
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0vGWWWZCvHke5nS6XLoKjoBAHPE.cer
File: 0vGWWWZCvHke5nS6XLoKjoBAHPE.cer (raw, json)
Hash identifier: iTC2ZwS8tAkQ+w154o6Yd3yZf2Bua9HP0ID57MsCELQ=
Subject key identifier: D2:F1:96:59:66:42:BC:79:1E:E6:74:BA:5C:BA:0A:8E:80:40:1C:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01956730904CEA5147120924570DD2BEB81C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/f3d828-c6c2-4e44-a163-2968eeb08a16/1/0vGWWWZCvHke5nS6XLoKjoBAHPE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/f3d828-c6c2-4e44-a163-2968eeb08a16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Mar 2025 16:43:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213430
Validation: Failed, certificate revoked on Fri 07 Mar 2025 02:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:30:90:4c:ea:51:47:12:09:24:57:0d:d2:be:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 16:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f196596642bc791ee674ba5cba0a8e80401cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:a6:3e:f8:a9:04:e0:77:6d:3d:48:dd:61:
2a:74:a6:be:5b:56:cb:58:ba:74:b8:3a:47:f0:13:
8d:3c:dd:c7:d0:91:0b:e0:b2:1c:dd:4e:f5:1d:60:
5b:36:1f:cb:5f:2c:6f:d9:1b:30:4f:35:4a:0d:3a:
f3:b6:7c:5e:7c:19:ac:2a:57:3e:27:d2:82:99:aa:
9b:4c:94:e9:36:91:21:83:9b:7b:9d:60:f5:01:12:
55:ed:72:e7:0d:0b:8d:16:96:15:53:3d:49:32:be:
1e:55:e7:17:2d:a7:50:f7:d7:cb:75:4d:45:a5:6e:
00:2c:1f:09:08:5e:70:44:5f:da:fc:bb:c7:e8:c6:
8c:08:72:a8:cf:ce:50:f7:31:aa:b1:83:ea:8a:ff:
a4:86:12:1a:7a:01:8e:8a:85:7d:a1:8b:5b:0e:11:
5b:5f:67:fc:d6:1b:bc:87:de:38:48:c0:2d:4e:74:
92:dc:19:1f:09:e2:00:7d:5d:e6:5b:dd:80:fc:bf:
9e:02:99:cb:5d:e5:3f:34:64:61:f2:ed:3f:2e:df:
04:e6:59:f2:50:73:14:7f:d7:ba:73:cd:ee:1a:97:
59:7d:4f:6c:ff:4b:12:e0:2d:6c:e3:72:89:16:96:
65:03:c3:ea:e3:72:d8:05:66:61:1f:1d:c3:99:35:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:96:59:66:42:BC:79:1E:E6:74:BA:5C:BA:0A:8E:80:40:1C:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f3d828-c6c2-4e44-a163-2968eeb08a16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f3d828-c6c2-4e44-a163-2968eeb08a16/1/0vGWWWZCvHke5nS6XLoKjoBAHPE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213430
Signature Algorithm: sha256WithRSAEncryption
93:75:0a:b9:ad:94:8c:f2:c6:1b:76:a6:fd:6e:74:c9:af:40:
f5:11:4d:03:40:3a:4b:89:c5:84:05:cc:1b:8c:2f:a3:d9:82:
34:1a:0e:33:de:22:cf:5e:86:87:43:79:dc:a7:ba:93:9f:15:
39:0f:59:7b:66:54:d7:69:b0:fa:4e:3e:0e:8b:94:7c:d2:f1:
ae:08:c9:32:d7:74:a0:5c:5d:29:3b:da:de:bf:e5:39:8e:c9:
a6:6e:53:9d:fb:13:54:8e:d7:93:3c:e7:19:b9:aa:08:17:10:
57:5c:80:0f:76:8c:6c:1b:b3:72:a5:69:54:c5:0e:3d:e0:85:
df:81:16:db:40:fe:7b:0b:a3:a7:69:16:fd:b0:4d:6d:fa:6c:
eb:cf:a6:4e:68:7d:36:b2:ff:e3:2a:58:8f:2c:61:b0:8b:04:
7d:6c:b1:1a:ce:67:67:43:31:f9:f3:42:c6:aa:ff:35:0f:0c:
79:b2:54:55:f4:4f:fd:05:8c:1a:cc:9b:58:f9:87:40:7b:b3:
d2:74:27:53:4a:90:3c:e2:4f:51:ab:15:78:26:20:b4:ea:18:
61:5b:d6:4e:bf:58:44:41:e6:c2:3d:2e:fd:f8:80:05:e8:6a:
d2:db:5d:10:15:53:77:ca:e0:ad:de:b0:87:8a:4e:77:f6:7b:
39:e1:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:56:52 2025 by rpki-client