Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
File: YnKIs6LyWHOqc5Bt03uv_wse9d4.cer (raw, json)
Hash identifier: u+SlqpXUVzDYXukLeXwfYVeOewY0M3Gm9AAquYvOfnE=
Subject key identifier: 62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D629B1607FFE9C5E8AE7EAD212893B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204474
Validation: Failed, certificate revoked on Mon 24 Mar 2025 08:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:29:b1:60:7f:fe:9c:5e:8a:e7:ea:d2:12:89:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:11:2c:da:85:44:fc:90:2c:fe:2a:af:ae:
0c:27:92:71:6d:20:71:c3:56:4a:76:a3:12:2f:75:
ff:1f:03:f9:bf:78:d9:f7:d3:5a:ae:d7:cc:2f:a5:
74:3d:67:ea:ec:78:7b:2b:05:da:17:1b:35:78:66:
41:aa:5c:a6:96:84:40:7f:3f:31:c3:8a:f7:5e:11:
78:58:43:84:55:9e:1a:59:6c:32:3c:29:0c:c1:2a:
29:2a:d2:cb:9b:88:84:b7:3b:c1:75:be:25:43:6a:
26:78:c5:43:74:0f:18:36:46:8a:7c:1d:52:1c:1f:
80:3a:8b:7c:69:56:51:f4:14:c8:3b:b0:4e:31:44:
21:c5:d6:e0:33:4f:33:c0:5d:c6:79:2b:bf:6f:63:
f7:3c:da:60:08:2b:b3:f4:60:a7:eb:ff:49:aa:7e:
2b:b1:c8:b1:2d:55:6c:92:ff:1d:5b:4c:ae:40:19:
11:ad:a3:02:ac:6e:eb:f6:f9:69:26:60:bb:6d:68:
1d:d0:e7:67:42:c9:f4:da:b9:33:64:eb:07:48:76:
52:ac:87:19:97:3a:07:2a:91:51:1b:2c:4d:2b:b1:
21:33:51:a7:78:77:cd:a1:0c:f5:2a:82:b0:b2:9b:
e8:27:8b:73:f6:65:a1:c7:2e:e8:68:c1:b8:df:56:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204474
Signature Algorithm: sha256WithRSAEncryption
94:63:d7:ab:45:fc:fa:e9:eb:be:f1:47:7b:f2:9d:d4:a9:71:
ab:31:ed:56:a0:b7:50:f6:2e:91:a7:83:98:d6:2a:0b:38:2d:
c5:4b:4f:e9:a0:30:12:83:bd:e0:c9:db:73:32:48:1a:5f:4f:
0f:24:82:33:ca:9e:9b:0b:e3:c0:b0:97:29:af:a6:27:e5:32:
a8:d2:7a:7f:32:2a:b0:5c:e5:20:57:80:7c:8e:21:eb:a8:d2:
b8:44:a8:f1:bd:02:41:ed:f0:23:53:42:88:b6:e1:38:53:e9:
69:a8:14:4c:8b:e8:99:11:20:f3:fe:b3:6c:38:ef:6d:38:f4:
51:b5:d3:c2:35:df:0c:2f:64:a7:39:e7:13:b0:2f:02:82:5e:
e5:01:38:9f:f6:05:5f:f7:09:2c:d8:04:ba:7e:9b:d4:b5:d9:
db:c4:28:02:2d:c5:4b:0a:de:36:21:6e:00:97:b6:31:0b:33:
9e:34:2a:ce:af:9d:b9:01:e8:07:29:18:f6:04:38:33:5f:44:
1f:d2:31:38:e5:fb:f0:46:80:cb:13:7c:8c:65:fa:15:e5:1d:
2b:eb:d1:12:dd:69:99:93:ce:ca:3e:46:ff:f3:1c:ce:be:06:
eb:8a:44:b7:e9:8d:1a:19:65:23:99:44:fd:5f:40:c4:25:40:
83:9e:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:50 2025 by rpki-client