Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cxmk3IltJc0ttnIi11OnPgjwFVw.cer
File: cxmk3IltJc0ttnIi11OnPgjwFVw.cer (raw, json)
Hash identifier: Z80US+4Vqk/GTJgR3v4LEzbl82CE5kysnhGPatcIQi4=
Subject key identifier: 73:19:A4:DC:89:6D:25:CD:2D:B6:72:22:D7:53:A7:3E:08:F0:15:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019900385EC7DD0B9FF2F0C9D8DF70EF7D05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bfd4b6ad-2f44-44b2-b49e-a2daccbb88ed/0/7319A4DC896D25CD2DB67222D753A73E08F0155C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bfd4b6ad-2f44-44b2-b49e-a2daccbb88ed/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 31 Aug 2025 13:01:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208824
Validation: Failed, certificate revoked on Tue 02 Sep 2025 17:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:00:38:5e:c7:dd:0b:9f:f2:f0:c9:d8:df:70:ef:7d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 31 13:01:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7319a4dc896d25cd2db67222d753a73e08f0155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:a8:a3:3e:10:75:d3:9b:dc:37:a9:79:6b:
1c:c4:93:a9:cd:9a:e6:fa:6b:75:e1:4e:85:71:19:
47:90:ea:bd:5e:55:02:75:f0:26:df:f4:54:b7:05:
7a:6b:4d:b3:90:e7:31:cc:e0:2e:87:49:9b:f8:ed:
59:e5:2a:b5:3e:fa:67:5a:40:9c:00:54:25:d5:8e:
cc:c8:af:7a:75:bc:99:03:2c:aa:a1:00:5d:4c:f3:
48:69:e9:05:8c:dd:58:15:36:41:06:ec:1b:50:8b:
9f:48:c8:41:41:d4:55:55:b3:80:85:90:bb:fc:21:
6a:7b:81:99:04:9f:51:90:0d:90:31:ae:59:3e:8e:
59:49:ef:f3:68:fa:c6:68:42:0e:eb:17:74:d0:44:
3d:ee:b4:52:f7:e2:c8:c2:5a:89:8a:c0:13:7d:92:
40:25:11:61:83:3b:7d:d0:3e:05:fa:54:d4:6e:f5:
43:36:6e:9f:25:0e:13:16:6e:af:8c:af:59:1d:b8:
58:3f:70:98:d4:2b:66:e7:5b:dd:1e:fe:8c:09:ba:
3c:b2:d8:a4:95:fd:65:28:45:82:dc:01:8e:67:30:
42:94:b7:f9:eb:42:17:92:4e:95:92:ef:f8:ec:f5:
0a:59:48:e3:f1:e4:0e:71:36:0c:ff:23:bf:2d:21:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:A4:DC:89:6D:25:CD:2D:B6:72:22:D7:53:A7:3E:08:F0:15:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd4b6ad-2f44-44b2-b49e-a2daccbb88ed/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd4b6ad-2f44-44b2-b49e-a2daccbb88ed/0/7319A4DC896D25CD2DB67222D753A73E08F0155C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208824
Signature Algorithm: sha256WithRSAEncryption
3a:d3:39:7c:a8:ee:42:c8:0e:34:5d:5e:07:97:63:8b:02:69:
cd:f3:15:f9:f2:e9:44:75:d4:d4:8d:29:8d:d7:43:ee:36:9f:
0d:f2:0b:52:89:d1:05:b9:8b:2b:54:8e:e0:3b:af:36:93:25:
4b:d6:32:57:3d:0b:fb:d6:f0:74:6a:58:bd:e3:5b:5a:ec:45:
ea:6f:79:ae:42:72:b2:75:b7:f1:bb:ad:f3:d6:57:64:a3:7f:
4a:71:e3:1a:44:01:83:fe:96:9e:32:d2:48:fd:5d:ec:8a:2d:
7a:cc:87:99:a8:93:40:a9:fe:4e:02:93:70:2d:d0:2c:49:49:
78:ae:36:4e:2a:c3:de:20:16:38:d4:04:dd:8f:47:71:cf:65:
65:34:3e:14:d7:26:a3:cf:ce:06:96:12:f7:56:96:fe:a9:fe:
12:d0:39:93:62:c1:c8:e8:53:01:aa:7f:18:63:7f:bb:e9:5a:
83:da:4b:a7:d8:d8:cf:3f:ef:b7:5f:d2:f6:20:cf:fa:4b:5b:
f3:8b:17:01:15:5f:df:a1:f8:2e:56:47:51:d4:27:d2:0e:b8:
eb:3b:3e:ae:6d:cb:04:8d:11:16:86:a3:50:66:ce:aa:c9:e4:
5b:2c:d6:ce:a4:68:34:c3:c5:64:4d:c5:cb:9b:4b:45:6f:94:
54:f1:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:44:13 2025 by rpki-client