Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
File: ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer (raw, json)
Hash identifier: usAM4P1ChSoJK7IpXhq3L9HCXtO+ZGHXlFm9lQhXzFE=
Subject key identifier: 65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD48C32D3F3B3AB91E0BCCF2C1EE9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61342
Validation: Failed, certificate revoked on Wed 08 Jan 2025 13:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:48:c3:2d:3f:3b:3a:b9:1e:0b:cc:f2:c1:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65865968a1d8f4f377865c913af3b9af890d7cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:1e:8f:3e:c8:e1:7d:db:9d:74:b9:c0:ad:
18:65:b4:35:bd:6b:00:49:9c:58:ed:31:9e:35:b0:
f9:13:8f:00:09:ac:f3:c2:55:92:e9:37:64:fd:99:
47:d0:c1:da:c5:26:f7:b1:ad:c5:90:39:5d:83:5e:
42:bc:f1:e3:3f:8a:fe:cd:bd:a8:5c:f9:f2:65:00:
c7:e2:22:2a:0f:69:6a:00:0e:e0:dd:73:f4:e9:b2:
a4:61:3d:f8:82:cf:3b:88:75:59:64:da:ac:c4:1a:
da:88:1e:da:d5:dc:cd:18:c8:eb:bb:ab:3a:b4:cd:
b6:23:4b:88:20:ba:60:bd:3a:0b:4a:17:06:81:f7:
12:3c:24:1d:6d:b8:92:0f:b1:18:b7:42:61:92:5f:
05:c3:de:51:54:2b:47:6b:1b:e2:79:3c:dd:0d:08:
3e:5f:37:34:1f:a7:28:f3:0e:dd:f5:0c:20:ad:e9:
8e:76:72:aa:2b:ab:f2:b3:6d:19:9b:cb:5d:b6:82:
02:24:54:b4:af:3f:c7:64:dd:71:07:b1:01:5e:74:
49:5f:95:50:88:f4:55:dc:5c:17:71:33:d2:f6:2b:
ac:e9:56:6a:70:d8:75:e0:02:7e:15:28:d8:2b:b8:
1b:f7:27:b2:e8:0d:1b:6b:ab:d8:a5:8b:0b:2c:c9:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61342
Signature Algorithm: sha256WithRSAEncryption
2b:84:65:39:97:f3:de:8a:94:fb:3b:3e:62:4a:20:37:42:e7:
cd:5a:a1:37:14:32:41:fb:3f:63:96:3d:30:c6:ec:1c:7b:4f:
99:19:cb:8f:20:8c:9b:cd:a0:52:41:15:2d:8b:a7:23:e3:bb:
b5:f5:50:8d:08:63:5e:ee:a2:54:99:9f:b9:12:6c:7e:ce:b3:
47:ae:3d:4e:1c:78:50:a1:cc:8b:94:a8:90:d5:b1:65:46:f4:
5d:e1:cb:22:c8:2f:bd:79:c1:77:1c:f6:4a:c2:8a:25:b7:06:
a8:c9:47:2e:ea:ff:91:e7:60:32:c5:8c:30:46:25:64:c1:8b:
6d:93:f6:19:f0:07:a4:32:8e:09:cf:3c:e2:df:49:29:33:a3:
54:1d:fa:60:9f:35:9a:a4:01:84:eb:01:4b:7e:30:9a:3f:93:
38:89:ad:37:d2:26:50:32:87:16:25:43:1a:37:a9:bb:2e:fb:
f0:3a:50:39:de:29:d6:c3:5f:47:40:2d:3e:c2:33:0a:ba:ed:
38:28:cf:1e:88:a8:0d:b1:c0:98:cf:05:b7:45:e4:c4:ae:46:
e8:31:e1:20:21:f2:26:7f:83:70:47:26:7f:95:ad:b9:0b:10:
2a:13:5a:05:2c:1c:8b:df:ec:d0:d5:fa:c5:1d:4b:60:b4:9d:
0a:c3:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:21:13 2025 by rpki-client