
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XEjolmuNGs5fPiAK-tBV07zYfcs.cer
File: XEjolmuNGs5fPiAK-tBV07zYfcs.cer (raw, json)
Hash identifier: hYHltgHTOSe8BoyghvPw1DkyQ3p0iT4laGb7grffte8=
Subject key identifier: 5C:48:E8:96:6B:8D:1A:CE:5F:3E:20:0A:FA:D0:55:D3:BC:D8:7D:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942520B8777B59C59EB589563793CBE23C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/XEjolmuNGs5fPiAK-tBV07zYfcs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203044
Validation: Failed, certificate revoked on Wed 08 Jan 2025 12:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:b8:77:7b:59:c5:9e:b5:89:56:37:93:cb:e2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c48e8966b8d1ace5f3e200afad055d3bcd87dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:5c:2e:6e:2b:a5:dc:2b:6d:58:d6:c7:6b:
47:48:50:3e:ca:a3:70:8e:48:9f:15:d9:23:f8:94:
53:b4:e6:9f:de:e7:e0:97:3b:2a:f8:fc:89:0e:0f:
80:71:a2:34:c7:0c:43:dd:c9:b7:f6:61:7c:5b:13:
d6:12:f0:9e:c3:2b:5d:2f:0d:20:f3:71:1a:bb:ba:
4d:db:78:26:69:ab:b8:f0:03:75:e5:2c:84:bd:2e:
4c:f2:96:a7:ae:75:4a:b5:fb:29:d7:7b:5e:f7:f9:
15:01:aa:72:a0:8e:ce:71:54:50:f0:e8:2a:fb:a1:
8a:6d:f8:e6:9d:e1:b1:e4:49:c1:fe:e4:71:5f:18:
1d:58:ea:eb:d2:ae:3d:ec:b9:18:0a:95:fc:a7:46:
d5:88:ca:9b:92:8b:d1:93:b3:ef:5e:77:2c:47:36:
c8:2d:a1:ec:fb:ae:8e:1c:ce:49:87:00:c6:6e:eb:
59:2d:eb:b8:ca:6f:8b:80:05:be:bb:fd:ae:22:fa:
25:a3:5a:81:31:b7:58:84:7e:22:ae:2b:15:9a:40:
de:8d:a1:54:b5:16:d1:f9:b5:43:57:45:fa:e8:98:
89:57:91:97:5e:4e:9f:91:a8:87:2e:aa:65:1d:a9:
ec:56:e3:78:bc:e7:70:72:1f:e6:20:61:25:20:b6:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:48:E8:96:6B:8D:1A:CE:5F:3E:20:0A:FA:D0:55:D3:BC:D8:7D:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/XEjolmuNGs5fPiAK-tBV07zYfcs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203044
Signature Algorithm: sha256WithRSAEncryption
57:e1:f7:2c:51:90:6c:69:37:9c:9f:74:fa:de:96:09:ed:ef:
88:fd:56:3a:2b:da:25:be:bb:bc:6d:e2:06:1e:d2:6a:cc:4f:
a2:c9:99:77:8c:5d:f9:53:2c:2c:91:20:d6:66:a9:49:e9:9d:
cf:4d:b6:dd:da:53:51:73:41:39:c7:14:8a:b1:9c:70:43:7f:
b1:ba:3f:eb:f1:ad:9c:89:fd:0e:78:69:0b:d4:f3:10:30:eb:
cc:e4:1b:1e:fa:ba:f3:64:d8:ae:eb:a6:ab:2b:f7:5c:10:ef:
93:2b:0e:d2:d1:7e:aa:76:10:24:9b:ac:43:be:9f:79:77:7d:
45:b2:6d:0e:29:94:7f:d6:b7:f4:80:40:14:64:f7:92:8d:2d:
0c:fa:f6:47:d1:b8:41:a2:92:70:49:30:66:64:92:c7:ca:7d:
bd:5b:e8:9a:1c:51:5a:e3:07:c1:62:5d:d0:2a:e2:89:4d:a5:
4a:a1:98:d4:ac:e6:b0:1b:65:f1:d8:26:40:22:bc:ee:75:af:
6e:08:1a:e2:fb:58:bc:3a:6e:46:6c:1e:61:01:04:9b:9d:ac:
b1:2c:75:b6:2f:18:81:bb:c5:6b:85:d5:ec:62:c1:59:5c:60:
c2:f1:7b:89:42:6a:0c:4d:7a:8f:30:41:9d:f6:9e:3b:9f:f0:
8b:44:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:32:53 2025 by rpki-client