Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rs7v_gLkrihxY8wopOb6Tg7Lbro.cer
File: Rs7v_gLkrihxY8wopOb6Tg7Lbro.cer (raw, json)
Hash identifier: sJnfzktctAfBO5Xedga4uVG4MjzD22xjt88a4KBOYAk=
Subject key identifier: 46:CE:EF:FE:02:E4:AE:28:71:63:CC:28:A4:E6:FA:4E:0E:CB:6E:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194FDB375715CCBA37686D41019F2784F4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/3fda5f-9421-4247-b4b0-2f167070165f/1/Rs7v_gLkrihxY8wopOb6Tg7Lbro.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/3fda5f-9421-4247-b4b0-2f167070165f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Feb 2025 05:06:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213434
Validation: Failed, certificate revoked on Mon 03 Mar 2025 21:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fd:b3:75:71:5c:cb:a3:76:86:d4:10:19:f2:78:4f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 05:06:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46ceeffe02e4ae287163cc28a4e6fa4e0ecb6eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:e2:6c:c3:d7:49:3e:f2:07:4f:4e:1f:16:
a8:a8:32:fb:de:96:37:a4:9b:bd:56:c1:43:22:b7:
7b:25:e1:61:50:8a:57:e1:b3:7f:ab:86:50:85:0a:
61:4e:5e:51:47:2b:98:ae:7a:05:43:47:c7:1a:66:
4a:3a:c1:53:8c:ef:17:f0:9b:a2:00:4e:75:aa:96:
16:f2:2d:b7:7a:72:6b:a2:b3:dd:e2:80:75:74:e8:
30:73:e1:81:00:32:24:06:c8:a2:3c:ea:e1:52:02:
8d:73:b6:31:90:59:45:34:4c:34:f1:a4:bd:15:ea:
e0:63:c5:4c:cb:3a:65:6f:8b:a1:b4:8c:1e:30:71:
3e:6a:a3:bf:d8:4f:f0:6a:b3:92:f3:a8:95:b1:a1:
fc:e1:3a:3b:3e:be:d9:a9:1f:4c:be:67:c9:73:50:
e9:32:6e:2a:49:78:6c:79:26:52:ae:e5:12:84:92:
a6:13:be:47:9e:23:28:0e:e5:80:61:de:1b:d4:26:
9e:71:85:78:f2:94:1c:af:23:6d:cf:d7:ed:41:3b:
5a:46:0f:51:f4:e5:39:b4:f2:96:b7:95:95:95:52:
ea:90:3e:00:34:d0:69:7c:ae:06:93:a9:66:f5:df:
45:a6:60:80:b0:9c:f3:73:35:e7:c3:72:b8:b2:03:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CE:EF:FE:02:E4:AE:28:71:63:CC:28:A4:E6:FA:4E:0E:CB:6E:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3fda5f-9421-4247-b4b0-2f167070165f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3fda5f-9421-4247-b4b0-2f167070165f/1/Rs7v_gLkrihxY8wopOb6Tg7Lbro.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213434
Signature Algorithm: sha256WithRSAEncryption
59:86:59:90:1b:9d:c7:da:fa:59:55:7d:bf:14:fc:af:8f:05:
41:d8:10:63:3f:da:43:63:e6:fa:ae:bc:a9:3c:9b:1b:dd:12:
5d:5d:3e:03:2d:66:08:c4:3a:91:ee:9e:e0:b7:b9:6c:69:52:
2f:e1:d4:5e:3d:09:ae:f8:be:da:53:37:be:e3:7a:51:ff:e4:
15:1d:3d:be:b2:ac:3e:f6:f4:37:41:aa:fb:84:8c:56:1e:b4:
7a:1a:ee:7e:fd:9f:21:35:bc:82:11:53:d2:dc:13:4e:ea:b0:
a7:69:eb:eb:62:7f:e8:5c:63:a6:be:11:77:7d:7c:43:1e:de:
da:48:7c:9f:c8:f9:0c:a3:d3:a8:cb:fc:41:78:85:bf:ac:bf:
f5:91:7a:1a:25:e1:c7:2a:83:e8:b5:cd:d2:8d:6c:0f:ad:d8:
f9:94:56:93:dd:7f:15:41:a1:1e:b5:10:bf:a1:d6:12:55:e7:
c8:fd:1b:cf:e2:f2:a3:9e:e3:c1:86:f9:57:13:03:98:16:4d:
56:23:eb:c0:72:b4:93:a9:29:c6:5b:53:8b:4f:e7:0c:00:8c:
21:1b:5b:e9:0b:0c:4b:4b:01:be:d4:76:8d:f7:31:5c:f2:23:
2c:4f:c8:e4:b5:57:c7:fe:cd:de:07:c3:84:33:38:a2:fa:ca:
e9:ed:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:07 2025 by rpki-client