Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zv7sV1-Mc26WMnT3ingxHtCs-wc.cer
File: Zv7sV1-Mc26WMnT3ingxHtCs-wc.cer (raw, json)
Hash identifier: S8bMDvL40I78sUgQXTC+yrKC54lKrCBJy1UjLY2XoHg=
Subject key identifier: 66:FE:EC:57:5F:8C:73:6E:96:32:74:F7:8A:78:31:1E:D0:AC:FB:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190147BD2095738F6F213CBDA4B4C3D3F76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/0/66FEEC575F8C736E963274F78A78311ED0ACFB07.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 14 Jun 2024 02:02:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215885
Validation: Failed, certificate revoked on Fri 14 Jun 2024 02:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:14:7b:d2:09:57:38:f6:f2:13:cb:da:4b:4c:3d:3f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 14 02:02:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66feec575f8c736e963274f78a78311ed0acfb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:80:8f:88:c7:4c:68:e1:03:9e:34:b1:47:
ec:94:21:2a:4c:91:ea:83:be:66:3d:4c:85:f7:2b:
41:92:d1:61:94:5d:5e:8f:4c:ae:da:ce:c9:74:5f:
9c:be:8a:7f:16:e4:95:d8:3c:e0:40:fb:1b:de:d9:
3b:83:f3:55:6b:49:48:c0:5b:f3:d9:ef:7b:fd:99:
76:93:fa:f8:56:9a:cc:b9:0f:9e:1e:2c:4e:68:2d:
d9:eb:9e:a7:61:3c:19:ff:6a:53:29:2f:7d:05:a8:
e8:2e:5e:e8:50:99:95:c8:58:16:30:86:93:37:fb:
34:1a:b4:39:e3:be:d0:58:e7:6e:be:8e:55:9a:49:
df:31:e3:8e:06:c7:45:a7:6c:eb:e2:2e:6f:8a:f6:
a7:f8:de:f6:d5:4f:1e:09:b1:29:b4:59:8e:7e:46:
fb:75:c1:2f:49:2f:40:08:25:97:0a:dc:18:ea:26:
28:e0:f7:e3:32:78:5a:cf:ed:6f:d2:a7:20:85:3e:
64:04:83:9d:d6:3f:d2:81:b6:35:a6:fa:e1:bb:17:
db:53:b6:a3:7b:90:62:69:37:83:c2:a6:b0:90:b8:
dd:2e:df:08:51:6b:13:a0:56:ca:3b:06:54:f7:18:
85:e1:55:a9:81:e1:e7:28:30:99:ef:b6:24:a3:6a:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:EC:57:5F:8C:73:6E:96:32:74:F7:8A:78:31:1E:D0:AC:FB:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68208bd6-4617-47af-8764-9108face418a/0/66FEEC575F8C736E963274F78A78311ED0ACFB07.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215885
Signature Algorithm: sha256WithRSAEncryption
99:4f:1b:e3:ae:00:c0:d3:21:0e:9c:83:80:7c:d3:f8:26:df:
40:9f:bd:01:64:92:6b:14:ec:86:00:37:88:80:30:9d:49:6c:
49:d7:6f:1b:3e:47:b1:e7:bf:b5:e6:0e:b2:e5:99:26:56:3d:
da:7b:92:91:63:c2:07:5b:9c:e3:78:2a:98:a5:e6:e4:04:07:
0e:2d:b9:6f:8b:99:a0:23:84:e1:32:5a:fc:33:05:b5:2d:9b:
7d:11:43:47:8a:55:da:32:23:83:55:cf:4e:d0:23:33:d6:26:
5b:07:10:a2:1b:16:ca:e1:c2:a2:26:8c:8b:5d:be:ca:c7:1b:
81:d9:e4:cc:dc:54:03:9e:fe:ec:ad:9e:9d:ca:c5:9a:10:60:
cd:80:49:07:66:2b:1b:0f:36:2d:71:8b:60:8e:35:ea:0d:c7:
37:8d:7e:dc:5b:ba:c4:5b:39:1a:38:5a:6e:61:43:0c:20:32:
a7:a4:41:e7:bb:d8:03:46:8d:eb:c2:70:a7:64:8d:01:f8:1b:
03:14:d7:6a:c1:9e:9f:33:e5:0c:fc:ca:00:b4:fa:ef:ec:bc:
87:fb:a5:5c:ab:a4:51:d3:0b:24:d2:02:d5:92:fe:38:36:66:
cb:d6:89:22:eb:8d:75:73:5d:2f:54:f6:77:10:e2:a0:fb:92:
91:a7:c3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:33:20 2025 by rpki-client