Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yhXVNsDU6KVuFNzBRHfr4mlRb5w.cer
File: yhXVNsDU6KVuFNzBRHfr4mlRb5w.cer (raw, json)
Hash identifier: Xjzbml+NF0niIx+c3BGOPboliAuv/aJhPaxd+pFPms0=
Subject key identifier: CA:15:D5:36:C0:D4:E8:A5:6E:14:DC:C1:44:77:EB:E2:69:51:6F:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D98D550464645B19AE57F6EEF31694
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/2743b7-fa7f-4aba-9ab8-509862a27654/1/yhXVNsDU6KVuFNzBRHfr4mlRb5w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/2743b7-fa7f-4aba-9ab8-509862a27654/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31421
Validation: Failed, certificate revoked on Tue 07 Jan 2025 11:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8d:55:04:64:64:5b:19:ae:57:f6:ee:f3:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca15d536c0d4e8a56e14dcc14477ebe269516f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:2b:7c:59:c6:72:ef:03:f9:3b:70:de:74:
24:d2:98:e8:9f:5b:1d:e3:68:e6:ee:7c:70:73:dd:
10:36:91:7f:1d:a0:78:a8:58:3d:92:e5:66:a4:ec:
b4:b0:b3:e9:70:dd:ed:65:7d:16:a8:57:39:25:cf:
70:15:f5:ba:76:cb:96:45:1f:7f:bd:08:a0:0c:aa:
8f:9c:90:d7:84:18:8d:07:33:07:1d:68:49:8b:05:
60:27:f1:b3:b8:0b:81:0d:4d:bd:d6:7e:9e:9f:32:
0e:d5:50:7f:0a:eb:be:2a:99:fa:21:9c:c1:8e:6e:
93:8d:e6:30:3f:32:b9:0e:d5:1a:23:5b:29:fb:b7:
9e:34:2f:fc:15:e8:e0:31:b5:dc:c4:e1:36:e5:c6:
8f:dd:ef:5c:4d:a8:4e:55:27:66:00:98:5c:1c:86:
bf:56:13:d8:bf:1c:94:55:e1:38:66:e8:cf:15:fa:
ca:3f:e2:54:0f:7c:c0:1f:55:e7:f4:d6:fc:4e:03:
be:f4:9c:d8:16:7e:34:65:c4:a9:fd:27:6f:ed:2c:
48:35:fd:45:ae:4d:b2:8f:8f:b2:27:48:0c:7a:10:
93:fc:ce:00:4e:a5:74:a3:f9:45:1e:26:c6:50:fe:
3c:6e:cd:21:ab:42:33:c3:42:e2:dc:e6:6d:3e:d7:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:15:D5:36:C0:D4:E8:A5:6E:14:DC:C1:44:77:EB:E2:69:51:6F:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2743b7-fa7f-4aba-9ab8-509862a27654/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2743b7-fa7f-4aba-9ab8-509862a27654/1/yhXVNsDU6KVuFNzBRHfr4mlRb5w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31421
Signature Algorithm: sha256WithRSAEncryption
97:ad:ee:79:aa:0f:de:94:fb:f3:89:d5:10:76:9a:dc:d3:51:
90:75:e9:1d:85:2e:c4:76:87:b2:67:d2:b0:25:e0:eb:24:bd:
c0:da:bb:c6:a5:86:d3:e5:fe:45:f0:4b:78:bd:a4:46:c1:e1:
f8:bf:d6:e2:ed:49:a7:52:53:3f:cf:bc:51:d6:c1:71:ea:f2:
69:30:a1:5f:58:b0:b8:be:65:19:79:f5:87:c2:20:d2:02:09:
1b:3d:b4:12:54:9b:0b:e5:4c:b7:ea:3f:e3:f8:bc:f3:94:51:
3c:29:3b:9d:39:75:4e:cb:94:c0:70:9c:b5:09:09:23:f1:99:
2b:86:2d:89:00:43:df:4e:e5:d5:65:53:ab:9d:8d:66:3e:73:
d7:6e:95:6b:61:f8:9e:e1:f2:d7:c6:9f:96:61:b1:78:3d:45:
ac:51:ed:d6:c9:6b:04:64:4e:d8:db:1e:c4:34:7a:56:c6:93:
a0:31:26:01:b2:25:20:78:78:be:fb:9a:5f:fd:ff:71:57:d7:
74:17:7b:dc:88:4d:ad:0d:bb:e6:de:4d:79:ef:85:fb:15:72:
ac:61:ec:4f:cd:6e:de:c2:da:fb:cd:47:cb:e4:10:ea:cc:73:
8d:b1:de:b5:00:0a:c3:db:ba:c9:a1:90:8f:ad:5f:0b:85:89:
a1:42:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:26:43 2025 by rpki-client