Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XPV2zob5WC3QMZpOmiXs23s17Dg.cer
File: XPV2zob5WC3QMZpOmiXs23s17Dg.cer (raw, json)
Hash identifier: zo6Itg3dxCVRhb6LS3HmmDkLn1B0XTtIXgB3UnQ9ll4=
Subject key identifier: 5C:F5:76:CE:86:F9:58:2D:D0:31:9A:4E:9A:25:EC:DB:7B:35:EC:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6219AE788919D531A75C55A49F834
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211481
Validation: Failed, certificate revoked on Mon 17 Mar 2025 08:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:21:9a:e7:88:91:9d:53:1a:75:c5:5a:49:f8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cf576ce86f9582dd0319a4e9a25ecdb7b35ec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:93:2b:46:4b:9d:91:22:0a:99:ff:53:b5:
b1:21:43:82:ea:a8:12:a3:3a:5c:71:9c:49:d2:7f:
71:f7:c4:55:60:6f:0f:49:c3:65:88:8c:76:2c:cc:
f0:9a:a7:c2:67:71:3b:6f:37:4e:3d:dd:a7:cb:2d:
5d:56:6e:97:d1:d9:fb:a5:db:0a:c8:d5:06:25:39:
98:f0:5f:e8:42:0d:4a:06:ed:3f:18:f7:45:5b:0b:
11:dc:74:43:de:04:81:20:18:38:14:48:8e:06:6d:
e6:17:b9:c3:a8:69:19:d3:f4:16:d1:89:d2:e4:38:
9f:61:3c:00:80:74:45:72:72:20:e5:d8:c7:9a:4b:
55:51:d6:87:ae:3b:ff:4a:a5:b2:3d:17:9c:b3:ee:
86:e6:fe:ee:ac:f7:b4:55:fe:37:75:e7:42:f3:e6:
75:b2:77:d0:f6:94:c7:5c:a7:26:19:3c:f3:78:25:
c9:ed:2f:4d:56:a4:6d:66:84:f5:2f:40:7b:8b:49:
a7:5a:bc:1f:8e:d7:eb:c0:c2:ea:e8:be:23:cc:73:
6f:a0:09:18:d3:c6:79:f2:dd:0c:57:64:b8:77:0b:
69:82:a2:aa:e4:d2:07:92:c5:54:d3:80:53:40:6c:
7e:47:47:01:16:30:c1:c6:35:d7:46:d4:91:44:9c:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F5:76:CE:86:F9:58:2D:D0:31:9A:4E:9A:25:EC:DB:7B:35:EC:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211481
Signature Algorithm: sha256WithRSAEncryption
a0:df:8c:2e:c4:0b:c3:1d:5c:42:b7:9d:b8:33:69:5e:32:26:
37:0e:4c:c3:24:56:e3:6a:d7:7c:e4:67:b9:c4:69:cb:1f:14:
b4:38:d5:8d:df:91:e9:ce:79:6b:a6:29:e9:19:ad:fd:b2:67:
81:ac:71:05:ad:f4:7d:f1:ae:48:91:c8:4e:83:8c:38:cb:8d:
8c:64:d3:42:23:d3:6d:9f:55:4e:e9:28:c9:88:c5:de:9a:bd:
75:3d:08:63:8a:54:a7:14:4d:fc:d0:81:3e:aa:6a:2b:22:11:
13:3a:95:6a:52:47:c1:d3:22:42:b6:9f:62:03:58:f4:85:49:
7c:68:c8:03:e3:29:d7:85:12:c9:a0:9f:dd:60:4a:a9:16:b2:
aa:04:64:14:79:b5:e4:b3:97:83:15:03:df:a2:c9:dd:7d:c4:
e4:de:28:e1:f1:3f:c3:a3:63:03:70:e8:d1:cb:e6:48:90:5a:
4c:85:4f:f3:cd:39:47:43:8d:ce:c1:d7:0e:e6:6a:26:6e:2d:
09:6f:27:0a:35:30:b5:90:9a:34:e5:1e:a8:69:bc:ca:c5:e9:
c6:3e:66:96:65:34:60:df:76:d0:dd:1d:c4:90:8b:e2:42:79:
f7:ba:6d:06:69:7b:c9:94:dd:ab:28:eb:e4:c5:e2:2a:08:4e:
b6:a0:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:39:58 2025 by rpki-client