Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5SZPG7j7fK7FmpcMNMu0cXitaJI.cer
File: 5SZPG7j7fK7FmpcMNMu0cXitaJI.cer (raw, json)
Hash identifier: MgiF8l2ao8hvUuzB0JA146g8JL5kgacM75MfYh8ExnQ=
Subject key identifier: E5:26:4F:1B:B8:FB:7C:AE:C5:9A:97:0C:34:CB:B4:71:78:AD:68:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194201916ECA38CA9A10CF646788677B332
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/E5264F1BB8FB7CAEC59A970C34CBB47178AD6892.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Wed 01 Jan 2025 04:21:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215778
Validation: Failed, certificate revoked on Tue 07 Jan 2025 13:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:19:16:ec:a3:8c:a9:a1:0c:f6:46:78:86:77:b3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:21:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5264f1bb8fb7caec59a970c34cbb47178ad6892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:cd:60:6a:e4:37:62:77:d6:cb:9c:55:39:
cf:e5:e7:a1:37:91:01:52:e9:34:f5:cc:cd:11:36:
a5:43:51:19:c2:f1:cb:c6:f3:30:df:c1:25:61:4a:
df:bf:16:15:e4:83:48:f2:1a:b1:6d:f3:19:f0:a0:
01:0d:1c:ac:83:55:be:c6:da:97:69:48:61:54:c0:
fe:11:55:24:01:65:a9:68:11:26:da:3d:c8:1b:c6:
e9:2d:05:92:85:22:43:d1:be:06:96:61:78:53:79:
9c:95:9a:6d:94:7c:e4:16:ef:6a:53:fb:aa:87:5a:
f5:f8:83:d8:53:fe:18:f6:14:36:5f:01:63:7b:06:
e4:a8:db:b2:69:6d:78:8d:e0:40:1f:e3:e3:2e:73:
90:a2:f4:9e:be:39:94:ba:40:10:4d:9a:03:5e:37:
1e:49:77:ea:03:e8:c0:c3:18:53:dd:6c:b2:51:7d:
44:db:f8:50:f3:4f:0f:ad:1b:8d:e9:de:d0:ba:c0:
d9:7b:b9:59:89:47:56:5b:7b:42:1a:cb:34:bd:0c:
71:e2:af:2c:59:fa:3d:dd:53:ee:05:5f:f1:08:2f:
19:2b:3e:49:99:77:e6:44:80:d9:6a:08:3f:ad:ce:
43:22:c3:f3:ab:91:bd:66:f0:7f:be:dd:ea:19:79:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:26:4F:1B:B8:FB:7C:AE:C5:9A:97:0C:34:CB:B4:71:78:AD:68:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/E5264F1BB8FB7CAEC59A970C34CBB47178AD6892.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215778
Signature Algorithm: sha256WithRSAEncryption
77:e1:36:db:15:7d:6b:d1:bf:d3:fd:4f:3f:7a:b8:ab:d1:d6:
aa:7e:92:a4:03:8c:39:b2:11:8b:2e:1d:51:7a:e6:66:c5:aa:
80:59:a0:a1:af:4b:c8:5f:a7:c2:3c:4e:20:b5:28:eb:e3:e0:
1e:5b:b3:7c:0f:96:a3:02:88:a0:cb:86:69:52:88:eb:3e:fb:
dd:8d:33:45:37:76:3c:92:30:62:da:7a:4c:c0:7c:46:2f:e9:
8a:1a:df:66:52:42:c6:b5:fc:cd:33:f7:7b:8f:74:86:ae:1d:
0d:12:9e:e5:0c:bf:a7:07:e1:1b:0c:71:d7:ff:8c:db:47:c9:
3e:2e:a5:43:47:9e:ba:84:a8:79:37:b8:1f:b2:ca:cd:4a:fc:
d4:3c:9b:67:f4:6e:b8:db:84:38:5c:77:27:6c:22:b0:a2:12:
4c:ce:7e:9e:5c:f6:54:e1:b4:cb:df:17:e6:3c:96:99:78:9c:
18:48:f5:bc:16:da:f7:06:e4:f2:4f:33:c3:e0:5d:6a:bd:02:
c6:d5:9c:8d:64:94:13:cb:ee:53:8f:6c:c3:d2:8f:4d:f0:de:
38:93:95:2c:05:da:23:5c:3e:38:1d:ef:36:aa:1f:ac:e3:ec:
ab:cd:1c:77:9e:ac:bf:67:2b:78:50:c1:d1:25:d0:ac:96:31:
f5:17:5d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:18:29 2025 by rpki-client