
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer
File: Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer (raw, json)
Hash identifier: 1FmtDnSH568puW4neexhufuiliJD8nHUIYYUYfhoEGE=
Subject key identifier: 1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA5330FAA8A81796A10B3A310531CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211560
Validation: Failed, certificate revoked on Wed 15 Jan 2025 13:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:53:30:fa:a8:a8:17:96:a1:0b:3a:31:05:31:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dad3753e28794e1f8831ae710060b11a63376ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:1e:d6:26:12:01:a5:ac:c2:c1:96:a1:b5:
6e:07:91:ce:93:34:42:68:ce:22:6b:a2:89:eb:7a:
28:6b:4e:91:d8:db:60:70:d7:ea:23:d4:90:a3:80:
f0:c8:9f:6d:de:ab:28:7a:07:64:92:3b:30:69:3d:
d4:05:48:bd:c6:cb:b5:0e:e8:62:5e:0f:1b:4e:37:
57:ea:43:4c:28:fb:61:19:59:bc:04:98:cb:33:20:
56:fb:f8:0b:ed:02:9f:8c:d5:fe:57:39:0d:f3:c6:
f4:c9:4c:e0:5e:6d:3f:9d:57:2d:3e:dd:78:5d:cf:
df:d9:d6:d9:40:5f:77:cf:bc:07:02:cd:df:2a:4e:
f2:a9:e6:c1:48:e2:f6:71:da:33:ca:60:a3:81:c4:
35:1f:de:6c:f7:7a:94:f7:1a:81:08:78:a9:20:cd:
85:7a:3c:bb:8e:ff:1f:cf:e3:7d:82:e7:74:7f:46:
ed:3d:11:80:b1:f5:56:14:e1:06:c8:5a:93:23:05:
80:78:4b:09:73:dc:e9:c0:41:96:d8:3e:2d:a2:82:
56:e7:15:2e:3c:53:20:7e:63:e6:8c:74:d0:4c:3e:
dc:ed:11:ac:0d:ea:e0:99:b7:0d:7e:8e:2a:ea:ab:
6c:60:e4:a5:e3:89:4f:79:e1:b9:26:87:8f:ca:7b:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211560
Signature Algorithm: sha256WithRSAEncryption
20:50:9c:a8:87:f1:05:f1:68:5f:6c:bc:e4:96:c9:77:8f:63:
bb:75:e2:17:52:5e:3e:be:7c:a8:04:f6:d4:59:d8:98:a2:85:
d3:ab:f9:31:74:91:cb:cd:d5:07:25:1e:bd:49:9c:b2:b2:54:
51:63:bb:08:50:be:ff:23:dc:13:1d:ac:fa:63:0d:66:61:68:
9a:19:26:e5:99:e4:c1:bb:50:f9:f4:c0:87:b9:9c:26:c1:9a:
eb:e6:b7:fd:d1:74:0a:1c:24:48:26:4b:fb:2e:f0:46:f9:25:
ef:6f:80:1c:b5:50:63:e4:62:8c:63:de:c7:76:29:45:ce:c8:
17:49:17:fc:d0:6e:17:b7:f7:f0:9a:94:f6:7d:d8:a1:e5:6a:
19:b3:91:d1:ce:56:b6:64:6f:0b:21:74:bd:1a:fb:f4:27:87:
ec:5e:ad:ea:b4:27:76:37:69:e3:87:5e:60:5c:92:9c:19:4d:
58:00:05:c5:c1:8e:59:a5:a0:93:c3:37:37:27:81:fd:a9:b8:
2f:e2:4d:3f:21:03:98:7b:73:81:d0:b9:9b:e7:da:6f:c5:b6:
de:de:a5:64:3e:cb:e5:3a:fb:01:61:74:81:5c:11:64:59:af:
f3:c2:60:8c:6b:05:aa:0f:fc:8c:15:4f:fa:b3:87:33:31:f4:
b0:25:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:10:28 2025 by rpki-client