
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
File: QfxINXn14C0-SZzXOiOq2RQDGDE.cer (raw, json)
Hash identifier: N1IWBY7iE3KXY23ynueE0Crsv2dlZEgLyENsXyTR5fA=
Subject key identifier: 41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B388C8E5B8AE5FA025B7E3D542B0B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212057
Validation: Failed, certificate revoked on Wed 08 Jan 2025 14:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:88:c8:e5:b8:ae:5f:a0:25:b7:e3:d5:42:b0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41fc483579f5e02d3e499cd73a23aad914031831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:2a:22:c7:c9:f4:89:76:79:33:09:2a:3a:
6c:c9:71:2b:8d:a5:41:58:a6:ae:3f:a7:d5:03:e1:
d9:c5:fc:51:2e:5b:e6:47:6a:c6:6c:e7:ae:65:ac:
24:b3:9a:ef:c6:3e:9b:7b:eb:2f:65:af:57:39:69:
4f:2f:42:87:0c:03:32:5f:b7:1e:ad:a5:1b:2f:4e:
a2:e0:84:7d:28:34:4f:49:45:92:60:8e:c0:6d:ae:
db:96:1b:e3:f2:aa:f6:f1:c5:89:7a:95:0c:66:3f:
65:28:b4:2f:a9:2d:8e:a1:e3:52:b7:75:20:42:64:
60:39:6b:b2:0f:77:cb:e1:74:a3:82:0e:20:3c:18:
b7:67:03:f9:ac:58:32:00:38:78:b8:fd:41:bf:43:
f3:11:62:08:37:1b:01:4b:e1:51:88:5c:30:a4:2f:
c5:d6:3b:5b:70:17:fa:55:46:21:e1:64:8d:03:40:
59:f8:03:93:2e:d4:59:31:43:2c:1a:64:96:99:f1:
7b:3e:9d:d3:d5:f1:61:c0:f3:3c:ec:ba:af:f6:ad:
02:79:ab:1f:03:38:a3:b0:bf:32:cf:75:7a:d0:7d:
a6:72:9a:7e:d1:94:e5:6f:11:16:70:8c:30:c6:1f:
bc:ba:cd:d1:c7:83:d3:68:0c:b9:e1:0f:36:ca:ee:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212057
Signature Algorithm: sha256WithRSAEncryption
62:7a:3a:e2:00:1a:0a:78:46:27:84:58:7c:32:c1:42:6a:4c:
19:4c:10:c4:6b:86:8b:27:0f:c3:c0:0a:8c:dc:80:21:36:4d:
aa:7b:93:0a:a2:88:18:d5:1a:dc:df:f9:20:f9:4d:eb:47:cf:
7a:43:5f:b2:2e:21:f5:93:20:10:d9:fc:7c:9b:54:c5:24:f8:
70:a8:65:18:25:57:49:86:56:08:e7:90:26:fc:4b:93:28:2c:
33:79:16:56:b0:a5:59:ce:23:54:46:84:c6:c4:f4:59:09:eb:
c0:86:50:4c:37:11:79:9b:bf:18:73:f2:94:2f:f7:7d:e3:8c:
7a:86:2b:6d:65:b9:e8:60:34:1e:3d:fb:44:ef:df:20:a8:aa:
d5:ca:bd:06:4c:c7:f6:58:e3:5a:a6:b8:05:25:c6:27:3a:88:
07:a9:0b:f9:24:69:ee:82:a5:1f:1f:8e:48:24:9c:35:31:c3:
2b:c9:66:35:17:c8:70:22:17:95:63:96:9f:9c:d7:31:60:a8:
66:fb:83:33:28:07:92:61:aa:bd:43:a6:c6:03:50:ca:b3:9c:
15:0a:b1:b5:4a:47:f9:19:d1:71:d6:84:e1:9c:5e:48:9e:99:
29:72:c4:39:d8:fe:79:6d:61:3e:99:05:c1:29:fe:28:b1:d6:
84:db:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:26:14 2025 by rpki-client