
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
File: Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer (raw, json)
Hash identifier: GADxG+3fPuSS+E+/hnoJ7oAx/SrtiMzJb0e6QduUA0o=
Subject key identifier: 0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1BFCD9C83CB573DF96135E9DBE2A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197609
Validation: Failed, certificate revoked on Mon 17 Mar 2025 14:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bf:cd:9c:83:cb:57:3d:f9:61:35:e9:db:e2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:57:48:40:84:e3:9c:29:79:94:76:b5:35:
fd:2c:8b:ef:b2:c5:63:5d:19:9a:6b:6f:df:16:8c:
a3:51:f2:34:35:0f:c3:f5:d8:cc:c7:33:11:1c:87:
03:f2:b5:07:07:59:12:a7:b5:f6:c3:40:0e:50:cc:
82:13:ef:5c:aa:08:f8:f1:ba:66:a4:d1:e6:33:24:
37:5a:42:a4:72:50:fb:d3:5d:96:00:13:39:a5:6a:
57:b2:dd:9a:59:54:b8:6c:04:31:57:1c:51:7b:bf:
45:da:03:61:0e:45:69:75:53:b2:b1:de:49:04:0b:
c8:3d:4f:59:dc:8f:ea:aa:12:8a:b6:e8:17:a0:3c:
66:f6:07:a3:de:54:ab:04:eb:38:1c:dd:72:16:03:
60:77:35:06:b2:1a:9c:87:13:72:fa:06:f2:8c:94:
e5:4c:ee:e6:7d:50:b0:d8:72:cb:81:02:9e:38:9d:
3b:1f:0f:38:9d:e0:68:5f:d3:63:41:44:14:8a:b2:
be:c0:4a:5c:d0:39:aa:ab:91:68:17:dd:0b:84:e5:
56:67:2d:9e:4d:33:a3:68:bf:27:f4:df:86:e3:46:
e0:a6:5c:09:6c:99:94:47:d7:d6:a0:a0:a8:bc:0d:
5e:b0:d0:2b:ad:8c:6e:41:a3:a6:2a:db:3e:fd:1d:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197609
Signature Algorithm: sha256WithRSAEncryption
6b:90:f1:96:25:73:c5:35:2e:5c:03:50:dd:f8:d9:d7:8a:fa:
39:3d:0e:60:04:2b:38:c3:c9:d0:27:12:bd:6d:54:84:28:8d:
c2:ed:87:24:70:4f:93:0c:bf:de:6a:aa:4e:74:d0:45:ac:92:
27:a7:4f:8a:9d:eb:47:30:6a:01:2a:27:c1:16:c5:76:fd:c1:
5f:c2:0e:7f:da:de:10:cf:86:d4:80:2f:f4:5b:d0:86:0e:d9:
af:3d:4b:f7:16:53:1b:f9:ec:bb:30:71:26:46:ba:56:15:d0:
68:85:6e:b8:7e:a4:a1:7c:ef:ed:10:94:58:52:34:60:08:c6:
26:c5:ea:07:6c:db:7e:b3:8b:57:a1:96:40:95:73:b3:6c:01:
f2:b3:9e:38:84:42:fd:e2:d0:88:15:18:84:5f:f2:4e:f4:c7:
27:10:08:5c:3f:e2:80:3c:24:69:06:06:6e:3b:a0:a9:72:26:
4e:96:53:4a:19:11:37:71:73:7a:de:26:5c:0a:60:c6:d6:12:
32:08:e5:51:45:d0:97:70:49:24:c6:29:c0:c5:6f:61:77:78:
0d:55:20:24:ed:ef:44:93:d9:4f:88:b0:c6:27:96:7f:4a:c1:
f3:2d:26:f1:60:fc:af:22:92:67:b5:5e:62:2e:42:f0:b6:6d:
0e:c9:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:51:14 2025 by rpki-client