Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ev8oX8LKwE1c90jweJq2paBhZ-Y.cer
File: ev8oX8LKwE1c90jweJq2paBhZ-Y.cer (raw, json)
Hash identifier: jidfqXTLPbMElZICJnp/2oPl1Tg8lUmYklPC+7Fgbos=
Subject key identifier: 7A:FF:28:5F:C2:CA:C0:4D:5C:F7:48:F0:78:9A:B6:A5:A0:61:67:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01958693CC837ED1778F52C1DB8873837886
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/676337-2f5b-4dfb-ac31-0b1883ea5cd0/1/ev8oX8LKwE1c90jweJq2paBhZ-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/676337-2f5b-4dfb-ac31-0b1883ea5cd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Mar 2025 18:59:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211729
Validation: Failed, certificate revoked on Tue 11 Mar 2025 19:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:93:cc:83:7e:d1:77:8f:52:c1:db:88:73:83:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 18:59:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aff285fc2cac04d5cf748f0789ab6a5a06167e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:e5:72:9b:22:91:2b:67:c7:89:1b:ec:c0:
f4:1f:9d:34:37:7e:aa:0a:7d:92:2b:a6:f6:93:d9:
bc:8b:98:3d:6e:66:f5:76:04:2f:c7:56:d3:19:fb:
f9:9a:9b:6a:d2:96:70:ed:de:ae:98:28:6a:5d:6a:
ca:b2:6c:77:84:62:dc:0c:dd:de:b2:60:2b:bc:63:
95:93:67:ca:e2:6d:72:31:38:7c:a0:fd:fb:72:40:
a2:14:b3:95:cb:6e:9e:3a:ad:cb:54:ef:96:00:ed:
9f:06:34:f3:d3:6e:ea:65:37:2c:e3:db:71:74:84:
27:00:d0:94:ac:8a:f7:d7:e4:a5:93:4b:c3:57:3b:
ae:08:2c:58:2c:4f:f9:4a:9d:55:46:ac:b8:bd:3a:
a1:d5:b7:44:28:5b:d7:09:f7:ba:a0:b0:f3:13:59:
b4:0e:cf:ef:05:cf:81:1e:34:47:a1:fa:bb:ca:25:
81:db:2b:48:cf:52:ea:c6:1c:8a:31:e4:1b:91:55:
9c:13:84:62:5e:fa:95:77:28:47:47:80:7a:b1:dd:
a7:d6:ef:2b:7b:17:5b:59:bd:f5:3c:1d:2a:25:60:
c3:50:22:ba:f4:6d:42:84:6c:e8:b5:17:77:13:9a:
21:09:73:80:8b:75:6f:f7:f6:d2:7c:c5:68:dd:11:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:28:5F:C2:CA:C0:4D:5C:F7:48:F0:78:9A:B6:A5:A0:61:67:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/676337-2f5b-4dfb-ac31-0b1883ea5cd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/676337-2f5b-4dfb-ac31-0b1883ea5cd0/1/ev8oX8LKwE1c90jweJq2paBhZ-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211729
Signature Algorithm: sha256WithRSAEncryption
7b:28:02:99:72:10:dd:87:6f:ed:b4:77:38:b2:80:42:9a:7b:
50:2a:fd:a8:06:37:80:ea:72:a5:db:fb:e6:bc:b2:39:e7:ea:
e1:97:55:63:d6:dc:ee:1f:b8:83:3c:f9:9d:19:0b:6d:2e:bc:
47:1b:6f:b9:6a:a6:b8:a0:ba:78:23:1f:e7:98:11:ce:f3:c8:
01:25:14:6d:1e:7b:db:9e:96:18:5d:cf:5e:51:da:83:73:30:
91:21:a2:f8:2d:6f:c9:44:e2:6a:5c:8c:2e:4e:48:4e:a2:53:
72:ad:cd:44:aa:22:4a:3d:80:7f:7f:c6:44:dc:09:bb:a3:5d:
75:2d:04:d0:8d:98:d6:2b:e9:df:bc:af:99:6f:0e:91:87:bd:
b9:e1:33:d9:e3:4f:78:3e:5d:da:6d:b4:84:ee:0f:16:2b:c2:
01:96:c9:64:7b:4c:f5:10:8c:f3:81:ce:8e:e6:ce:fa:69:72:
be:e1:7d:df:58:3a:ed:5b:cf:c5:a5:9f:9f:57:47:4a:f2:81:
22:43:82:89:19:23:94:f8:fa:fd:94:1b:83:be:a3:68:ef:6b:
dd:a3:26:cd:8b:c4:49:08:fc:d7:57:f0:fb:d4:93:67:fd:c6:
91:eb:97:23:fa:05:14:77:7d:1f:b0:f3:be:3a:70:99:98:d1:
8d:71:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:29:30 2025 by rpki-client