Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0CdGZU04uoKhdY-22KoxZtMCKIk.cer
File: 0CdGZU04uoKhdY-22KoxZtMCKIk.cer (raw, json)
Hash identifier: tu2gGJjjURCWduGGYk1iVzScqJL2od+cs/WaHaPHOC0=
Subject key identifier: D0:27:46:65:4D:38:BA:82:A1:75:8F:B6:D8:AA:31:66:D3:02:28:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E4A6127A57D5C93673C447EB05986C4EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/85710d-f078-4613-b173-dd4b785ca5ed/1/0CdGZU04uoKhdY-22KoxZtMCKIk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/85710d-f078-4613-b173-dd4b785ca5ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 17 Mar 2024 03:07:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211738
Validation: Failed, certificate revoked on Sun 17 Mar 2024 03:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4a:61:27:a5:7d:5c:93:67:3c:44:7e:b0:59:86:c4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 17 03:07:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d02746654d38ba82a1758fb6d8aa3166d3022889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:f5:65:21:98:1b:01:73:e6:a0:4e:29:65:
f3:f5:e8:67:a0:77:c2:43:aa:58:5a:d1:d9:9e:68:
39:0d:e8:2e:7e:5b:90:97:42:f8:06:0f:31:32:5f:
7d:e8:af:08:90:99:b2:06:13:ce:ac:9d:4b:7b:5e:
eb:68:da:0e:55:cd:10:6f:d0:8e:12:92:ca:b0:99:
3a:93:30:70:46:fe:3f:5e:3b:5b:15:4d:09:45:46:
6a:5a:93:37:08:b7:90:06:ea:9c:75:c7:b6:12:bf:
ed:29:49:2f:bb:9b:48:ef:1a:46:d5:84:d0:4f:e8:
9b:a2:96:d5:97:a2:34:e7:24:17:43:a0:e9:45:0c:
3a:17:06:5a:4e:89:74:bd:78:97:ba:40:61:a5:ba:
d1:1c:53:a3:3b:ed:df:40:40:1b:4f:5c:ce:07:16:
ee:8c:c3:54:e3:73:8d:60:fa:3f:a2:d8:55:aa:c0:
61:9e:35:41:df:36:8c:89:e2:cd:b5:40:d3:10:c0:
80:aa:fb:1f:03:03:0d:ce:e3:30:4d:3a:40:78:40:
1f:ba:55:4a:15:92:d8:8d:bb:9a:30:df:e2:cc:2f:
4a:3d:9a:2c:ca:45:68:d6:30:24:d2:e4:20:4c:dd:
ca:85:46:ab:60:b3:ff:84:1c:ce:df:f7:54:42:ff:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:27:46:65:4D:38:BA:82:A1:75:8F:B6:D8:AA:31:66:D3:02:28:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/85710d-f078-4613-b173-dd4b785ca5ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/85710d-f078-4613-b173-dd4b785ca5ed/1/0CdGZU04uoKhdY-22KoxZtMCKIk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211738
Signature Algorithm: sha256WithRSAEncryption
70:b1:bc:ae:4d:0e:4f:57:1a:2b:0c:97:9a:f1:63:ff:28:78:
70:b2:f8:06:6c:e4:f1:c0:c6:eb:43:b2:d2:cf:5b:b2:11:c3:
09:06:30:66:9b:81:29:97:ba:51:3f:7b:eb:bc:82:a7:ea:85:
43:28:73:83:51:d9:fb:22:4d:08:76:de:4e:eb:9e:96:54:48:
9d:b1:2b:17:67:40:ea:e2:f8:62:85:c6:08:82:9e:92:dc:7e:
b1:17:cb:2c:91:5a:53:8c:7c:be:55:b4:92:b0:42:89:a4:be:
68:18:6b:ca:06:8d:5e:f8:87:54:75:bc:e3:6b:2f:a0:f1:18:
1c:9e:24:23:7f:4f:d1:fa:71:7e:51:69:34:c3:45:32:cb:89:
d4:10:60:bc:90:e2:7c:61:bd:30:b4:d9:2c:1a:b6:1e:32:ed:
a9:88:a1:a3:ab:9e:72:9d:55:bf:63:dd:79:58:c4:e9:39:7f:
61:0b:86:c6:ca:7e:c2:6c:18:77:fc:7f:aa:f6:3a:6a:46:71:
44:d1:71:bf:02:25:5e:9d:f5:ac:e3:65:47:0c:23:b6:47:0e:
99:f4:d2:1d:5d:27:9f:8f:5a:f0:1e:f9:ad:12:f6:14:f6:c1:
15:f3:c3:cf:d5:e4:46:a1:fc:ff:1c:38:ce:bb:41:e9:85:dc:
27:40:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:35:49 2025 by rpki-client