
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bOvg7_DUJf_y_EOkQpBcTdUr1qg.cer
File: bOvg7_DUJf_y_EOkQpBcTdUr1qg.cer (raw, json)
Hash identifier: vK+R1Ng2tpsJDXajJmYfRxx0CjR2WGNPHeajqPdcmvY=
Subject key identifier: 6C:EB:E0:EF:F0:D4:25:FF:F2:FC:43:A4:42:90:5C:4D:D5:2B:D6:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01939BCD97C3DFCB520249DB3AE9A2E0C9A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/bOvg7_DUJf_y_EOkQpBcTdUr1qg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 06 Dec 2024 11:49:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.191.54.0 -- 195.191.57.255
Validation: Failed, certificate revoked on Mon 09 Dec 2024 15:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:cd:97:c3:df:cb:52:02:49:db:3a:e9:a2:e0:c9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 6 11:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cebe0eff0d425fff2fc43a442905c4dd52bd6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c3:7b:3d:42:2e:4e:56:74:75:2d:66:83:ba:
87:41:28:2c:bd:ee:65:ac:0c:07:c4:52:6b:da:e9:
f7:05:a4:99:1c:1f:b8:12:38:4b:7d:27:f3:7d:90:
11:94:79:68:d2:91:d3:b1:2b:79:75:04:b0:1d:ca:
82:12:3e:11:90:a6:42:13:51:e2:d0:bc:b1:4c:1f:
67:19:bd:56:25:87:7f:42:03:c8:4e:d6:5c:00:f6:
d2:e4:39:d0:94:01:bc:8c:b8:72:d6:65:5a:11:94:
10:f2:48:d3:68:2c:b5:8f:a7:5b:05:ae:cd:d0:48:
58:c4:56:44:77:c9:bc:2e:18:58:de:1f:1f:ef:4a:
a1:72:81:db:a0:b5:eb:ee:d2:e5:73:af:9e:e9:c0:
65:72:a3:29:16:3a:be:79:6f:95:44:52:ff:30:9b:
5b:55:40:6d:d6:a9:1e:d7:5e:18:8d:33:d0:8f:aa:
ae:6e:00:ee:b6:48:d3:50:97:eb:6f:b6:8c:34:4c:
91:64:1c:42:8d:0f:de:16:24:48:90:70:87:da:92:
a1:79:a1:3f:84:c4:4f:9f:82:35:4b:f8:0c:96:b6:
6c:93:e4:6a:fe:25:98:7f:50:b6:b9:59:b9:95:92:
55:30:66:7c:22:4d:33:d0:82:a7:15:ca:7c:fd:05:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EB:E0:EF:F0:D4:25:FF:F2:FC:43:A4:42:90:5C:4D:D5:2B:D6:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/bOvg7_DUJf_y_EOkQpBcTdUr1qg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.54.0-195.191.57.255
Signature Algorithm: sha256WithRSAEncryption
8f:3b:77:ea:06:08:89:b8:ea:0c:3c:fb:70:a3:02:12:5f:11:
c0:40:2e:23:b3:fc:a4:29:82:57:3c:ab:8f:ff:12:35:8c:86:
ab:d3:0f:f8:03:27:31:2c:d7:43:44:25:06:e3:d4:cf:a6:59:
31:51:b7:b5:cd:d3:a3:48:53:b6:58:84:4b:35:fd:55:72:3e:
0f:4f:e5:00:b9:eb:ac:d3:67:40:06:7a:9f:15:81:a2:e6:09:
97:52:82:99:e9:94:cb:d6:61:19:c3:94:2c:d5:25:cc:f6:ae:
a8:7d:eb:bf:4c:0b:2f:9c:bc:26:76:d4:dd:c4:c9:6b:c4:6d:
5d:ee:ac:df:69:e0:74:8c:08:25:08:38:20:81:6a:88:d1:2b:
8d:bd:f9:27:9b:aa:68:13:ff:36:a9:aa:0b:d3:04:18:0c:ca:
f8:e6:7c:36:ce:da:e3:21:31:c0:78:8f:41:7b:42:d8:ed:68:
fc:01:13:d2:de:95:7d:0d:84:a1:00:b4:8b:3a:99:f3:9c:bb:
86:ae:61:16:0a:79:d7:d5:cd:c5:7e:dc:e9:94:17:3b:a9:4f:
1a:72:ab:13:14:f4:80:1b:0c:82:6e:1e:3a:33:14:11:6f:7d:
f0:fd:0c:ec:1a:67:47:1c:57:48:a7:6d:4f:97:65:67:39:ed:
0b:4a:eb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:49:21 2025 by rpki-client