Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NaAMUKoEkNUmpswA2gcGayY9LNw.cer
File: NaAMUKoEkNUmpswA2gcGayY9LNw.cer (raw, json)
Hash identifier: RNZ5jSHvsj7Z6ZTnUaGUqnjBzs45kw29tl2rxvB5MD8=
Subject key identifier: 35:A0:0C:50:AA:04:90:D5:26:A6:CC:00:DA:07:06:6B:26:3D:2C:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01950214581AB67F59E067AC5B2038D8E9E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/19c30f-e029-4738-96a7-42d8030040d7/1/NaAMUKoEkNUmpswA2gcGayY9LNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/19c30f-e029-4738-96a7-42d8030040d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 14 Feb 2025 01:30:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213430
Validation: Failed, certificate revoked on Fri 14 Feb 2025 02:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:02:14:58:1a:b6:7f:59:e0:67:ac:5b:20:38:d8:e9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 14 01:30:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35a00c50aa0490d526a6cc00da07066b263d2cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:ff:4d:ca:b9:8c:b9:aa:6a:db:85:a1:4a:
48:69:65:92:15:96:06:ee:9d:c7:23:03:27:08:70:
50:85:fe:85:f3:bc:30:da:c1:f1:a8:43:c6:19:98:
f1:32:21:ef:30:af:1e:35:84:6f:bc:ba:0b:2f:8d:
a4:7a:9e:27:23:41:83:bc:2d:44:da:e4:93:a3:1b:
b3:74:33:87:b6:3e:53:bf:c5:fd:f6:7a:1b:b1:25:
8a:2a:c6:63:78:ea:18:22:ba:81:c2:4a:e9:04:68:
f0:8d:01:f5:9d:f9:d3:41:ee:70:40:33:8a:62:48:
c6:49:86:c3:3d:61:e4:7b:c9:3c:34:b2:67:87:41:
4a:f8:1a:21:61:01:b9:ce:48:37:51:f7:a5:91:9f:
37:dd:fc:ba:ca:72:2d:16:1f:a3:1c:fc:c6:c2:4f:
51:6c:fb:69:9f:95:d7:a2:79:16:35:8a:a1:1f:97:
d2:e3:aa:fe:89:64:af:c9:6e:39:48:d6:cf:e2:61:
9d:f5:c1:cb:18:5b:a4:8a:46:29:35:05:a9:23:d9:
ee:99:c2:e4:e9:c3:78:8e:da:cc:fe:2f:f6:61:1a:
2d:7f:e5:b6:1c:46:cb:69:8a:50:4f:ba:84:55:1f:
18:87:46:cd:5d:2d:b6:92:3e:e0:d7:5e:05:02:22:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A0:0C:50:AA:04:90:D5:26:A6:CC:00:DA:07:06:6B:26:3D:2C:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/19c30f-e029-4738-96a7-42d8030040d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/19c30f-e029-4738-96a7-42d8030040d7/1/NaAMUKoEkNUmpswA2gcGayY9LNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213430
Signature Algorithm: sha256WithRSAEncryption
4c:42:78:88:85:8d:bb:58:50:dd:47:8e:74:ea:cd:ff:71:79:
05:e3:ea:b6:f2:5d:33:21:cf:ea:14:81:e2:f6:44:03:12:54:
d4:fb:89:c5:ae:eb:09:e6:f9:8e:47:eb:06:30:e1:8f:e8:02:
46:35:0e:7f:a4:9c:ac:e2:4d:25:6f:87:46:7e:0e:95:fe:79:
5f:31:ac:40:8a:82:3f:b3:23:9f:d4:23:03:8f:06:73:c7:84:
e7:79:66:43:c5:42:06:8d:1c:fd:63:a8:d7:b7:ff:a8:45:2c:
5e:a6:2f:c2:a1:80:0e:8d:07:46:a0:23:6b:5e:60:9f:25:b5:
20:85:eb:9c:51:79:4f:0d:3f:4c:c3:c1:85:e9:17:12:da:0d:
30:de:6c:7a:99:98:7a:8a:12:39:c0:ef:c8:76:44:72:28:7b:
0f:bd:71:1d:ec:e3:ea:a4:22:38:2e:c9:48:07:f7:34:09:d7:
aa:48:ca:59:2a:1f:3e:c5:c8:14:3c:2d:7a:33:c9:d3:f4:16:
e0:7c:c9:3e:54:e2:06:33:c8:11:27:c5:1e:76:2d:3c:a9:7e:
a5:a3:02:a5:28:b0:7a:d6:88:77:f1:17:f1:8f:ce:1a:7b:84:
94:cb:d9:02:f6:12:2a:2f:1d:7c:85:01:98:04:26:0b:c9:9d:
1b:78:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:40:25 2025 by rpki-client