Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YgSUhalEZkFN1sInlHCCIL86Szw.cer
File: YgSUhalEZkFN1sInlHCCIL86Szw.cer (raw, json)
Hash identifier: liJ0ZgRho3hNmJY1A/d5I/6Dov//6Zai+Njktl1dwbc=
Subject key identifier: 62:04:94:85:A9:44:66:41:4D:D6:C2:27:94:70:82:20:BF:3A:4B:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196C8EFFA00D8E144DF2A53FF9ECA00F700
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/05b3ca-09c3-401d-8bec-fe15e0b32e58/1/YgSUhalEZkFN1sInlHCCIL86Szw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/05b3ca-09c3-401d-8bec-fe15e0b32e58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 May 2025 09:18:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209710
Validation: Failed, certificate revoked on Sat 17 May 2025 13:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:ef:fa:00:d8:e1:44:df:2a:53:ff:9e:ca:00:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 13 09:18:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62049485a94466414dd6c22794708220bf3a4b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:01:be:22:41:62:06:e6:84:3e:77:ca:51:
f0:2d:82:2a:8d:2b:30:e6:1d:b1:cd:43:44:3d:0d:
32:ad:ea:13:38:f8:d6:9b:db:db:a1:84:6f:de:80:
73:9e:8e:33:e3:77:09:99:06:1b:31:ef:dc:79:6c:
71:93:0a:49:c0:2e:8e:bd:ad:fc:84:5e:6d:10:6d:
5a:99:68:1c:96:5a:02:f8:a9:aa:44:ac:e9:70:3c:
7e:be:6c:36:8e:6b:0b:55:50:56:03:15:68:ab:7b:
48:c9:59:d6:f7:4e:6b:4b:b6:50:8d:a4:7e:fe:24:
10:86:ca:33:51:8f:db:68:eb:50:32:ee:b2:f3:dd:
bf:3a:3b:d8:bf:39:ed:7d:3f:2a:8a:90:a3:64:53:
39:63:b3:55:99:56:db:55:f8:e5:9c:92:0a:ad:99:
ed:4a:8a:95:b6:65:50:14:e9:95:83:b6:c2:ce:43:
a2:dd:31:67:bc:1f:01:2a:90:0c:aa:b1:32:ff:a4:
70:81:24:75:1f:69:d6:22:ba:b6:26:f1:5b:fa:5f:
b9:a0:16:d7:62:bc:08:30:23:df:9f:5b:18:0c:14:
9d:a5:43:02:44:8a:39:a2:6e:d0:27:64:c0:a7:1e:
f6:90:1a:06:08:32:bc:d0:a8:5b:6a:61:ea:c1:64:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:04:94:85:A9:44:66:41:4D:D6:C2:27:94:70:82:20:BF:3A:4B:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/05b3ca-09c3-401d-8bec-fe15e0b32e58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/05b3ca-09c3-401d-8bec-fe15e0b32e58/1/YgSUhalEZkFN1sInlHCCIL86Szw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209710
Signature Algorithm: sha256WithRSAEncryption
83:fd:4b:08:83:48:e3:5d:2e:a3:fb:67:39:48:d4:cf:87:88:
b2:29:2f:34:8c:05:b0:3d:76:16:f3:18:ac:c2:ea:5a:22:c9:
e3:72:02:b7:cb:e8:35:72:0c:46:88:d7:ef:51:8e:62:4e:43:
cd:b3:c4:ee:43:4e:08:0b:c4:9a:3d:97:fa:3d:ea:10:97:56:
de:90:f7:f0:33:b8:8d:a5:49:2e:91:b2:49:81:76:c7:b0:05:
d4:7b:d5:c1:ba:4d:f9:50:76:47:b1:5f:22:13:74:31:21:c3:
78:a3:62:c4:37:0c:2d:89:99:38:4f:ba:c4:46:40:1b:12:95:
d6:61:18:70:60:4b:c0:ef:0d:1b:87:7c:31:c8:cf:f4:95:99:
6b:c0:71:5e:4f:1f:90:3c:5b:a1:2d:6e:be:d3:c8:85:8c:74:
3d:62:bf:f8:40:40:13:a0:b5:24:65:2d:1f:a7:5b:f3:ee:a1:
26:65:d0:6f:0a:53:c9:4a:73:1e:f8:3c:87:51:68:53:3a:e9:
2c:32:a9:12:8b:52:1e:e6:1a:da:fd:90:f2:6e:26:ce:a6:1e:
73:39:7f:46:a3:98:01:cc:2b:d7:c2:07:81:43:d0:c4:2e:93:
86:cf:3c:a1:91:ae:85:a8:04:80:a4:49:9e:01:08:26:02:21:
17:8f:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:36:16 2025 by rpki-client