Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
File: t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer (raw, json)
Hash identifier: D4NMVJKhsrKgwwNs01arExQ7sYqEyLoTkB0I7B9kdo8=
Subject key identifier: B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193BA5272B075A459E8383EED583F1A9CE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Dec 2024 10:03:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210545
IP: 2a11:7b40::/29
Validation: Failed, certificate revoked on Fri 13 Dec 2024 13:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:52:72:b0:75:a4:59:e8:38:3e:ed:58:3f:1a:9c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 12 10:03:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:71:fd:61:33:bf:07:43:f6:fe:9b:48:f5:
7f:13:ec:bf:7d:b6:03:bb:21:68:b4:58:fe:8e:a3:
2a:7c:3d:34:7f:15:35:41:29:9f:07:77:bd:15:45:
28:1c:63:78:76:73:bf:4a:00:76:df:ed:89:8d:56:
72:ae:3b:0d:bb:46:48:10:0d:94:f9:64:ef:74:b7:
85:ec:cc:0e:8d:11:e1:4b:14:c7:e1:cb:47:a7:68:
a6:bd:5c:37:f9:19:3b:69:90:43:98:9f:9f:b7:a8:
d4:a7:46:0d:ec:9b:ad:6f:13:ee:46:fc:c0:52:2c:
64:ed:ed:dc:b4:d7:6d:42:06:07:7a:2d:d0:31:5c:
4c:cc:38:a6:61:ed:4b:06:8b:0f:88:d7:83:bd:b9:
aa:fd:55:4b:c9:c1:ce:63:c5:e7:3a:e6:a6:02:a5:
60:8a:ce:52:2a:93:0c:a0:fc:0c:8f:22:c7:2e:e7:
c2:c2:a6:e9:ee:c4:12:13:d7:95:f6:b3:fa:cc:0d:
08:6f:de:7c:7f:e0:92:5b:3f:d0:0a:c1:35:44:bc:
90:dd:27:5d:b1:4e:88:a4:e1:67:54:b0:39:2e:a6:
a8:af:1f:12:cf:5d:9a:57:d4:39:46:28:11:e7:94:
7a:f8:c5:2a:17:ad:40:7f:f8:81:21:dc:09:60:a1:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210545
Signature Algorithm: sha256WithRSAEncryption
11:dc:05:de:59:44:90:6a:33:b3:f0:61:23:b5:4a:7c:0b:39:
8b:e4:16:f6:3b:3a:ea:0a:2d:01:3f:d8:5d:32:91:46:fa:7c:
fd:55:57:f3:91:b6:3e:41:5b:d3:f8:1e:57:32:35:a3:8f:c4:
36:0c:b4:72:1e:36:9c:e6:d9:21:8d:4a:a5:4c:a3:ee:19:bf:
48:aa:2c:d8:b7:e7:84:9d:c7:14:22:b1:79:07:1c:61:91:05:
76:b7:eb:ba:23:26:15:06:cc:18:bf:a3:63:65:74:e9:c0:24:
5e:38:bf:48:39:da:62:7e:e4:fc:5e:cc:31:bd:55:66:0a:2f:
22:9e:67:e7:b2:e9:ed:06:19:57:bc:8f:f8:a1:71:bc:2d:92:
dd:ed:7f:f1:ba:ab:21:e1:6a:87:47:9d:22:bc:9e:84:b5:7f:
7a:34:01:e0:be:3b:26:0d:87:75:a2:9e:c3:cd:c5:24:25:ad:
7d:75:9a:f7:30:98:86:6a:5d:99:11:78:b0:e9:4b:9a:62:b4:
a1:b1:5f:7d:1f:a6:b1:79:60:ae:18:39:1d:a1:f3:23:9d:02:
02:1e:10:4a:27:3b:18:45:c9:5d:f7:60:cc:35:7a:c2:8e:7a:
9e:27:a5:86:ad:e7:75:f5:d2:eb:1a:83:e8:a5:a7:20:31:4a:
0b:a7:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:25:21 2025 by rpki-client