Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oXzNarKvesjM2SrYgrw5_aoXHRs.cer
File: oXzNarKvesjM2SrYgrw5_aoXHRs.cer (raw, json)
Hash identifier: VxbkdwTNyVjC4Uca3k/dPOQAGXDGa7tHjmeDlXMRCkQ=
Subject key identifier: A1:7C:CD:6A:B2:AF:7A:C8:CC:D9:2A:D8:82:BC:39:FD:AA:17:1D:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01978CC35142640F47D1FF88782B34EB191B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/b91959-71eb-4b68-a54b-2685cb803129/1/oXzNarKvesjM2SrYgrw5_aoXHRs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/b91959-71eb-4b68-a54b-2685cb803129/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Jun 2025 09:55:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214939
Validation: Failed, certificate revoked on Fri 20 Jun 2025 14:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:c3:51:42:64:0f:47:d1:ff:88:78:2b:34:eb:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 20 09:55:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a17ccd6ab2af7ac8ccd92ad882bc39fdaa171d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9e:73:3e:01:0e:80:14:4f:92:2d:f3:be:c7:
e7:02:9c:c2:f3:b7:aa:e2:82:f0:1c:85:78:08:2a:
dc:8f:f7:ba:7f:c1:bd:a8:70:a0:51:a5:ea:09:11:
27:d4:7e:37:a5:05:37:bc:41:70:55:6b:9c:3a:bf:
e3:04:ad:79:ba:56:d0:45:2b:77:40:3a:f3:7c:de:
aa:93:ef:b8:20:f9:84:4d:7e:29:11:84:07:4f:f4:
4c:c2:a2:86:98:20:3f:67:8f:aa:56:8c:09:f1:6b:
c5:c5:45:61:25:38:ba:ab:ae:4e:11:a4:bd:38:1f:
86:13:15:c3:07:d1:51:b1:77:43:23:f8:a4:be:4c:
10:6d:07:04:87:60:66:fa:1e:54:94:e4:23:9f:ce:
b1:3e:69:bf:cd:a8:c5:b5:50:8f:05:3c:6f:c5:fb:
db:f5:ab:e2:15:d8:3a:2c:83:dd:19:c2:cd:c1:cc:
94:75:be:45:8f:b9:0a:64:a2:c4:9a:4c:94:9c:71:
ed:5c:b7:d3:11:55:96:b4:00:02:2f:1a:1c:f3:93:
4a:a5:3d:12:aa:a4:3a:d2:66:f8:aa:11:d6:25:07:
ab:9f:75:d7:3c:9e:87:c7:33:c1:eb:e6:67:b3:c2:
2e:35:16:f1:8d:4a:38:1b:ac:ea:f0:b5:cd:f9:68:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7C:CD:6A:B2:AF:7A:C8:CC:D9:2A:D8:82:BC:39:FD:AA:17:1D:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b91959-71eb-4b68-a54b-2685cb803129/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b91959-71eb-4b68-a54b-2685cb803129/1/oXzNarKvesjM2SrYgrw5_aoXHRs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214939
Signature Algorithm: sha256WithRSAEncryption
96:1b:0e:c4:61:c8:5f:d6:37:dc:ae:c9:93:b7:c4:22:ac:a1:
82:9e:38:ac:d4:7b:02:44:0e:0b:d0:3a:1e:d2:52:19:43:5d:
a6:f1:40:b6:3e:aa:ac:58:1f:e6:a0:ae:7c:18:4b:c4:f9:17:
59:51:48:b7:60:ff:23:4f:ea:86:7b:a8:e9:78:a8:58:a6:c2:
8d:fe:c1:9a:fb:16:3e:4c:16:d7:33:95:ee:c2:51:bb:1f:f6:
35:6f:d3:e8:6a:4a:05:12:fb:6f:39:1f:67:5f:fe:a5:3b:ae:
4b:a4:bd:6d:b0:9e:30:e0:2f:63:76:e3:2e:04:8a:69:61:34:
b4:86:97:b2:e3:41:b9:2d:91:cf:51:05:d7:a0:6a:31:88:d0:
93:f0:d3:c5:54:11:32:b6:d0:5f:99:72:d2:83:9a:1d:d7:c0:
d6:da:ee:c3:e3:ec:b3:22:6e:93:a4:a5:63:ce:ca:f2:bd:e2:
c7:5a:3b:63:aa:0e:e3:21:c8:60:53:84:08:40:e8:26:d9:6d:
c2:0f:ea:3a:53:ce:04:f5:38:7d:c7:45:ab:25:4c:0d:91:9d:
9f:bd:5b:6f:98:33:e8:6f:4a:54:5d:07:bb:be:8b:03:bb:6e:
ee:ce:57:fb:0e:c3:d5:55:df:14:82:19:e5:71:fc:41:3f:b4:
7c:35:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:00:06 2025 by rpki-client