:e3:9e:b8:5c:
68:19:43:f1:26:9d:67:6a:cb:23:82:fb:98:e0:0d:
e2:d5:be:48:b2:94:8c:c5:ee:52:0a:2a:3a:ec:d1:
e9:dd:00:32:3a:69:fb:f7:8b:aa:36:16:21:fc:13:
e3:ae:8e:f9:0a:bb:a7:b1:61:34:4e:ef:54:4f:bc:
d3:80:a8:23:d5:5e:d2:4d:ad:81:de:74:d1:43:02:
8a:5d:d8:9b:68:36:ed:db:1f:f1:1f:ae:2c:5b:1b:
3e:3f:7e:08:d5:e0:3a:3c:ed:f3:0d:4c:b8:f5:2f:
fd:e5:2a:f4:92:63:23:7a:1b:2c:44:5b:ac:ad:d6:
bb:41:f6:38:8f:74:eb:e2:8f:c8:90:d7:c1:f6:aa:
ff:a0:f9:f1:af:81:35:02:ec:c8:60:4d:7e:de:5e:
f2:7b:40:48:34:6f:46:12:35:44:5f:60:1d:f8:1d:
26:5d:4f:ce:7f:17:7b:51:87:80:e7:ce:8a:d5:b9:
60:07:d1:e5:3f:7c:a7:f1:96:18:68:e1:3e:95:dc:
c5:74:88:a5:c7:11:15:c9:d1:d7:3d:5a:d3:42:6d:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.236.0/22
80.77.114.0-80.77.116.255
80.77.118.0-80.77.121.255
80.77.126.0/23
185.115.21.0-185.115.23.255
Signature Algorithm: sha256WithRSAEncryption
5b:0a:24:b3:a0:3c:60:c0:ac:ef:71:37:ed:38:de:d7:e3:c5:
40:c7:14:31:ec:3f:ac:ff:c6:f6:8e:c0:5d:01:9d:10:bb:4d:
6d:27:36:90:a2:5d:13:8b:b8:08:3f:a2:6a:9e:a7:0c:24:83:
33:5c:ce:db:16:cc:42:68:bb:03:fd:75:5a:39:b1:e7:ce:18:
90:3b:12:82:d0:c0:b6:0e:77:83:e6:0b:38:2d:e8:e1:5f:07:
7e:7c:7a:e4:a9:24:ee:bf:ec:ca:e9:11:41:cf:92:ce:61:75:
7d:91:d8:12:e8:a1:f7:3b:d8:a3:a9:19:70:47:60:32:78:17:
29:05:5b:88:4a:13:5d:65:0f:89:c1:8e:74:80:cd:3f:83:e5:
34:cb:d9:42:82:15:c7:6d:e3:2f:ea:b3:6a:cd:cb:4b:ff:b4:
02:7a:dc:6e:b6:37:98:84:14:cf:39:60:01:fc:60:9c:68:50:
5d:3b:cb:f7:39:84:be:db:20:b4:48:61:66:f6:b6:34:07:2d:
7c:36:ad:d0:1b:c3:fb:a3:5f:c7:b0:87:e9:0d:ba:f5:84:5c:
8e:d6:80:0c:37:35:ca:63:d9:c0:5d:39:9f:3a:4c:02:c0:5a:
64:cf:c0:33:33:4b:27:08:39:da:9e:f3:39:8e:54:70:b6:ea:
54:be:cb:97
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZV/5LXMxhrKZdcTTjwVTe+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzEwMTE1MDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGJkZDZiMWViZmM5NTg5OWE1ODMzM2RjOTRjZjgyYTE5YTZiM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aASE8I9KqE6Vkaw7GFUEYlsQ6N5
ZdwgH1lIx4Ar8xhrjD87tSpkh+OeuFxoGUPxJp1nassjgvuY4A3i1b5IspSMxe5S
Cio67NHp3QAyOmn794uqNhYh/BPjro75CrunsWE0Tu9UT7zTgKgj1V7STa2B3nTR
QwKKXdibaDbt2x/xH64sWxs+P34I1eA6PO3zDUy49S/95Sr0kmMjehssRFusrda7
QfY4j3Tr4o/IkNfB9qr/oPnxr4E1AuzIYE1+3l7ye0BING9GEjVEX2Ad+B0mXU/O
fxd7UYeA586K1blgB9HlP3yn8ZYYaOE+ldzFdIilxxEVydHXPVrTQm2uIwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFOS91rHr/JWJmlgzPclM+CoZprO+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzJhOGY4
OC1iMDVkLTQyOTEtOTNkNC0wN2Y3ZDUxOTVjMmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvMmE4Zjg4
LWIwNWQtNDI5MS05M2Q0LTA3ZjdkNTE5NWMyYy8xLzVMM1dzZXY4bFltYVdETTl5
VXo0S2htbXM3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF
BwEHAQH/BEAwPjA8BAIAATA2AwQCBZ/sMAwDBAFQTXIDBABQTXQwDAMEAVBNdgME
AVBNeAMEAVBNfjAMAwQAuXMVAwQDuXMQMA0GCSqGSIb3DQEBCwUAA4IBAQBbCiSz
oDxgwKzvcTftON7X48VAxxQx7D+s/8b2jsBdAZ0Qu01tJzaQol0Ti7gIP6JqnqcM
JIMzXM7bFsxCaLsD/XVaObHnzhiQOxKC0MC2DneD5gs4LejhXwd+fHrkqSTuv+zK
6RFBz5LOYXV9kdgS6KH3O9ijqRlwR2AyeBcpBVuIShNdZQ+JwY50gM0/g+U0y9lC
ghXHbeMv6rNqzctL/7QCetxutjeYhBTPOWAB/GCcaFBdO8v3OYS+2yC0SGFm9rY0
By18Nq3QG8P7o1/HsIfpDbr1hFyO1oAMNzXKY9nAXTmfOkwCwFpkz8AzM0snCDna
nvM5jlRwtupUvsuX
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:32:24 2025 by rpki-client