Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1xA4rDMyDx3jesSbRVVBd2tynrY.cer
File: 1xA4rDMyDx3jesSbRVVBd2tynrY.cer (raw, json)
Hash identifier: AsGTRn0EB7eeOS+x4UZgfzESa1Th47vW+A2WqE7mKfg=
Subject key identifier: D7:10:38:AC:33:32:0F:1D:E3:7A:C4:9B:45:55:41:77:6B:72:9E:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191E1B17A00BA2C2D59729E63408DB8806A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/c35638-378e-4735-b595-88265af41cf9/1/1xA4rDMyDx3jesSbRVVBd2tynrY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/c35638-378e-4735-b595-88265af41cf9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Sep 2024 15:26:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214223
Validation: Failed, certificate revoked on Mon 23 Sep 2024 12:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:b1:7a:00:ba:2c:2d:59:72:9e:63:40:8d:b8:80:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 15:26:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d71038ac33320f1de37ac49b455541776b729eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:50:74:4a:f3:4a:e5:8d:aa:49:fe:6f:05:
62:34:96:8f:8a:5e:0e:e8:94:9a:8c:fe:e0:96:e9:
42:9c:e7:4d:e4:8e:bf:23:7a:2b:20:0c:f5:ca:e6:
f9:65:4d:c3:f3:37:c1:9c:af:a3:c5:fc:6c:b3:dc:
97:09:14:20:24:9a:3e:3b:55:b6:55:66:75:01:98:
2c:1c:01:61:63:f2:00:78:94:33:35:b1:78:7c:e1:
83:f4:37:19:c1:98:d8:a5:d2:33:db:1b:9f:f6:f4:
f1:d2:df:d1:b7:ca:36:3b:ea:ae:d3:b9:67:2c:39:
5c:d7:56:63:c4:4f:3c:bb:1e:a9:a6:72:ca:3f:a1:
d3:78:9d:1b:88:be:17:fd:ea:5b:cc:11:2f:60:85:
02:93:76:98:fe:d3:a1:94:2c:92:51:84:14:75:9d:
8a:2b:99:2d:f0:c9:27:76:29:4d:b8:4e:77:db:2d:
63:04:26:86:d7:32:b6:d8:b9:1f:a0:a3:f5:e6:7e:
dc:7e:a4:e8:50:79:e6:44:c3:69:49:27:01:d8:6d:
d7:86:3b:dd:a0:13:63:50:2c:0c:dd:bc:89:d1:ac:
d7:df:86:55:97:9f:d8:8d:c8:b0:83:2d:ec:d2:58:
1f:3e:9a:b3:4f:2e:7d:a6:22:3f:d0:32:25:12:c2:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:10:38:AC:33:32:0F:1D:E3:7A:C4:9B:45:55:41:77:6B:72:9E:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c35638-378e-4735-b595-88265af41cf9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c35638-378e-4735-b595-88265af41cf9/1/1xA4rDMyDx3jesSbRVVBd2tynrY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214223
Signature Algorithm: sha256WithRSAEncryption
37:f4:e1:fe:4b:1e:a4:3c:ff:7a:e1:df:b1:6f:dc:4a:4d:66:
a7:ec:29:2b:ac:d8:91:9f:34:cd:5e:0e:ef:5a:fc:d0:10:42:
97:59:23:4b:45:ff:b2:11:47:ce:c2:80:ad:fa:5f:e4:86:31:
f2:e1:78:c2:62:a8:48:8d:b4:56:60:e6:bf:2b:5c:40:61:dd:
c8:33:58:3a:f0:ee:c7:39:a6:4a:c4:b8:16:95:fc:80:f8:0a:
0d:6c:09:9a:9e:32:44:55:e9:38:7f:2b:5b:14:2e:54:d8:a9:
28:c2:5c:69:cf:be:1a:70:d1:8b:8b:3f:fb:dc:21:32:26:e7:
64:7d:5e:9c:a5:2a:93:9e:99:d2:b9:3e:da:b3:d7:06:53:ef:
bf:e2:30:c9:64:45:f6:4d:df:ed:d6:36:2a:55:6d:18:71:7d:
a4:af:80:91:97:07:dd:e6:59:46:f6:cc:da:5c:63:99:56:2e:
5e:18:e8:03:d0:dd:7f:3a:30:74:d2:01:3a:ea:3e:b5:e8:37:
0e:1f:4a:a1:5f:d9:50:10:f7:e9:d1:dd:d8:4d:5f:dd:6e:06:
04:a3:bb:32:58:d9:33:5c:e1:95:d3:39:dd:11:8e:cc:08:45:
80:77:22:ab:03:7e:19:cb:43:35:1b:b4:b5:d9:7a:88:f9:39:
69:c1:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:39:12 2025 by rpki-client