
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XOpIaZvRUBgukZEQh8QIxKuhzTA.cer
File: XOpIaZvRUBgukZEQh8QIxKuhzTA.cer (raw, json)
Hash identifier: WYDj4jaeBJuvYvkiCEAqD8AxSHxXo438KMHGx+leA5A=
Subject key identifier: 5C:EA:48:69:9B:D1:50:18:2E:91:91:10:87:C4:08:C4:AB:A1:CD:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC84EAE6E7A7D93440C4210CC644A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197740
Validation: Failed, certificate revoked on Fri 10 Jan 2025 10:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:84:ea:e6:e7:a7:d9:34:40:c4:21:0c:c6:44:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cea48699bd150182e91911087c408c4aba1cd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:08:58:8a:c9:c0:1d:c5:8c:b5:b3:80:bf:
db:5d:fd:c1:c7:6c:0c:12:05:7f:8a:be:36:fb:d2:
f2:d1:94:c8:21:64:1d:78:11:20:3f:3e:52:4d:2e:
bf:14:a4:ba:4e:33:98:46:f5:c8:4c:fa:cf:0b:71:
10:72:3b:df:d2:32:6c:32:ca:dd:2b:aa:62:ab:38:
fc:0d:4c:70:13:45:73:e4:8b:ea:05:de:73:b4:82:
8d:00:d7:52:eb:19:d7:ca:74:d0:9c:aa:b7:6e:0f:
a9:25:35:18:79:eb:bc:b5:a3:33:04:e1:18:e0:1b:
57:a0:d7:c6:82:da:d4:ac:52:26:65:ce:22:3a:38:
05:ad:bd:fc:76:ec:86:7e:f6:90:67:93:d8:65:05:
aa:8a:7e:7f:02:47:10:7d:aa:3d:42:d2:d4:39:a9:
e2:17:e5:3d:94:e0:89:0f:39:28:80:7d:ff:29:0c:
88:22:45:cb:54:1d:33:33:2c:9a:50:d2:5b:01:10:
e2:a3:fb:96:f2:ef:ba:1c:ba:da:a9:d1:77:e4:7e:
a2:26:fa:b7:d3:06:37:a3:8e:e2:d7:1a:21:a8:51:
ac:fa:c8:32:a2:19:39:43:8f:d0:2e:fd:0b:52:82:
af:b5:24:72:5c:a4:30:c7:11:ef:c0:48:71:b2:d0:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:48:69:9B:D1:50:18:2E:91:91:10:87:C4:08:C4:AB:A1:CD:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197740
Signature Algorithm: sha256WithRSAEncryption
04:e7:74:6f:ef:4a:c6:19:15:ea:4e:07:27:21:3e:48:b6:21:
43:5e:69:ef:14:2a:e5:9d:a3:e7:95:a3:6d:d9:8e:0d:29:fe:
ce:19:a5:34:77:78:43:b3:bd:37:7f:d3:53:9e:89:9c:31:38:
e0:d2:a2:c2:ad:d8:fe:04:4c:53:de:41:08:0b:e2:70:6d:68:
b5:51:ff:5d:da:49:c1:b1:4b:6f:63:fd:e5:88:d6:22:98:b6:
b8:f1:ee:72:37:2e:ab:62:21:6a:f4:9b:5d:7f:8e:d4:3b:ad:
e9:79:ed:66:80:56:25:35:60:b8:0f:6d:7d:02:70:d7:10:8d:
06:4c:a0:04:a2:97:8a:54:39:69:18:47:b6:68:2e:ae:bd:bc:
30:4c:68:b9:c0:05:2b:18:be:41:b9:62:b0:6c:76:68:d2:ed:
b7:c6:0e:ec:f9:97:5d:d5:0e:66:c3:d9:cb:15:b1:7f:ca:a0:
d7:43:a0:1a:1a:a7:04:b5:6e:b7:b5:00:42:11:2c:2a:5a:33:
29:c5:6f:bd:a7:14:67:ad:b0:ee:d2:1b:70:4c:d2:7a:13:d9:
4d:9c:23:d2:f5:0d:d6:d2:33:87:aa:fc:98:ef:64:ad:a0:0f:
0e:61:ee:6e:c1:d2:65:e5:8d:15:8d:01:c5:9e:1e:4b:51:1e:
0e:34:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:58:50 2025 by rpki-client