Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6iQrmqR01WYgQ3bp5Rk8LLY5SOY.cer
File: 6iQrmqR01WYgQ3bp5Rk8LLY5SOY.cer (raw, json)
Hash identifier: 4btjr6YghpcY+r5j1I3vy8ZklKOouHhe4R4mbr//vY0=
Subject key identifier: EA:24:2B:9A:A4:74:D5:66:20:43:76:E9:E5:19:3C:2C:B6:39:48:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B70D46521509C6AB97E20B7E6AA90F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/90509d-e2ee-4c41-8e3a-395847ed9112/1/6iQrmqR01WYgQ3bp5Rk8LLY5SOY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/90509d-e2ee-4c41-8e3a-395847ed9112/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44423
AS: 216360
Validation: Failed, certificate revoked on Fri 19 Jan 2024 18:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0d:46:52:15:09:c6:ab:97:e2:0b:7e:6a:a9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea242b9aa474d566204376e9e5193c2cb63948e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:b4:91:4e:02:98:aa:3f:a9:41:f9:9f:ba:
ef:43:8f:f1:e9:ba:ef:e6:13:98:67:95:5b:0c:41:
04:30:35:c7:ef:6e:3a:3b:e9:f0:81:cf:21:2c:6b:
cd:c0:8e:e7:58:76:9b:28:c8:8f:9c:99:8c:b5:f6:
63:01:6b:eb:08:89:66:61:05:b1:67:42:aa:dc:3a:
9f:e7:69:8e:a4:4c:ce:3c:09:5f:16:f0:b8:1d:72:
4e:39:62:56:84:12:81:ff:b4:16:cc:ef:16:ef:6a:
6d:07:0c:b8:64:cd:ba:12:92:31:7c:36:9b:4a:f9:
70:79:6f:96:42:a5:22:53:e4:cc:81:d3:d7:c3:b6:
e9:58:dc:9e:ca:9d:e1:32:23:c0:d6:f2:ab:f0:98:
13:2c:26:ce:90:c6:f2:c7:33:4c:f7:fc:37:5d:ec:
2d:1a:0f:3b:84:58:6b:2e:e7:44:23:fd:d8:cb:17:
01:5d:a2:71:32:c5:bf:37:d3:af:7b:e6:ed:c2:4f:
7b:83:2a:ac:fd:41:c6:58:c3:dc:0c:ed:a7:15:e3:
a2:06:ad:36:9e:5c:7f:51:2a:73:d7:4f:ac:2d:34:
13:69:f9:7d:68:6a:40:21:5d:d9:d2:c6:eb:07:83:
b7:8a:ed:12:7c:d9:fe:75:56:af:02:81:68:46:76:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:24:2B:9A:A4:74:D5:66:20:43:76:E9:E5:19:3C:2C:B6:39:48:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/90509d-e2ee-4c41-8e3a-395847ed9112/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/90509d-e2ee-4c41-8e3a-395847ed9112/1/6iQrmqR01WYgQ3bp5Rk8LLY5SOY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44423
216360
Signature Algorithm: sha256WithRSAEncryption
1d:0d:fa:14:1c:65:4c:7f:82:62:77:4f:a8:63:a1:12:51:82:
6b:4f:df:39:c8:ae:66:2b:b2:9c:c6:92:f5:e9:48:df:5b:90:
87:e6:a4:e2:cc:ef:53:c7:8c:39:90:c1:89:0f:f1:b2:bc:dd:
99:74:46:c6:8e:03:27:a5:48:5b:48:c1:49:c2:85:37:24:f7:
8c:c8:cb:cf:1c:f5:f1:8b:2e:8a:91:79:72:ad:df:f6:4a:1b:
43:d2:13:79:23:35:fc:4d:ca:e9:b3:b5:e2:28:53:db:85:97:
d2:74:1d:ec:43:7e:92:64:14:88:e2:76:71:5f:97:40:99:e1:
43:9f:23:2b:f3:c2:02:28:2c:fc:ee:3d:a8:19:a7:a5:48:8f:
18:d6:52:a7:76:47:33:86:23:db:18:78:ca:20:33:a1:d4:a0:
19:29:dc:c1:03:a3:df:15:cb:37:d1:7a:9b:ff:60:12:f0:81:
bf:a9:ae:ca:a3:8c:b2:70:aa:b0:e5:6c:4d:18:1c:0b:85:4f:
ef:9f:65:d0:2e:19:13:e7:fc:2f:26:ae:00:b3:bd:5b:97:83:
88:ec:93:6f:0d:04:79:57:ce:cf:95:ee:5b:f0:12:da:93:ae:
d7:4b:d3:5b:09:09:74:6b:ac:c4:f8:69:97:0c:aa:cd:1b:7a:
aa:5f:bf:dd
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDtw1GUhUJxquX4gt+aqkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTI0MmI5YWE0NzRkNTY2MjA0Mzc2ZTllNTE5M2MyY2I2Mzk0OGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR+0kU4CmKo/qUH5n7rvQ4/x6brv
5hOYZ5VbDEEEMDXH7246O+nwgc8hLGvNwI7nWHabKMiPnJmMtfZjAWvrCIlmYQWx
Z0Kq3Dqf52mOpEzOPAlfFvC4HXJOOWJWhBKB/7QWzO8W72ptBwy4ZM26EpIxfDab
SvlweW+WQqUiU+TMgdPXw7bpWNyeyp3hMiPA1vKr8JgTLCbOkMbyxzNM9/w3Xewt
Gg87hFhrLudEI/3YyxcBXaJxMsW/N9Ove+btwk97gyqs/UHGWMPcDO2nFeOiBq02
nlx/USpz10+sLTQTafl9aGpAIV3Z0sbrB4O3iu0SfNn+dVavAoFoRnZqtQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOokK5qkdNVmIEN26eUZPCy2OUjmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzkwNTA5
ZC1lMmVlLTRjNDEtOGUzYS0zOTU4NDdlZDkxMTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvOTA1MDlk
LWUyZWUtNGM0MS04ZTNhLTM5NTg0N2VkOTExMi8xLzZpUXJtcVIwMVdZZ1EzYnA1
Ums4TExZNVNPWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwCthwIDA00oMA0GCSqGSIb3DQEBCwUAA4IBAQAdDfoU
HGVMf4Jid0+oY6ESUYJrT985yK5mK7KcxpL16UjfW5CH5qTizO9Tx4w5kMGJD/Gy
vN2ZdEbGjgMnpUhbSMFJwoU3JPeMyMvPHPXxiy6KkXlyrd/2ShtD0hN5IzX8Tcrp
s7XiKFPbhZfSdB3sQ36SZBSI4nZxX5dAmeFDnyMr88ICKCz87j2oGaelSI8Y1lKn
dkczhiPbGHjKIDOh1KAZKdzBA6PfFcs30Xqb/2AS8IG/qa7Ko4yycKqw5WxNGBwL
hU/vn2XQLhkT5/wvJq4As71bl4OI7JNvDQR5V87Ple5b8BLak67XS9NbCQl0a6zE
+GmXDKrNG3qqX7/d
-----END CERTIFICATE-----
Generated at Sun May 11 12:45:43 2025 by rpki-client