Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SAzOVGbhQMwvJCxhRG5LhH1IMkM.cer
File: SAzOVGbhQMwvJCxhRG5LhH1IMkM.cer (raw, json)
Hash identifier: YRl8N5tta24Ga25GH03THP7dhDj80amphdmrYXwbCCE=
Subject key identifier: 48:0C:CE:54:66:E1:40:CC:2F:24:2C:61:44:6E:4B:84:7D:48:32:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195513CD6BC8C6D557C926474CCC7E1E1F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/a35af5-bd96-4f5c-86c0-d9db770438e8/1/SAzOVGbhQMwvJCxhRG5LhH1IMkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/a35af5-bd96-4f5c-86c0-d9db770438e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Mar 2025 10:24:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213652
IP: 2a12:e680::/29
Validation: Failed, certificate revoked on Sat 01 Mar 2025 10:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:51:3c:d6:bc:8c:6d:55:7c:92:64:74:cc:c7:e1:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 1 10:24:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=480cce5466e140cc2f242c61446e4b847d483243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:a6:ff:0a:70:d7:fc:99:af:3a:1a:02:ce:
d9:b8:ce:58:6f:52:24:72:3a:f4:77:41:e4:b5:f0:
95:f8:d8:91:8c:9f:f8:59:90:0b:5e:fb:c2:e9:50:
09:32:e7:30:89:ed:a0:7c:77:9c:87:e9:d2:74:80:
24:91:fd:13:bc:56:67:27:13:76:6d:40:84:8b:f5:
e4:aa:1e:d6:73:27:1c:34:5e:7f:1b:83:05:95:05:
56:a8:cd:3d:22:fb:ac:2c:a6:f3:e7:f1:ed:a5:f6:
33:7a:b4:33:4f:27:90:11:29:22:26:bb:c3:32:13:
20:c0:31:35:0b:e7:b5:e0:5d:0e:40:53:c3:2d:fa:
0d:f6:20:b5:c2:07:87:8d:82:5a:8a:c8:87:af:f7:
ce:d6:41:28:63:c9:04:ed:94:6b:aa:0d:65:34:92:
62:7e:88:30:62:13:a2:9d:42:37:5a:12:d4:e1:57:
ba:e9:f1:4a:79:26:4e:27:57:0c:6b:5f:56:f3:20:
c5:49:17:28:48:55:52:13:c2:74:12:cc:2b:0d:93:
33:f6:e2:a2:98:25:5b:e7:2e:91:ab:72:32:a8:4e:
3b:a5:f0:71:02:e6:f4:b4:8c:7f:5b:6a:ce:fb:ba:
1f:1b:32:c8:0d:e9:15:61:d6:ce:71:ac:fc:35:a2:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:CE:54:66:E1:40:CC:2F:24:2C:61:44:6E:4B:84:7D:48:32:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a35af5-bd96-4f5c-86c0-d9db770438e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a35af5-bd96-4f5c-86c0-d9db770438e8/1/SAzOVGbhQMwvJCxhRG5LhH1IMkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213652
Signature Algorithm: sha256WithRSAEncryption
8f:80:06:32:dd:4f:97:60:cc:f2:90:d9:49:02:2d:75:91:db:
c4:fe:65:eb:87:a4:96:33:49:44:27:a9:59:18:43:02:ad:ec:
6b:08:b4:7e:4a:94:d8:16:20:5a:fe:6b:cb:4b:d6:68:7c:72:
94:74:35:c9:a1:70:19:da:81:a9:23:b3:ff:6e:b2:19:9e:cb:
4a:48:92:31:e6:d7:7a:57:46:29:96:72:7a:77:29:cd:0f:c9:
b6:81:9e:2e:a6:7e:73:21:3e:cb:7d:18:37:07:72:ff:9f:e3:
39:c8:67:ec:1e:e3:f7:ed:85:53:e4:c7:ed:df:18:90:d7:6e:
cc:e8:87:a7:3f:4a:02:06:3b:51:02:19:34:4b:ba:2e:f3:39:
7c:ee:1b:06:46:1d:63:00:df:03:c1:f7:33:57:96:8c:1b:0f:
19:35:9d:33:97:7b:ba:65:a4:33:bb:75:a6:f7:53:9d:a0:ed:
16:f4:88:98:80:e8:62:67:b9:57:71:c3:80:b3:04:b8:6e:3f:
2f:c4:f1:11:8d:0a:91:b0:66:52:07:28:76:04:cd:62:ad:13:
b5:c6:23:c9:53:de:d5:14:8e:bb:6f:f7:eb:da:ca:8e:9c:8d:
dd:e9:27:a7:da:e4:fc:a3:09:3d:8c:89:ef:7a:2e:2f:15:75:
fd:a0:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 18:33:22 2025 by rpki-client