Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gwvMr_wnKZ0qRnvjCBRQHhBE0gg.cer
File: gwvMr_wnKZ0qRnvjCBRQHhBE0gg.cer (raw, json)
Hash identifier: HVShuTri+Qs+PyhEWKnnMkXDG4Z72Mm+F/M+AQ8wC/8=
Subject key identifier: 83:0B:CC:AF:FC:27:29:9D:2A:46:7B:E3:08:14:50:1E:10:44:D2:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197DE8D2EEA9FCF05732999FCA5413194DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/87da4595-b2df-4df0-89fe-7fe9cfe9c626/0/830BCCAFFC27299D2A467BE30814501E1044D208.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/87da4595-b2df-4df0-89fe-7fe9cfe9c626/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 06 Jul 2025 07:04:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211575
Validation: Failed, certificate revoked on Mon 07 Jul 2025 10:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:8d:2e:ea:9f:cf:05:73:29:99:fc:a5:41:31:94:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 07:04:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=830bccaffc27299d2a467be30814501e1044d208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:ec:e3:14:40:dd:1b:6f:bd:8d:60:09:c4:
89:57:47:36:e2:61:ae:2d:24:33:68:31:6c:7c:5b:
ad:7b:bd:0d:5c:57:12:dd:ed:ef:2a:4b:6c:73:ee:
b5:e8:c9:a5:5f:be:f4:78:9f:69:a0:07:6c:99:99:
c9:f9:18:6d:0b:be:82:18:37:88:c0:ce:49:9a:56:
db:84:d8:5f:91:eb:2e:29:44:9c:a5:22:bc:6e:28:
0c:8e:7b:83:33:0b:90:a0:1d:ed:3d:01:23:fa:c1:
0a:b5:46:32:6e:1e:26:c9:e7:79:79:b0:d7:b6:9f:
df:fa:49:d6:9c:e2:7e:3c:e3:21:66:30:29:48:37:
28:49:1b:b4:3a:84:e8:b3:4f:12:df:02:84:0d:82:
8d:4b:5e:8c:12:a5:9d:f8:14:dc:33:cb:eb:1e:09:
ad:d0:ee:65:eb:85:83:a2:09:13:80:eb:07:45:13:
bc:4c:16:7a:3a:5c:a3:e4:62:84:3a:95:4e:95:a9:
9e:6b:3f:ea:7d:e4:3d:36:79:8b:87:e1:7c:bf:c5:
cc:b2:12:0f:07:29:9d:06:eb:8a:5d:5b:0b:00:d5:
19:57:d7:4f:84:00:00:05:dc:07:80:65:2a:af:8a:
02:34:44:51:22:c1:0a:d7:ef:56:0f:73:e5:44:66:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:CC:AF:FC:27:29:9D:2A:46:7B:E3:08:14:50:1E:10:44:D2:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/87da4595-b2df-4df0-89fe-7fe9cfe9c626/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/87da4595-b2df-4df0-89fe-7fe9cfe9c626/0/830BCCAFFC27299D2A467BE30814501E1044D208.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211575
Signature Algorithm: sha256WithRSAEncryption
1a:3a:2f:64:84:30:63:c3:d9:0f:0e:75:6e:09:48:b8:ba:af:
b2:03:f2:03:5d:7b:a1:84:63:d8:b0:d2:be:d8:a6:70:7d:73:
48:65:b9:a1:44:5a:fa:d8:5e:4a:f9:d0:17:fe:8e:23:8c:23:
90:14:b3:4c:14:76:cc:6d:f9:e8:dc:33:04:58:e2:7c:a6:f8:
ef:44:42:17:62:1d:db:6b:ba:c1:bb:0b:65:94:1d:df:68:d3:
96:09:96:e1:31:91:97:62:3f:74:7c:60:36:3e:1d:9d:99:b1:
d8:16:82:c1:51:ab:c6:6e:db:d0:c5:b6:20:28:52:cd:cd:12:
d0:9b:4d:0a:6d:d4:00:8b:eb:01:1c:74:1d:7b:d6:76:0b:16:
b7:10:b0:8f:1f:42:99:4f:22:7b:b1:9a:dd:e6:7e:7a:b4:f3:
ac:a7:78:d6:b2:e1:40:80:5a:d1:3e:43:54:a2:dc:4f:45:37:
50:01:aa:5f:49:86:c6:67:2f:e1:9f:82:0e:2b:e6:91:39:2f:
41:77:9e:44:f5:ea:b4:13:fc:db:27:5e:90:87:ab:aa:db:84:
ce:db:47:d7:5f:88:45:1c:fe:cd:fb:88:a5:5a:b3:89:8e:b8:
9e:d9:14:b1:f9:5f:dc:30:a6:03:87:40:98:d7:d5:82:b7:ef:
08:dd:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:13:35 2025 by rpki-client