
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mvcHhdLenn3BFGLSKF5W7NEEMRw.cer
File: mvcHhdLenn3BFGLSKF5W7NEEMRw.cer (raw, json)
Hash identifier: zcaWI4/ZR+gu7zG5AIjhtcDkDtbM//JIX5xzmnAxxyM=
Subject key identifier: 9A:F7:07:85:D2:DE:9E:7D:C1:14:62:D2:28:5E:56:EC:D1:04:31:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E06FF3252EDBA3E1738FC20420CCDA9E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/9113c8-c2fe-40f6-9c47-4582ec2d0777/1/mvcHhdLenn3BFGLSKF5W7NEEMRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/9113c8-c2fe-40f6-9c47-4582ec2d0777/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Mar 2024 01:06:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215522
Validation: Failed, certificate revoked on Wed 06 Mar 2024 02:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:06:ff:32:52:ed:ba:3e:17:38:fc:20:42:0c:cd:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 01:06:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9af70785d2de9e7dc11462d2285e56ecd104311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:c6:dc:f1:9c:49:ce:90:75:92:73:0b:ad:
0d:1e:8d:ff:31:86:42:84:18:d7:f9:f8:0f:d2:3c:
b7:09:c7:a8:8e:5d:07:b1:4e:3d:0f:ec:0a:37:f6:
d6:b1:22:bb:dd:d9:b6:42:62:17:5c:82:b4:a1:e3:
a1:6f:21:57:31:14:a0:b6:eb:45:1f:b8:e1:6e:1c:
92:74:8e:ce:23:be:1c:82:a1:61:42:b9:fe:67:e6:
5d:97:5e:e1:60:94:90:c4:e2:fb:49:09:79:40:ff:
a3:ef:28:d0:70:6c:17:b9:cb:3c:d3:83:a8:76:71:
38:29:02:0c:68:30:7d:58:a2:92:63:f3:48:43:c3:
69:83:30:cc:4a:4d:f3:1f:18:91:b1:a0:35:c5:ee:
fd:57:e8:80:09:5c:74:3f:03:a9:5d:cc:08:43:9a:
0c:22:4c:21:57:2d:6c:d2:c2:63:c2:a2:2f:2e:dc:
fb:ef:a3:99:2d:ba:50:d7:d2:4a:42:f0:a7:75:7d:
9e:49:53:98:31:62:d8:a7:35:4b:8a:ca:5f:d3:64:
f9:81:0e:4b:e6:9e:cf:f7:e1:7b:be:fd:ee:fb:1f:
40:ec:a8:ac:59:af:b4:33:a0:08:65:99:52:11:f1:
3b:38:65:72:4d:13:8e:e6:cf:81:2a:25:72:6e:b5:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:07:85:D2:DE:9E:7D:C1:14:62:D2:28:5E:56:EC:D1:04:31:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9113c8-c2fe-40f6-9c47-4582ec2d0777/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9113c8-c2fe-40f6-9c47-4582ec2d0777/1/mvcHhdLenn3BFGLSKF5W7NEEMRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215522
Signature Algorithm: sha256WithRSAEncryption
2b:8c:41:df:1f:44:e2:db:12:26:35:73:56:5f:da:9c:fc:5c:
5e:7c:ca:dd:ec:e1:32:8c:58:bc:24:be:64:8b:47:d7:47:0c:
b4:9d:91:cd:33:4a:94:21:91:88:2e:ca:15:09:c7:10:d3:9c:
fc:16:7f:88:eb:9e:c3:47:83:60:5d:76:3f:a6:eb:1a:eb:0f:
a8:bc:52:be:93:2a:0e:14:2b:39:47:19:46:4b:ff:e1:36:80:
2b:c0:20:37:6b:d2:c2:98:5b:a1:af:5e:98:12:d8:42:a5:79:
4c:e4:2b:f5:4e:5c:b5:7c:5d:b9:81:2b:2e:46:32:8f:1b:7e:
29:5b:72:c0:27:f0:91:25:f7:c2:34:18:72:82:c0:3f:24:f3:
84:b0:4c:00:1e:68:d0:05:19:4f:00:dd:4f:ed:1d:33:c0:ff:
c4:dd:71:0c:ea:62:db:37:e4:72:64:a6:67:b8:d8:0b:97:ed:
03:40:76:83:fe:de:e1:5f:ea:47:69:ce:ea:82:5b:65:1d:0d:
be:c8:ab:0a:44:3b:13:6b:d6:26:86:dd:ee:c8:33:e0:56:b5:
3e:21:2d:35:15:44:71:a0:ad:38:54:7b:24:a2:78:ed:ed:bd:
ee:a8:7d:1d:78:4d:3a:11:6f:31:aa:62:01:81:44:20:16:b5:
ca:87:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:51:42 2025 by rpki-client