
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xgFrbMmH1H-VES1qQ_OHsShaM28.cer
File: xgFrbMmH1H-VES1qQ_OHsShaM28.cer (raw, json)
Hash identifier: 9Se77OoLn2v+3uWppowcbKY5fvkChnk/ZZOJVEuX25Q=
Subject key identifier: C6:01:6B:6C:C9:87:D4:7F:95:11:2D:6A:43:F3:87:B1:28:5A:33:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9D5493CF04F65EAC78D4DB849BC59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212802
Validation: Failed, certificate revoked on Mon 17 Mar 2025 08:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d5:49:3c:f0:4f:65:ea:c7:8d:4d:b8:49:bc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6016b6cc987d47f95112d6a43f387b1285a336f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:4a:54:e6:ff:04:32:c3:90:02:b4:8a:29:
d5:f6:60:07:87:f2:42:99:ec:4b:7c:6f:9c:7c:6a:
65:c5:ba:5c:50:44:39:88:d7:56:7b:16:c7:f0:c7:
ab:43:ec:1b:f6:04:fe:93:02:56:65:fb:7c:e8:73:
f4:a3:10:37:41:26:ea:5b:8b:de:7d:c0:0c:9f:37:
eb:1a:ea:c7:b4:d3:c6:fe:cd:79:14:49:fa:2a:f2:
73:0c:11:4e:e6:a1:8b:d0:de:da:f9:fc:00:c2:15:
5a:6e:d7:0a:93:a0:89:d2:6b:a0:ef:cc:d2:c1:1d:
7a:97:39:fa:66:44:a3:8e:a0:21:b1:ba:1e:df:04:
37:72:4e:f0:ad:c9:cb:d0:a1:f4:f5:ab:60:0b:f7:
98:c7:ca:d2:b8:a9:8d:35:e2:8c:7a:68:51:30:6d:
a4:42:ba:7a:13:87:5b:9a:f0:d6:f0:ec:9c:5b:59:
78:c0:d6:d3:d7:b3:0f:23:9b:15:64:05:20:58:27:
d8:95:63:20:21:13:27:fe:df:79:53:64:60:2b:8f:
94:e2:cb:68:cb:01:a4:3c:ec:34:ec:47:62:2d:ca:
22:78:24:4f:0e:87:b9:83:e8:d5:bf:05:af:b9:96:
70:ea:73:42:32:bf:1e:73:54:72:4b:3b:df:4f:95:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:01:6B:6C:C9:87:D4:7F:95:11:2D:6A:43:F3:87:B1:28:5A:33:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212802
Signature Algorithm: sha256WithRSAEncryption
50:e6:df:0d:38:e6:39:1c:34:ae:0b:f9:38:81:55:9a:0a:45:
5b:e8:eb:b7:ce:93:8e:b9:67:c4:b6:fb:87:f6:76:9f:41:39:
41:ea:8b:b9:3b:f4:b1:4e:6c:bc:c6:5f:23:de:e8:cf:b5:0b:
7c:45:d2:60:cf:02:91:58:5c:54:2e:44:a7:ce:54:2d:12:1b:
be:29:5c:26:cc:6e:0d:df:3d:be:d8:a1:f2:1e:d0:45:ee:af:
af:b3:de:cd:ed:64:37:7c:ce:a5:e8:55:29:45:f9:b8:14:14:
35:8c:cd:44:6f:e4:25:c2:f2:4f:b6:f2:bb:7e:8c:4b:bd:cb:
16:5c:fa:4d:20:9c:60:cf:32:77:cc:6e:e9:75:cb:c7:0b:a0:
b6:0f:b9:21:2d:1d:12:7c:90:83:4d:e3:3b:46:31:59:f1:3d:
57:80:a6:e0:dc:3f:40:21:ff:59:99:6c:fd:f2:c0:42:30:45:
22:8e:d0:c5:26:94:d9:9a:b4:9d:f1:52:58:f5:9c:9d:54:5e:
17:15:d9:c5:7e:17:40:e1:8c:b4:6b:fc:63:06:40:54:69:df:
2e:d3:8a:ef:bb:9c:bd:64:e4:1e:be:79:f9:7e:66:b3:f8:16:
04:88:59:c3:90:df:ff:4e:4d:7b:d4:7f:b3:33:f6:a2:b3:fa:
21:3a:0c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:37:15 2025 by rpki-client