Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vaw1SWsD8cYHwp70tqHjtHRVWBM.cer
File: vaw1SWsD8cYHwp70tqHjtHRVWBM.cer (raw, json)
Hash identifier: /iuAglTqha0pKxW2NvRajjtC39JKGUBem/CQG6YbmZo=
Subject key identifier: BD:AC:35:49:6B:03:F1:C6:07:C2:9E:F4:B6:A1:E3:B4:74:55:58:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197453A36FD71BBD7027F7B8966939A9C0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3b4cb7b0-4f77-442c-9948-a09105cc550b/0/BDAC35496B03F1C607C29EF4B6A1E3B474555813.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3b4cb7b0-4f77-442c-9948-a09105cc550b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 06 Jun 2025 12:32:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207427
Validation: Failed, certificate revoked on Fri 06 Jun 2025 13:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:3a:36:fd:71:bb:d7:02:7f:7b:89:66:93:9a:9c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 6 12:32:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdac35496b03f1c607c29ef4b6a1e3b474555813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:f7:e6:5b:1b:67:9a:8e:43:b7:42:9d:13:
9c:ee:28:72:5c:0f:e2:a8:74:55:48:42:da:14:81:
e9:ee:3e:d0:7f:16:f4:93:86:0e:1d:23:46:4d:d4:
8b:f2:24:90:46:ae:7f:d5:85:f6:a3:50:11:cb:18:
68:c5:7d:3d:53:dd:be:f9:7d:53:f9:58:67:99:7f:
f7:c4:7d:f2:64:6b:95:9c:72:b3:c7:8c:10:4b:d0:
7a:0e:18:be:ab:4b:f3:f2:1d:06:e3:bf:00:2f:38:
a9:d3:4c:36:1c:03:c6:5a:26:a7:b7:c7:c9:07:03:
03:2f:a6:c5:ff:b7:58:9e:e4:2e:49:d4:36:f6:e6:
1b:99:71:c5:cd:ca:c4:03:ac:13:40:a5:01:28:77:
ff:8e:ae:45:34:dd:ed:d6:c1:04:fa:20:8f:66:1a:
3e:1d:ee:37:45:9c:46:99:8a:02:db:eb:9c:52:f2:
08:08:f5:a1:29:84:2d:f1:c6:70:e1:97:f5:a1:36:
e9:9a:38:8e:0f:09:6f:bc:f8:63:5e:51:71:37:66:
20:b7:d9:90:a7:15:46:36:a9:d3:db:35:4b:ea:c7:
34:e6:11:dc:de:e6:40:01:27:39:35:9d:46:13:dd:
ec:d5:42:d4:e6:4e:fb:d0:62:07:03:bd:a3:25:85:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AC:35:49:6B:03:F1:C6:07:C2:9E:F4:B6:A1:E3:B4:74:55:58:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b4cb7b0-4f77-442c-9948-a09105cc550b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b4cb7b0-4f77-442c-9948-a09105cc550b/0/BDAC35496B03F1C607C29EF4B6A1E3B474555813.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207427
Signature Algorithm: sha256WithRSAEncryption
26:2d:a4:52:1d:5d:52:7b:ec:ec:82:24:e7:59:cb:1c:ba:fe:
9a:31:2a:00:d1:35:d1:9b:ab:92:33:de:af:c9:56:7e:98:51:
ec:ae:2e:89:c6:39:c3:c9:a1:3b:be:02:ea:44:c5:f8:b1:83:
30:f1:d5:69:41:4f:16:0b:17:a4:ec:f3:8c:7d:ae:70:f1:52:
70:1b:cd:00:1b:c8:28:43:9b:3a:6a:1a:66:44:ab:ee:64:0a:
90:c6:4f:10:87:99:c8:b2:4f:3d:95:55:79:3e:cb:08:13:e4:
ac:94:95:6b:76:9d:a9:95:b8:e2:a1:a8:cb:0c:34:be:83:9b:
05:32:b8:d4:1a:ad:cf:de:0e:fd:ef:84:e5:1f:87:09:9f:4a:
80:68:8d:c6:cc:1c:88:c6:43:49:a3:87:71:f6:3c:e6:3f:64:
d3:ee:13:37:1a:e4:0c:0b:6d:bf:50:fa:b7:37:02:21:61:45:
a0:5b:0f:40:2f:a7:4c:95:7f:c7:75:e2:ee:09:7a:26:81:6d:
99:8a:15:ff:ce:f6:1b:06:29:19:ee:81:99:f8:fb:d7:bc:14:
e3:0c:91:1c:88:e6:24:74:5b:aa:a4:76:6a:61:f8:1d:6d:01:
29:bd:67:fc:56:39:5c:53:e1:7b:b3:be:b3:22:7c:9a:be:b9:
3c:a0:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:05:03 2025 by rpki-client