Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dMiLhSk47FYBRPgpKZyh6Eo2p10.cer
File: dMiLhSk47FYBRPgpKZyh6Eo2p10.cer (raw, json)
Hash identifier: yAG4/TJUJS2umubD1JDb2QYXt5Z80pOc6z4VsJ7RG4c=
Subject key identifier: 74:C8:8B:85:29:38:EC:56:01:44:F8:29:29:9C:A1:E8:4A:36:A7:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019410A58B6B56AC0B791BA29123E194B275
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/31017f-5446-4f79-af5d-e815bf40df9a/1/dMiLhSk47FYBRPgpKZyh6Eo2p10.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/31017f-5446-4f79-af5d-e815bf40df9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 29 Dec 2024 04:21:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204012
IP: 2001:67c:d80::/48
Validation: Failed, certificate revoked on Sun 29 Dec 2024 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:10:a5:8b:6b:56:ac:0b:79:1b:a2:91:23:e1:94:b2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 29 04:21:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74c88b852938ec560144f829299ca1e84a36a75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:50:aa:0b:3d:b6:e9:c5:c3:97:f1:87:47:
01:2b:51:5f:e2:e4:61:ef:16:3e:f5:12:29:7e:23:
42:f4:d2:7b:83:2f:a5:a1:0d:31:77:5c:f9:fa:f0:
31:d0:4e:8e:a4:3b:88:80:30:05:d8:89:43:94:65:
45:29:b0:37:0e:8e:93:24:fc:a8:57:3b:6d:5e:97:
8b:9e:21:55:1d:0a:1e:6d:a5:d6:81:da:95:50:63:
8b:ba:f4:25:14:ec:f8:45:76:16:16:bc:42:78:90:
cd:26:fe:73:36:9c:aa:91:bc:fc:e9:19:b9:2a:bb:
8a:42:24:a3:2a:f2:39:94:e6:88:01:18:90:65:a3:
c4:a3:79:3c:f1:d4:12:fb:32:c8:53:83:93:93:e7:
c8:4c:a7:1b:72:85:55:e2:04:e1:63:25:49:d8:a0:
ab:a3:09:e9:22:f9:fc:87:6e:be:92:64:ed:1c:07:
77:6f:e3:17:7e:63:1a:b2:37:83:d1:bb:c0:23:ab:
26:f7:ea:7e:34:ea:53:da:5a:53:ca:da:e7:cb:ef:
e2:b1:eb:07:40:53:f4:b5:32:75:c2:45:24:74:48:
0f:84:e8:3b:6e:58:28:7b:0e:7c:03:f3:e9:0c:31:
e1:3e:33:97:bf:cd:c3:62:2c:9c:e0:b2:c1:d3:57:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:8B:85:29:38:EC:56:01:44:F8:29:29:9C:A1:E8:4A:36:A7:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/31017f-5446-4f79-af5d-e815bf40df9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/31017f-5446-4f79-af5d-e815bf40df9a/1/dMiLhSk47FYBRPgpKZyh6Eo2p10.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d80::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204012
Signature Algorithm: sha256WithRSAEncryption
50:3e:8b:f2:93:dc:94:47:ca:84:bb:94:a6:4c:7e:21:26:cc:
1e:02:e7:84:5d:b8:39:05:4a:b0:fb:59:e3:08:86:45:a9:72:
99:57:eb:ef:d5:ea:31:90:e7:65:61:a6:b2:f1:c2:18:1d:f8:
e4:b4:e8:35:e0:cf:6e:ff:a4:6b:f6:3e:88:0f:b3:29:41:6a:
7f:40:b1:95:b2:9b:89:67:e2:00:52:34:eb:67:9c:25:db:fd:
39:c5:57:3f:45:f4:9e:3c:7a:fc:49:ec:b0:2b:39:12:db:d9:
3f:c2:36:4f:9c:ff:55:b6:fc:5b:d9:70:9a:10:44:51:2d:fd:
18:31:c9:99:b2:a0:43:de:0c:2e:90:93:31:93:6a:ca:21:c0:
21:7e:db:e7:58:4b:ea:01:3c:54:14:3b:bb:ea:86:03:c0:a9:
ba:d3:b2:cc:d7:4c:6e:6b:df:8c:4d:6b:57:37:3d:65:db:34:
2c:80:9f:84:29:bc:b7:f6:a4:c3:88:93:80:d3:a5:26:65:5f:
15:36:06:4e:7a:63:6b:73:79:d7:65:0f:d9:01:e9:3a:a0:ab:
cc:32:5d:dc:a6:c7:79:15:e4:16:f2:cc:e0:8f:45:59:13:10:
47:2f:22:bc:f4:bd:26:0b:56:4e:21:14:94:ee:d5:2b:75:ab:
f5:85:8a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:32 2025 by rpki-client