Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J-NWSKfZ58zUGsCxT91zQdNUXN8.cer
File: J-NWSKfZ58zUGsCxT91zQdNUXN8.cer (raw, json)
Hash identifier: a0s8ayDYSPxqmrYBY0AZv33UQ64KvI+oYcg0o3ztKOQ=
Subject key identifier: 27:E3:56:48:A7:D9:E7:CC:D4:1A:C0:B1:4F:DD:73:41:D3:54:5C:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941081977629A9C13FF639F8FB5849A6D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/27E35648A7D9E7CCD41AC0B14FDD7341D3545CDF.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 29 Dec 2024 03:41:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204012
IP: 2001:67c:d80::/48
Validation: Failed, certificate revoked on Sun 29 Dec 2024 04:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:10:81:97:76:29:a9:c1:3f:f6:39:f8:fb:58:49:a6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 29 03:41:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27e35648a7d9e7ccd41ac0b14fdd7341d3545cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:d0:b3:c0:8d:13:ef:c1:9d:02:c3:8a:ab:
bb:73:f1:a1:5a:e6:18:63:e1:e4:98:a1:6a:cc:da:
28:ea:2a:76:80:e5:90:de:8f:9d:d2:9c:69:0f:22:
94:1c:73:0c:07:e2:53:1e:03:d6:3b:7d:86:cd:bc:
61:8e:11:b0:56:e2:e5:72:78:e9:5e:e4:4a:1b:9b:
61:d0:20:50:31:af:75:3d:30:5a:92:61:e9:15:21:
f2:17:8b:79:cd:76:7a:04:57:13:3b:5a:53:1c:68:
8a:94:6e:a5:9b:c4:5b:bc:b6:d2:84:d0:25:2b:13:
d1:85:5a:13:43:16:ac:06:73:e9:f9:47:34:cc:87:
36:86:bb:61:d2:15:24:7e:8f:8a:7c:0d:77:c5:23:
a7:34:f8:45:4f:c6:a6:da:9e:5d:5f:6e:12:24:30:
d7:e5:97:f6:14:f5:90:9f:98:a7:da:38:ad:10:9c:
0f:bc:ba:02:d8:a2:ee:58:47:89:76:31:17:38:f1:
f2:22:d8:ae:7a:6a:08:aa:56:0d:c1:a9:a1:74:ff:
db:45:7d:6a:c4:d0:77:a9:15:fe:e6:27:b1:bb:d6:
7a:4e:eb:1d:3a:df:0d:f0:69:eb:c1:f6:5c:c1:e2:
3d:ed:bd:8d:75:a2:7e:98:5e:f7:97:91:65:c6:ff:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E3:56:48:A7:D9:E7:CC:D4:1A:C0:B1:4F:DD:73:41:D3:54:5C:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/27E35648A7D9E7CCD41AC0B14FDD7341D3545CDF.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d80::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204012
Signature Algorithm: sha256WithRSAEncryption
a2:c5:6e:2b:69:55:e8:f9:1e:e5:f5:cc:68:17:49:23:20:de:
ff:e9:a9:73:95:0c:f9:ff:d9:e2:3e:09:c4:19:3c:60:97:a0:
38:3f:2c:b9:bc:f5:b2:9e:3f:0b:46:24:d7:f4:c0:a5:c8:71:
4b:e8:c5:d8:69:22:53:9f:5e:61:bc:eb:2e:d1:c4:a9:2c:07:
4e:98:97:ac:e9:e4:9a:ed:1c:16:fe:5f:d2:9d:8d:4c:51:5c:
d4:d5:da:1f:97:36:d0:57:0c:c7:ae:f8:a8:c5:7a:79:df:7c:
5e:a7:54:b1:3a:2a:cd:ee:dc:4d:b5:92:af:02:a5:c7:7b:3a:
f5:17:92:b5:3d:24:f0:6b:17:ef:eb:12:be:bb:0e:0b:4c:e2:
b3:8a:51:eb:8c:63:1b:8b:94:f8:57:85:da:2e:f5:f7:85:ff:
86:a5:c2:e3:4f:2a:3a:b4:b4:df:66:42:55:06:59:0c:1a:14:
17:59:ee:2e:c6:86:19:90:4b:8c:3a:94:ed:7e:27:c9:99:0b:
78:e8:b1:80:e5:32:da:d8:4a:ee:0c:61:25:ee:47:08:d5:f4:
a3:5c:09:73:f0:10:43:c1:ee:8d:f1:74:c2:e2:67:d6:b6:75:
4e:4b:d3:6e:59:4d:06:76:8f:61:e3:13:32:62:ce:d1:bf:05:
12:88:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:11:08 2025 by rpki-client