Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g54H5RFqXa9VeOX9ahjH7zSe8EQ.cer
File: g54H5RFqXa9VeOX9ahjH7zSe8EQ.cer (raw, json)
Hash identifier: mptZFjT5uCdFtZXVJ1So+semfqbOVu9a6ZcL8TyWStQ=
Subject key identifier: 83:9E:07:E5:11:6A:5D:AF:55:78:E5:FD:6A:18:C7:EF:34:9E:F0:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193F3711209349ADF1D26F36D019F9C2864
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/g54H5RFqXa9VeOX9ahjH7zSe8EQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Dec 2024 12:14:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42963
IP: 2001:67c:21dc::/48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 11:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:71:12:09:34:9a:df:1d:26:f3:6d:01:9f:9c:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 23 12:14:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=839e07e5116a5daf5578e5fd6a18c7ef349ef044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:ed:00:21:ca:1a:52:03:a5:e2:54:69:a8:
0d:7e:75:83:91:bc:a2:7d:89:85:e9:3e:5a:f6:ca:
f0:b4:80:1f:6c:f5:50:9c:ef:29:65:4a:44:50:06:
b3:44:50:41:9d:a7:9d:91:16:8c:9b:fa:ab:9c:55:
f4:8c:95:f6:ed:df:9e:74:4b:cc:0f:22:7c:1c:76:
51:45:1e:59:c5:2c:8b:fc:aa:2b:f5:68:a0:6a:c4:
32:b0:7b:7f:30:22:d1:72:57:fd:15:66:90:4d:f6:
f5:fc:63:1c:b1:7b:4e:22:4e:5c:59:61:01:a0:ac:
c0:ca:70:74:b4:fa:0f:36:4d:0c:a7:7b:06:9e:f5:
0c:87:62:c1:bc:d5:3a:05:a2:bc:68:85:cd:23:ae:
d7:5d:da:38:94:91:9b:74:20:66:fd:f7:ed:26:cc:
87:5b:32:0b:30:0d:cb:cf:58:c3:a4:62:09:35:6b:
98:a4:7f:31:1a:ec:a8:93:b8:2e:6a:37:b8:ab:0f:
08:57:2e:80:52:d2:7b:fc:12:91:19:92:7e:68:cd:
b6:3e:03:37:89:67:ae:ce:c8:9c:b9:12:25:55:37:
3f:1e:cd:3d:5c:46:6c:dc:ae:0a:70:57:8b:a4:fc:
4a:62:57:28:75:be:7f:4c:0b:6a:ea:30:06:e9:c1:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9E:07:E5:11:6A:5D:AF:55:78:E5:FD:6A:18:C7:EF:34:9E:F0:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/g54H5RFqXa9VeOX9ahjH7zSe8EQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21dc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42963
Signature Algorithm: sha256WithRSAEncryption
5e:37:05:85:72:b6:e5:9d:f4:f9:42:9a:67:0c:db:8a:d4:85:
7f:a8:42:68:bf:28:a1:0d:de:ec:ec:e0:62:ea:28:3b:cc:e8:
51:b4:4e:5f:45:14:a8:e1:b1:62:d2:5c:0e:1d:82:db:bb:f4:
4b:8a:0d:8e:d9:30:62:26:23:df:21:51:ee:18:45:ec:17:63:
3d:56:32:01:83:26:2e:36:fa:e7:3c:bd:86:18:12:74:c4:85:
4f:d0:21:98:b4:e1:74:c2:c2:30:d9:98:f0:cd:a3:e6:b9:60:
27:b7:bd:36:45:79:82:9a:28:86:7e:9e:c6:d7:47:03:1b:91:
55:64:03:12:0e:18:9d:ef:c0:5c:18:30:a8:f8:f8:a0:9f:e8:
5a:77:f8:87:8c:34:37:6f:fe:58:e5:75:26:23:3a:16:f1:e4:
45:89:d8:6f:9d:81:38:1a:95:32:da:36:a8:ca:67:89:50:6d:
cc:63:ea:8d:d6:b3:ec:df:90:6a:d4:a3:4e:e8:e7:71:db:93:
69:e3:3c:90:a1:2f:2f:fc:ff:83:7e:dd:e7:c8:b8:36:a6:19:
68:bf:40:ed:bf:03:7b:4c:e4:a7:ff:cc:0b:bd:da:b9:a8:c1:
45:ea:cb:b6:1a:20:f4:89:b0:28:5b:17:39:c6:59:b5:05:64:
58:23:70:6e
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZPzcRIJNJrfHSbzbQGfnChkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMjIzMTIxNDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzllMDdlNTExNmE1ZGFmNTU3OGU1ZmQ2YTE4YzdlZjM0OWVmMDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoXtACHKGlIDpeJUaagNfnWDkbyi
fYmF6T5a9srwtIAfbPVQnO8pZUpEUAazRFBBnaedkRaMm/qrnFX0jJX27d+edEvM
DyJ8HHZRRR5ZxSyL/Kor9WigasQysHt/MCLRclf9FWaQTfb1/GMcsXtOIk5cWWEB
oKzAynB0tPoPNk0Mp3sGnvUMh2LBvNU6BaK8aIXNI67XXdo4lJGbdCBm/fftJsyH
WzILMA3Lz1jDpGIJNWuYpH8xGuyok7guaje4qw8IVy6AUtJ7/BKRGZJ+aM22PgM3
iWeuzsicuRIlVTc/Hs09XEZs3K4KcFeLpPxKYlcodb5/TAtq6jAG6cGZ0wIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFIOeB+URal2vVXjl/WoYx+80nvBEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzQ2ZTdh
Mi02MzlhLTQxNjItOWRkZi1iNjM5MmM1MGY5NWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvNDZlN2Ey
LTYzOWEtNDE2Mi05ZGRmLWI2MzkyYzUwZjk1YS8xL2c1NEg1UkZxWGE5VmVPWDlh
aGpIN3pTZThFUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCHcMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwCn0zANBgkqhkiG9w0BAQsFAAOCAQEAXjcFhXK25Z30+UKaZwzbitSFf6hC
aL8ooQ3e7OzgYuooO8zoUbROX0UUqOGxYtJcDh2C27v0S4oNjtkwYiYj3yFR7hhF
7BdjPVYyAYMmLjb65zy9hhgSdMSFT9AhmLThdMLCMNmY8M2j5rlgJ7e9NkV5gpoo
hn6extdHAxuRVWQDEg4Yne/AXBgwqPj4oJ/oWnf4h4w0N2/+WOV1JiM6FvHkRYnY
b52BOBqVMto2qMpniVBtzGPqjdaz7N+QatSjTujncduTaeM8kKEvL/z/g37d58i4
NqYZaL9A7b8De0zkp//MC73auajBRerLthog9ImwKFsXOcZZtQVkWCNwbg==
-----END CERTIFICATE-----
Generated at Thu May 1 20:58:54 2025 by rpki-client