Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bz-HSAZGkIaj3sxXap7SPRFvinE.cer
File: Bz-HSAZGkIaj3sxXap7SPRFvinE.cer (raw, json)
Hash identifier: FPWW8+N8Ov/ODXjR0vtSUoZjMcnBnZKbJNBeTn+VBGs=
Subject key identifier: 07:3F:87:48:06:46:90:86:A3:DE:CC:57:6A:9E:D2:3D:11:6F:8A:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B501554FDE26A5E2906756AE2363D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/AS211411/0/073F874806469086A3DECC576A9ED23D116F8A71.mft
caRepository: rsync://rpki.co/repo/AS211411/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 06:27:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211411
Validation: Failed, certificate revoked on Mon 08 Jan 2024 08:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b5:01:55:4f:de:26:a5:e2:90:67:56:ae:23:63:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=073f874806469086a3decc576a9ed23d116f8a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:59:97:90:3e:77:38:13:90:13:4f:c7:b0:
44:b6:69:94:f3:85:bc:d0:8d:d8:e7:e7:0e:3b:d4:
49:f5:73:f5:f9:92:db:b1:52:6c:51:c6:d2:1c:b2:
5f:b1:30:af:ff:ce:df:10:b4:c1:2e:6e:08:c5:d8:
f1:0f:82:ce:a4:54:ec:2f:c7:7b:e6:f0:e0:6d:71:
ae:2c:a9:ce:0a:1b:63:cb:e5:b5:7c:ac:44:67:41:
62:48:4a:41:54:44:ef:22:b2:1c:a4:f7:2a:86:a3:
7f:76:57:22:ff:42:d1:5c:a7:8e:2e:2c:0c:88:3b:
f9:9c:77:a1:07:34:89:de:92:25:fd:16:f7:af:df:
c3:97:db:a8:16:14:22:98:5b:b5:48:9c:b6:80:4b:
dd:c8:b0:ff:2e:f0:35:d0:84:e9:1e:1b:a8:18:5b:
2d:88:1e:48:36:1f:5d:81:05:37:48:e9:57:85:23:
ab:22:a0:81:69:9b:cb:ac:b9:7c:5b:96:e7:6d:7c:
be:d3:64:24:96:80:73:31:3c:cf:8a:6f:03:6e:6c:
a3:1b:3b:d5:ab:f3:67:c1:be:4d:f6:fb:f6:8d:58:
42:7f:94:cf:99:e9:7d:5a:98:80:cc:e1:9d:46:b5:
2b:88:8d:a1:6b:ae:22:5f:d1:31:fd:db:ac:b2:13:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:87:48:06:46:90:86:A3:DE:CC:57:6A:9E:D2:3D:11:6F:8A:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS211411/0/
RPKI Manifest - URI:rsync://rpki.co/repo/AS211411/0/073F874806469086A3DECC576A9ED23D116F8A71.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211411
Signature Algorithm: sha256WithRSAEncryption
14:11:26:c2:38:f9:21:9c:a7:ce:db:bb:3f:bb:54:ce:93:e9:
1d:c1:97:58:17:61:aa:84:f2:93:ff:a6:29:28:97:8a:2a:e5:
70:e3:c4:f0:a3:d2:16:02:0f:e7:78:5a:e3:27:72:b6:a1:22:
17:5e:f8:9f:b1:c5:ae:8c:6d:68:c4:4f:cc:c6:20:ac:33:aa:
db:03:fb:6a:b6:3e:ce:a4:6e:52:ec:2f:be:03:4a:0a:bf:9e:
08:39:b4:ad:95:cb:db:16:f1:42:6b:e8:4c:a2:fa:e2:23:0a:
68:80:53:b6:64:ac:bf:9f:89:e3:9f:e5:1c:0e:62:92:af:20:
38:a9:c1:bd:5e:a2:af:90:95:e5:24:fc:61:92:14:f4:be:fe:
10:5f:da:75:07:f0:10:3c:fb:35:07:89:fa:d0:d3:cc:87:d1:
1c:52:50:50:42:c3:04:6a:77:e9:14:21:7e:3b:9a:28:c8:44:
68:a5:77:e3:04:43:17:1f:13:6c:1d:a0:eb:3f:06:2d:eb:39:
e4:ed:dc:71:87:a4:06:e3:50:dc:68:bf:f1:da:f5:73:21:23:
44:56:c7:4e:96:ef:cb:b6:25:a9:60:37:c2:a5:a8:17:d4:90:
b8:a1:09:67:83:cf:2a:e7:f4:fa:c2:24:ab:bf:b6:6c:bd:d9:
67:da:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:30:37 2025 by rpki-client