Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J6dwQBdz6SobTzEQXQ1BpuLCijY.cer
File: J6dwQBdz6SobTzEQXQ1BpuLCijY.cer (raw, json)
Hash identifier: x8edo7SovIU6/pfAVxC71e5GFL+c24a7+8cJGube4Is=
Subject key identifier: 27:A7:70:40:17:73:E9:2A:1B:4F:31:10:5D:0D:41:A6:E2:C2:8A:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FBF06AAFC9BB37306D01F9EB2E9F8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/1cfaf1-98dc-4a14-b30a-ffefd1376187/1/J6dwQBdz6SobTzEQXQ1BpuLCijY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/1cfaf1-98dc-4a14-b30a-ffefd1376187/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205965
AS: 215283
Validation: Failed, certificate revoked on Mon 06 Jan 2025 10:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f0:6a:af:c9:bb:37:30:6d:01:f9:eb:2e:9f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27a770401773e92a1b4f31105d0d41a6e2c28a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:36:3a:95:f0:24:c0:8d:08:dd:11:aa:32:
f9:3d:47:7d:cf:7d:49:85:0e:c7:f3:16:09:e6:f4:
9c:b8:86:8e:e7:ba:40:7a:de:42:a1:53:6d:32:ed:
b5:4c:4d:20:9a:27:cc:7a:8f:8b:8f:ae:38:80:67:
54:cf:2e:25:92:d0:db:f0:0a:1d:e4:49:05:38:50:
9f:31:a7:2e:24:42:59:87:7f:2b:72:33:30:28:53:
2f:5f:14:eb:1c:cd:eb:d6:65:b7:46:d6:0f:36:f2:
89:cf:91:47:08:2d:28:1a:26:f6:65:c2:21:19:a5:
89:77:e7:de:5c:a5:10:8d:a5:30:90:4b:54:c3:ff:
17:27:2e:37:54:30:cb:4e:f4:20:07:b8:8f:22:82:
31:ad:1f:f3:22:1f:ab:9c:a3:fa:78:b6:56:f3:13:
95:c8:39:c5:78:c5:d4:f0:0c:d1:68:c0:86:37:88:
b2:cf:fe:0b:7d:29:da:14:b7:7c:88:5a:28:d4:a6:
1c:91:4c:9d:09:bb:4b:dd:e9:7f:cc:42:ec:1b:64:
ba:00:a5:a8:0b:a6:fd:5b:27:d8:81:6a:14:8e:fd:
c9:ef:bd:6d:a5:b5:26:e4:13:e0:b0:fc:20:2b:f2:
39:5e:e8:3d:d1:fb:f2:d4:e6:f8:50:f0:a1:23:49:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A7:70:40:17:73:E9:2A:1B:4F:31:10:5D:0D:41:A6:E2:C2:8A:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1cfaf1-98dc-4a14-b30a-ffefd1376187/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1cfaf1-98dc-4a14-b30a-ffefd1376187/1/J6dwQBdz6SobTzEQXQ1BpuLCijY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205965
215283
Signature Algorithm: sha256WithRSAEncryption
19:a3:0a:11:12:e2:39:cf:1f:3f:f2:6c:b2:08:f7:fe:f5:10:
00:c8:25:c4:01:d0:b7:0a:8c:be:4e:7d:9c:b1:a0:6f:2e:39:
13:8e:fb:51:af:f4:05:60:a2:06:26:53:b1:21:ce:f8:7a:67:
89:af:76:5c:ed:50:8c:05:9d:81:a6:dc:37:8c:1c:9d:9f:29:
41:43:07:92:0f:92:4d:ef:12:2c:06:8c:2e:77:f7:3d:fc:26:
b3:2d:f2:97:a4:0e:2b:b8:72:16:9c:6e:f6:f7:69:e6:b1:1e:
81:cb:70:a6:0a:f7:7a:65:24:9e:7c:53:80:5a:6e:51:19:b6:
a5:b2:c2:bb:1d:46:64:f4:1f:00:57:d3:3e:d3:e8:83:16:1d:
ac:dc:60:93:3a:de:96:fe:c2:02:ea:f9:45:2a:a0:3c:33:18:
8c:db:c3:f5:0f:b2:6c:79:cd:a8:de:5a:75:21:a2:be:4d:f3:
12:1a:11:d1:20:a3:9d:36:e7:f1:2d:9d:aa:a9:79:06:c9:85:
65:ee:bf:6f:11:80:dd:cc:f0:c4:cc:f4:83:ae:6a:b7:23:72:
3b:fb:26:e3:77:23:7e:bf:5c:1e:70:d0:79:34:72:e3:ad:ba:
15:f0:d6:11:ab:70:9d:43:f9:2e:4d:3d:10:c2:57:b7:83:fc:
f4:7a:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:33 2025 by rpki-client