Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
File: BuSteIiwjKRTVje2CLt9whSmYk8.cer (raw, json)
Hash identifier: xPZFVf7HHzm+UqOSPwkvlPgI+haWlVlQ+eyVu+cQAl0=
Subject key identifier: 06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195F0C99DE272B8B05303584EAB86305CF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Apr 2025 09:58:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41172
Validation: Failed, certificate revoked on Thu 10 Apr 2025 10:43:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:c9:9d:e2:72:b8:b0:53:03:58:4e:ab:86:30:5c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 1 09:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:09:c1:e0:09:63:7d:6b:66:b2:a6:9a:c4:
c4:ad:cf:28:8a:7a:09:40:53:69:04:87:68:9f:c0:
d0:08:f3:69:a2:0c:a3:5f:f6:ea:c0:77:c0:6d:b4:
c8:ac:4c:4e:82:fb:f5:43:ed:bd:50:64:e6:02:94:
8d:11:09:ff:07:23:57:68:04:2f:3c:85:d2:5d:ff:
03:55:19:8b:79:f5:e9:23:1b:3c:f3:cf:96:01:85:
1e:66:31:68:85:a9:6b:96:bc:d2:2a:60:74:bf:18:
1d:38:af:ae:43:62:d4:b3:0b:3c:d3:57:be:df:b2:
0a:da:26:78:00:84:36:00:26:78:83:c9:25:64:cc:
a6:4f:4a:71:c2:74:d5:19:10:3c:1d:c9:ec:55:89:
02:45:24:8b:e0:ff:f0:95:0f:75:ee:85:32:92:3c:
7a:69:96:c0:f0:ec:88:ec:dd:73:4a:2d:fb:dd:35:
3c:db:f6:50:bd:29:2c:8c:1d:7c:df:28:15:ab:88:
24:10:d3:5b:ba:45:29:9a:9b:dc:ad:cd:68:6e:36:
fa:83:07:fa:c9:bc:37:54:3b:02:57:3b:fe:ea:57:
1a:70:f7:6a:a2:f4:d1:ea:8e:19:2b:2e:f2:cb:38:
8a:5c:49:30:3d:c4:3e:0f:49:26:77:49:51:33:78:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41172
Signature Algorithm: sha256WithRSAEncryption
73:f7:d4:8f:c2:ee:df:0e:ba:6b:73:ba:d6:53:71:09:b7:31:
1a:43:9c:0b:20:c0:84:8b:c4:a3:7c:c5:27:a5:42:d6:6f:5f:
aa:e9:cc:4f:7f:e0:ec:71:23:35:11:bd:e5:6a:5d:e8:67:fb:
f8:11:3f:18:ed:b0:d4:c9:68:52:72:ad:b0:fe:9f:75:63:03:
32:73:28:b9:39:b1:ba:e6:09:95:2e:86:ac:33:e4:52:b7:3f:
50:45:c2:8c:d2:bd:bf:37:8e:6a:c0:72:8f:1a:86:28:fd:af:
43:54:8a:aa:9f:7e:e3:6b:85:03:b7:6d:28:6c:13:43:a4:db:
9a:2a:61:77:cf:5e:7a:f7:4b:e5:37:26:de:28:12:81:d3:55:
c8:75:8e:1c:7e:c7:f7:ad:b9:ae:89:d3:ea:24:a3:96:95:de:
98:33:48:c2:01:44:48:41:5d:fc:37:df:dd:c9:94:59:91:cb:
94:1f:66:50:80:46:f0:a3:3e:15:f3:43:81:6f:db:7b:db:69:
c7:dd:a6:ee:c5:7f:40:0e:bb:08:67:47:56:f6:55:6f:41:3c:
ee:3a:c8:9e:0b:0e:7c:27:7f:32:55:f6:f6:13:2a:59:e2:f2:
5c:53:69:08:13:4c:9a:23:fb:9e:bc:fb:87:67:41:53:d5:18:
97:b0:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:21 2025 by rpki-client