
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/apWJft4RUWB8CYrhC_Pdi2qXClI.cer
File: apWJft4RUWB8CYrhC_Pdi2qXClI.cer (raw, json)
Hash identifier: 8KKbV8chffhA3umLl92g07j/d5fURXtKhNx5mptBl1g=
Subject key identifier: 6A:95:89:7E:DE:11:51:60:7C:09:8A:E1:0B:F3:DD:8B:6A:97:0A:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B4A688073BB79596FE0FAD9F47E33D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208893
Validation: Failed, certificate revoked on Thu 23 Jan 2025 10:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:a6:88:07:3b:b7:95:96:fe:0f:ad:9f:47:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a95897ede1151607c098ae10bf3dd8b6a970a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:f6:1c:be:c8:66:34:a2:ea:6f:69:53:b9:
62:2c:0b:77:0c:9a:df:1a:53:87:af:33:48:12:17:
9d:1f:44:3a:28:26:34:ca:33:1a:b5:a6:cf:12:71:
09:09:9a:5b:7c:78:f6:0a:3b:c3:47:45:54:54:68:
92:61:49:8b:8f:1d:d6:b8:07:dc:b0:14:a4:eb:23:
2e:6f:20:42:9b:c4:04:7c:60:6e:77:4d:66:80:ac:
3e:73:72:13:16:b7:12:f4:07:b4:f7:4a:78:06:b4:
e7:a2:e9:9d:d3:31:24:f2:a7:ad:a6:ac:21:f9:d0:
8b:32:c2:04:60:b8:e5:f2:17:c8:7a:ac:82:6f:d0:
df:0d:35:f9:f4:81:71:da:f5:36:e6:de:a1:ad:6b:
6d:10:18:17:cc:74:9f:72:ca:d8:24:32:49:b7:c2:
f7:f2:85:42:25:0a:de:fc:39:5a:b0:a2:af:20:87:
15:16:30:c4:ac:71:10:72:49:a1:80:17:7b:3e:84:
d2:ad:7a:40:83:60:26:27:44:68:64:7f:c5:89:25:
d5:4b:a3:82:2d:0e:40:48:aa:f2:44:30:e3:ab:0a:
2e:23:bf:3f:8f:09:00:64:e9:ee:ee:a3:91:ed:6b:
13:f3:74:84:25:36:1c:b1:12:06:a1:9f:ae:33:03:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:89:7E:DE:11:51:60:7C:09:8A:E1:0B:F3:DD:8B:6A:97:0A:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208893
Signature Algorithm: sha256WithRSAEncryption
b1:ad:65:c5:ba:6b:d6:bc:7b:62:39:d3:a2:7e:4b:45:29:37:
f8:6d:99:4e:b6:fc:56:66:ce:0e:18:ba:5e:9b:17:bb:5b:68:
4d:6f:95:ff:6d:0f:e3:cc:3d:e6:e3:17:c3:8b:d6:18:b2:b8:
59:eb:b1:a6:39:d8:6f:46:c9:95:fe:69:6d:4a:9d:c4:18:55:
ef:c5:1e:08:d8:f3:e9:71:9a:ad:dd:3c:69:af:16:96:ee:46:
e9:8b:5c:7a:d7:81:8c:21:43:0e:6c:58:ef:eb:e6:45:9a:2a:
67:3d:27:e5:ef:7d:c1:67:43:ef:66:cd:64:ab:98:91:94:c3:
b4:e3:d2:29:ac:37:a9:53:a0:27:60:f5:7d:7b:5b:db:ca:eb:
f6:d5:d8:9c:1c:d7:ce:5d:e9:3c:1e:b7:05:e5:06:64:64:01:
49:c6:b1:a7:97:97:f1:e8:08:94:9f:c9:01:6b:d3:60:41:21:
67:f5:1a:dd:a8:59:25:c1:65:27:56:fe:b8:65:22:94:95:05:
2e:b2:47:6c:41:c8:2b:d3:12:0d:a8:84:bb:b5:c7:93:18:fb:
dd:b9:0c:04:49:ba:85:78:26:7b:66:5a:f3:d4:46:92:b9:4e:
22:1c:82:10:ad:1a:fd:ac:0f:2a:67:91:37:9b:c5:a9:e8:20:
9e:13:f8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:17 2025 by rpki-client