
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.cer
File: gyxFCE2JZP84XnJ0YuSBE6aZrOQ.cer (raw, json)
Hash identifier: f5VX4abPs8/byJ2XXS3Qk1BaDsRe0KM8m4r5J86JqgI=
Subject key identifier: 83:2C:45:08:4D:89:64:FF:38:5E:72:74:62:E4:81:13:A6:99:AC:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01924D1F4DF11B064E9ED969B4E95FAA2432
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Oct 2024 12:05:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199398
Validation: Failed, certificate revoked on Mon 07 Oct 2024 11:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:1f:4d:f1:1b:06:4e:9e:d9:69:b4:e9:5f:aa:24:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 12:05:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=832c45084d8964ff385e727462e48113a699ace4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:d5:b0:c7:7c:9f:26:2c:2a:70:15:36:24:
e4:85:7e:99:ae:b1:16:da:80:0c:44:0c:82:14:72:
e0:20:8d:f2:14:69:52:48:64:ed:39:93:5b:87:52:
76:f3:93:d4:3d:e6:24:21:2a:f4:93:69:48:98:f1:
9b:2f:ec:42:37:22:83:a1:dd:4b:e6:2c:8b:e0:d1:
39:34:1e:65:45:75:25:e3:5d:3b:2c:6c:4a:cd:8b:
ce:0d:54:aa:e4:64:c3:99:b7:0f:1b:6b:7c:5e:89:
44:b2:86:e7:2f:83:15:2f:ee:2c:27:51:e9:78:f9:
7a:58:8f:71:9b:3d:47:65:72:16:e5:80:bc:cb:34:
7b:7d:38:e3:72:c9:40:89:15:84:c3:2e:42:c7:d8:
c4:1d:91:b6:e0:15:ce:67:9c:48:a3:f1:d3:c5:5e:
97:88:66:46:99:5a:07:a4:5e:f8:95:90:4e:55:0e:
0a:5d:57:98:34:65:14:85:31:c2:49:85:53:28:10:
91:a5:34:49:e8:99:49:0b:85:58:a1:5f:d7:78:00:
c4:7e:74:7b:2a:4c:50:14:37:7d:78:7a:85:e4:be:
9f:e6:28:58:56:dc:b8:69:ad:12:a9:b9:0d:5f:d3:
ef:42:62:a2:30:1b:f4:98:7d:c3:f2:c2:b9:38:cc:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2C:45:08:4D:89:64:FF:38:5E:72:74:62:E4:81:13:A6:99:AC:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199398
Signature Algorithm: sha256WithRSAEncryption
7c:f9:4e:a6:97:06:df:da:8b:f3:b3:7c:fd:22:a8:6d:b6:13:
db:b1:e8:1b:e0:11:e6:13:19:3e:cb:8b:1d:9e:5e:71:55:d0:
99:fe:38:21:4a:1b:a6:19:1b:aa:a4:5e:80:7b:0c:1f:88:cf:
5c:e7:5b:6c:9a:88:c0:f5:21:14:35:28:56:df:71:88:90:a4:
b1:41:06:81:39:10:e9:e8:d5:8d:75:19:8f:ad:90:57:59:f7:
9c:dc:05:06:93:b9:99:4f:a7:57:a3:16:34:a4:d2:3c:5d:64:
2f:25:11:66:4f:14:60:54:49:59:89:49:ad:39:47:85:dd:35:
f5:f1:d8:33:7e:73:02:53:06:9d:7b:86:22:6c:23:64:5f:60:
e1:61:32:f6:fe:93:67:f2:70:b5:7f:61:55:66:1a:7f:d8:fb:
1d:38:aa:6d:64:71:dc:5f:e3:f4:49:b2:b4:57:3a:f9:76:2c:
67:0a:43:2c:24:6e:d6:73:4f:0a:1f:4e:ba:b3:54:7a:60:78:
4f:f0:ce:12:79:5f:62:2e:d6:ff:b9:43:9d:68:31:2f:e5:a5:
9f:1d:20:eb:37:2d:06:7d:8c:60:17:1a:cc:1a:95:44:4b:68:
64:5f:5a:8e:1f:7b:f2:ab:38:ea:e5:96:fa:44:56:2a:3f:24:
94:b2:53:01
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZJNH03xGwZOntlptOlfqiQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDAyMTIwNTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzJjNDUwODRkODk2NGZmMzg1ZTcyNzQ2MmU0ODExM2E2OTlhY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokvVsMd8nyYsKnAVNiTkhX6ZrrEW
2oAMRAyCFHLgII3yFGlSSGTtOZNbh1J285PUPeYkISr0k2lImPGbL+xCNyKDod1L
5iyL4NE5NB5lRXUl4107LGxKzYvODVSq5GTDmbcPG2t8XolEsobnL4MVL+4sJ1Hp
ePl6WI9xmz1HZXIW5YC8yzR7fTjjcslAiRWEwy5Cx9jEHZG24BXOZ5xIo/HTxV6X
iGZGmVoHpF74lZBOVQ4KXVeYNGUUhTHCSYVTKBCRpTRJ6JlJC4VYoV/XeADEfnR7
KkxQFDd9eHqF5L6f5ihYVty4aa0SqbkNX9PvQmKiMBv0mH3D8sK5OMzQfQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIMsRQhNiWT/OF5ydGLkgROmmazkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzRjMWVh
MC01M2NlLTRlMjYtYTE3OS00N2I3NWQ5ZWMwMjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvNGMxZWEw
LTUzY2UtNGUyNi1hMTc5LTQ3Yjc1ZDllYzAyNy8xL2d5eEZDRTJKWlA4NFhuSjBZ
dVNCRTZhWnJPUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMK5jANBgkqhkiG9w0BAQsFAAOCAQEAfPlOppcG39qL
87N8/SKobbYT27HoG+AR5hMZPsuLHZ5ecVXQmf44IUobphkbqqRegHsMH4jPXOdb
bJqIwPUhFDUoVt9xiJCksUEGgTkQ6ejVjXUZj62QV1n3nNwFBpO5mU+nV6MWNKTS
PF1kLyURZk8UYFRJWYlJrTlHhd019fHYM35zAlMGnXuGImwjZF9g4WEy9v6TZ/Jw
tX9hVWYaf9j7HTiqbWRx3F/j9EmytFc6+XYsZwpDLCRu1nNPCh9OurNUemB4T/DO
EnlfYi7W/7lDnWgxL+Wlnx0g6zctBn2MYBcazBqVREtoZF9ajh978qs46uWW+kRW
Kj8klLJTAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:09:15 2025 by rpki-client