Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
File: f-M2aJct_7fshiiujDwmvt4cq5o.cer (raw, json)
Hash identifier: qupfGwQrD63eCgTtS2CuZ9YXhlWtlQdaxwULDetBACA=
Subject key identifier: 7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941BE9146A296804D56AA3A726703262E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 31 Dec 2024 08:50:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51465
AS: 59460
IP: 91.241.32.0/22
IP: 2a0d:9540::/29
Validation: Failed, certificate revoked on Tue 31 Dec 2024 09:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:e9:14:6a:29:68:04:d5:6a:a3:a7:26:70:32:62:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 31 08:50:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:94:55:f9:5b:ae:b1:1e:d0:de:7d:63:01:
60:8b:4c:86:c7:2a:84:f3:26:9f:07:ae:d7:65:61:
c8:3e:99:54:ec:a2:7a:02:e9:74:0d:13:48:8b:bf:
29:3f:29:13:29:f2:04:b9:50:f1:b0:54:73:cd:04:
a1:b7:1c:a0:72:be:4f:49:eb:e1:8c:83:fb:15:bf:
cd:90:91:0f:03:78:df:f6:20:50:13:d0:48:99:db:
01:fe:18:51:a3:11:3d:b7:a9:0c:43:4b:80:27:48:
9b:67:3a:07:d8:2b:c9:bf:f4:ff:da:e8:2d:df:c6:
ec:8e:6a:49:c9:19:9f:62:1a:9f:8c:e6:d6:16:78:
9c:00:b5:ea:51:2f:a2:24:cb:51:36:24:c2:97:98:
00:9e:77:7d:38:0e:14:9c:a5:55:fe:66:c8:b5:15:
30:e4:03:aa:56:8e:4d:57:05:c4:bb:ed:a2:0c:2d:
60:bf:be:3a:46:17:32:15:ab:ce:90:2a:e8:aa:3a:
9f:57:e9:3a:ad:71:31:9b:9e:ed:02:4b:b9:ab:f3:
e1:24:e4:bf:f6:41:63:f0:00:48:57:b1:52:db:cf:
fa:36:a1:25:0c:26:b7:e4:06:2d:65:c9:74:11:dd:
26:5b:ee:95:84:d3:24:b3:12:50:d2:25:22:1b:2d:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.32.0/22
IPv6:
2a0d:9540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51465
59460
Signature Algorithm: sha256WithRSAEncryption
68:97:4b:b2:09:5e:74:75:8e:b7:6c:31:b8:88:b7:63:fd:7d:
82:46:39:7a:da:8e:57:a5:b1:98:56:d6:23:fc:39:09:b4:a5:
35:05:ac:2d:56:41:8d:ea:ba:6c:b1:7f:4f:d9:48:4a:5f:3b:
8d:71:ef:d6:c1:cb:eb:0d:a1:23:c0:84:af:07:ba:70:65:9c:
70:9d:30:0b:86:e7:12:f7:23:19:9b:1c:cb:8b:61:f8:a5:48:
e2:b1:a6:50:59:00:44:13:db:f6:d9:e3:4d:83:84:91:0b:10:
06:f3:de:e5:35:bf:55:8f:87:a3:c0:ab:b0:26:14:8a:40:30:
cc:07:19:35:c9:0f:de:06:fe:3b:43:67:56:b0:b2:9d:29:ca:
2e:3f:56:60:8e:27:86:cf:49:f9:db:8e:15:5b:b3:1c:cf:a7:
6e:de:43:14:d4:d7:3f:b9:a9:82:5e:8d:96:82:59:38:91:88:
c2:7e:f2:1f:63:b7:3e:44:cc:ab:23:1f:92:22:13:67:c0:ff:
d4:a2:3c:5c:e8:12:e6:b1:85:e0:68:31:11:14:d2:26:20:5a:
95:3d:06:15:76:4b:00:ce:61:2a:15:b9:74:a7:04:ed:1b:3d:
57:bd:4f:ed:36:02:1f:1a:14:b4:f0:41:30:67:81:c4:e1:3e:
a6:61:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:15 2025 by rpki-client