
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer
File: UZAPFNiJz2-neRaxmjkeLA0fgM4.cer (raw, json)
Hash identifier: seUKgfduhHVb5Yp7Uo8iCDopR6o9+5WNybRUBwcwFdg=
Subject key identifier: 51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3C201D49FEB40F69E1D81E871E6BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210864
Validation: Failed, certificate revoked on Mon 20 Jan 2025 14:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c2:01:d4:9f:eb:40:f6:9e:1d:81:e8:71:e6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51900f14d889cf6fa77916b19a391e2c0d1f80ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:65:59:07:30:6b:44:4d:22:e0:27:9e:b6:
e1:a1:58:b4:c9:91:44:4e:49:e3:bd:e1:d8:3f:53:
fb:5a:59:9f:c7:5e:15:89:1f:1b:b9:1c:80:a9:a1:
9d:92:a9:c6:7b:b7:c9:8f:f1:2a:ed:e0:d5:02:7e:
e7:28:cd:53:da:56:19:5e:e8:ff:4c:58:43:dc:5c:
bc:b9:30:9a:37:31:d8:91:90:07:8f:01:6f:b0:43:
eb:60:f2:92:04:83:b7:f0:5e:18:de:87:a8:90:dd:
a1:c4:79:36:62:a0:9d:10:23:95:87:07:11:d3:02:
38:db:65:8c:f4:d4:78:9b:c8:d2:d4:10:3c:07:c5:
4e:9b:ea:f6:1c:8a:6e:a5:03:70:da:cf:9e:ba:4a:
8e:ec:ba:01:e6:47:6a:b4:a7:60:7e:25:60:00:b7:
ca:f8:ba:e6:c6:37:77:68:9a:00:55:53:49:4b:48:
a8:f7:f9:bd:97:a3:5d:d8:03:32:d0:f1:5f:dd:02:
45:46:3c:b2:f8:db:79:80:ac:3a:dd:27:b9:82:f7:
2f:af:e4:b3:d7:e9:0d:17:b5:2a:86:85:8c:36:fd:
07:33:b9:bb:fe:ad:94:0b:6f:12:fc:9c:cb:6d:23:
ea:9b:94:83:8a:c7:e6:84:c5:68:85:53:3c:9d:36:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210864
Signature Algorithm: sha256WithRSAEncryption
a3:55:20:d4:95:e1:33:7f:8a:8e:79:43:97:43:f3:c8:57:e7:
31:54:67:a4:ff:9b:db:40:52:2f:7c:64:ca:9d:e3:54:85:41:
18:2e:63:5f:79:02:93:31:28:b7:1c:e6:0d:c2:30:6e:24:b6:
f9:3c:7c:f0:f6:a5:c8:2f:20:94:5f:66:d0:31:26:29:c6:d6:
47:92:b1:72:72:1f:b9:b8:33:c4:5e:fa:d1:66:2d:74:40:47:
76:67:87:6c:ca:7d:44:3e:f3:60:ab:c9:da:d9:ea:54:d7:8d:
82:03:3b:1f:0d:30:2e:05:82:e0:38:09:6a:e8:9d:5f:f5:f1:
3e:aa:e9:46:72:25:e4:cd:e7:d9:74:18:2b:e4:dc:1a:0c:38:
07:2c:0d:c8:5d:98:ac:ab:5b:7f:1f:32:b0:4b:a3:bf:21:47:
0f:82:54:6f:60:86:0d:76:f2:d8:e2:b9:4a:a0:ec:19:95:a2:
8f:32:b3:1f:8e:5a:36:59:c4:a8:87:b3:57:2b:c9:b3:56:fe:
0d:45:c7:5b:c5:84:d3:f8:81:87:29:0a:1d:77:e0:78:56:ae:
8d:f7:2a:d0:27:e0:9f:96:2e:fc:b9:26:1a:71:6a:0c:37:37:
c6:76:61:6b:87:ad:36:48:cb:c0:91:35:1d:3a:c2:76:90:5d:
77:cf:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:22 2025 by rpki-client