Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kx3346_4-uFd8MZmA6uz1wyUaao.cer
File: kx3346_4-uFd8MZmA6uz1wyUaao.cer (raw, json)
Hash identifier: /oH7z6Gk+64hl4ure2AH/qKc+mBYl1kf/vGgMoP3OVA=
Subject key identifier: 93:1D:F7:E3:AF:F8:FA:E1:5D:F0:C6:66:03:AB:B3:D7:0C:94:69:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01947AC454C86F10A530C15521A4D78981DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/83775c-03f8-4289-a1e6-a49279209f4c/1/kx3346_4-uFd8MZmA6uz1wyUaao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/83775c-03f8-4289-a1e6-a49279209f4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 18 Jan 2025 18:54:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213560
Validation: Failed, certificate revoked on Mon 20 Jan 2025 01:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7a:c4:54:c8:6f:10:a5:30:c1:55:21:a4:d7:89:81:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 18 18:54:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=931df7e3aff8fae15df0c66603abb3d70c9469aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:f5:76:0b:99:d3:be:96:0d:e8:e3:0e:0d:
2a:e8:79:af:2d:74:62:99:bc:ad:49:df:80:cf:57:
2b:df:d6:49:11:19:9e:58:45:01:1e:3a:20:46:4a:
df:70:25:7d:97:e6:e0:40:68:c5:53:9a:7f:96:e6:
b5:6e:4f:72:13:c6:18:77:f6:bd:53:e6:76:db:5e:
e5:cb:9d:57:03:dd:33:1a:76:37:97:6d:63:37:97:
fc:f6:bd:5a:5a:fd:ce:4e:a0:d7:c9:3f:3a:27:9a:
6c:1b:f3:8c:51:01:94:d3:64:12:61:7c:aa:43:68:
94:bb:7b:f8:9a:21:85:3f:69:b8:15:db:23:5d:f4:
eb:63:b5:14:02:74:c3:f7:e9:89:ae:5c:cd:c7:b3:
57:3d:d0:97:27:9a:00:36:2d:61:50:93:f6:03:7d:
74:9e:90:51:c6:bb:3f:d2:90:29:93:ed:5d:96:16:
bf:b9:7c:4e:b4:14:92:d5:cd:2f:1d:ee:12:f7:21:
0f:7b:de:63:89:14:d4:d0:f9:ea:4e:b0:90:2f:d0:
a8:c8:90:67:37:9e:e1:98:9f:1c:a4:05:ee:63:39:
36:b1:26:a4:2a:36:cd:01:52:0a:36:b4:6c:6d:d8:
2b:fd:5d:dd:68:42:a4:03:be:dd:fc:69:84:07:aa:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1D:F7:E3:AF:F8:FA:E1:5D:F0:C6:66:03:AB:B3:D7:0C:94:69:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/83775c-03f8-4289-a1e6-a49279209f4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/83775c-03f8-4289-a1e6-a49279209f4c/1/kx3346_4-uFd8MZmA6uz1wyUaao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213560
Signature Algorithm: sha256WithRSAEncryption
8b:a2:80:fe:10:1a:59:48:b0:f2:e7:8a:6f:6a:ea:a8:8a:87:
24:29:f4:54:2e:2b:ac:a8:56:f4:06:39:f3:b4:e0:a0:df:84:
62:0e:a9:7c:ea:1e:88:72:16:26:83:6e:43:f9:8b:8d:ca:ef:
8c:02:59:f3:c0:3e:c6:b5:e3:27:6d:eb:c1:22:b8:a9:69:33:
66:a1:48:ed:a2:9f:1c:c9:57:c5:69:91:8c:d0:c2:8f:09:96:
22:0d:cb:a1:07:a9:2c:f3:e6:bd:ca:bb:a1:ae:b2:bb:41:71:
5c:79:50:59:97:3f:a3:99:cd:69:68:03:ac:ed:6c:ad:ac:0d:
05:e5:c7:6b:ef:7d:a5:a0:e1:a1:2f:a3:60:1f:4c:df:bc:5e:
76:58:77:07:a3:0d:52:e3:1f:f3:0c:c6:0a:6e:0e:c9:64:c6:
2f:34:17:3c:47:de:3e:76:54:62:69:71:0e:11:15:ec:bf:dd:
68:53:b0:b3:cb:37:66:38:08:98:92:f2:bf:2c:d2:93:d7:55:
4e:bb:30:39:59:ac:b1:11:59:f3:6a:4c:3f:b3:37:4f:b0:a8:
0d:9a:a5:85:a4:18:db:7c:6d:15:3e:f3:a1:9e:76:97:1a:bd:
6c:12:1a:4a:e5:ce:0a:6d:71:97:97:52:53:3f:d9:ae:e8:c9:
fe:c8:20:66
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZR6xFTIbxClMMFVIaTXiYHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTE4MTg1NDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzFkZjdlM2FmZjhmYWUxNWRmMGM2NjYwM2FiYjNkNzBjOTQ2OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqr1dguZ076WDejjDg0q6HmvLXRi
mbytSd+Az1cr39ZJERmeWEUBHjogRkrfcCV9l+bgQGjFU5p/lua1bk9yE8YYd/a9
U+Z2217ly51XA90zGnY3l21jN5f89r1aWv3OTqDXyT86J5psG/OMUQGU02QSYXyq
Q2iUu3v4miGFP2m4FdsjXfTrY7UUAnTD9+mJrlzNx7NXPdCXJ5oANi1hUJP2A310
npBRxrs/0pApk+1dlha/uXxOtBSS1c0vHe4S9yEPe95jiRTU0PnqTrCQL9CoyJBn
N57hmJ8cpAXuYzk2sSakKjbNAVIKNrRsbdgr/V3daEKkA77d/GmEB6qNDwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJMd9+Ov+PrhXfDGZgOrs9cMlGmqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzgzNzc1
Yy0wM2Y4LTQyODktYTFlNi1hNDkyNzkyMDlmNGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvODM3NzVj
LTAzZjgtNDI4OS1hMWU2LWE0OTI3OTIwOWY0Yy8xL2t4MzM0Nl80LXVGZDhNWm1B
NnV6MXd5VWFhby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNCODANBgkqhkiG9w0BAQsFAAOCAQEAi6KA/hAaWUiw
8ueKb2rqqIqHJCn0VC4rrKhW9AY587TgoN+EYg6pfOoeiHIWJoNuQ/mLjcrvjAJZ
88A+xrXjJ23rwSK4qWkzZqFI7aKfHMlXxWmRjNDCjwmWIg3LoQepLPPmvcq7oa6y
u0FxXHlQWZc/o5nNaWgDrO1srawNBeXHa+99paDhoS+jYB9M37xedlh3B6MNUuMf
8wzGCm4OyWTGLzQXPEfePnZUYmlxDhEV7L/daFOws8s3ZjgImJLyvyzSk9dVTrsw
OVmssRFZ82pMP7M3T7CoDZqlhaQY23xtFT7zoZ52lxq9bBIaSuXOCm1xl5dSUz/Z
rujJ/sggZg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:46:47 2025 by rpki-client