Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.cer (raw, json)
Hash identifier: k3cRyZM3mlzTmMl9gEmUiSMoXocm83IoWJ8wsBzwBBY=
Subject key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E37547AB83B293E4D90A04FE2A7DF69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:18:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.110.221.0/24
Validation: Failed, certificate revoked on Thu 22 Jan 2026 09:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:54:7a:b8:3b:29:3e:4d:90:a0:4f:e2:a7:df:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:e4:3b:f9:e8:b8:32:05:00:37:55:b9:33:
dc:88:34:aa:3b:a0:b5:c4:7b:1e:19:99:d2:73:e6:
45:10:4f:15:ac:2b:6b:a9:87:95:6b:e1:c4:83:82:
34:63:a9:61:fb:dd:51:c9:ed:36:52:5c:d0:ef:06:
7c:12:da:f1:08:d9:4c:f7:2b:df:6c:51:d1:71:80:
94:7b:9b:64:81:2d:9a:4a:a0:ec:23:b4:92:1b:df:
f8:38:ab:0c:9c:19:50:61:d3:a0:8f:1e:f4:57:4c:
af:4e:ee:c7:5b:c0:85:ca:3b:81:69:3d:30:4a:d6:
91:c9:c6:7b:80:ea:36:9b:75:d8:5b:d8:aa:b3:fc:
19:43:d2:93:60:91:33:f9:e9:b3:5d:fb:02:5f:f1:
ed:ee:97:30:5f:eb:12:cb:84:fc:6c:68:eb:99:87:
9d:79:db:68:96:6d:9d:43:5c:1f:75:c5:32:54:56:
09:0e:60:4c:53:6e:f0:b6:65:d0:bb:a9:09:1f:6d:
9c:61:1d:f5:a7:00:99:7d:4f:62:3f:80:6a:0f:55:
12:a7:95:32:37:be:3c:d9:73:19:9c:e2:ee:11:e6:
db:fc:f8:d6:d5:fe:4b:1b:ff:1f:82:67:ee:0f:ad:
b9:51:5f:20:5d:31:25:2e:3d:9c:db:56:77:1c:05:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c1:76:01:c6:72:ae:33:c9:09:0d:0a:36:25:dd:79:4f:47:
73:43:2f:fb:93:5d:8e:22:c0:8c:b9:69:ba:aa:4d:19:a2:75:
fd:94:45:9f:2f:fc:80:5d:37:14:ad:01:db:6b:68:25:47:41:
a2:c4:b3:cd:32:38:32:83:f3:cc:db:35:ba:24:3e:80:f1:74:
c7:30:10:67:5b:9e:34:77:30:29:82:35:80:6e:01:9f:87:41:
bb:32:1f:47:48:29:cb:3d:83:e5:66:80:c7:98:f3:53:a9:ef:
93:03:bc:8f:e9:bf:32:09:8f:e4:f0:86:7f:08:77:a1:48:9f:
86:b7:2f:64:9e:4b:98:72:ae:5c:93:71:da:42:84:0c:76:6a:
8f:36:e8:24:ce:5d:db:ff:fc:9c:b0:1d:ae:78:4d:5d:f2:dc:
15:c6:92:a3:7f:69:7d:64:28:ae:52:6a:1f:83:79:0e:66:fb:
d5:fa:5e:ae:a9:1e:5f:9a:d3:23:9d:67:75:0e:f6:d6:81:ee:
68:59:d8:e0:1b:b1:78:f8:e2:5c:bb:00:91:eb:ad:d8:9e:b7:
d3:3d:78:15:d4:9a:b3:f3:a8:78:81:e7:31:99:1e:98:bf:74:
22:3d:bb:cd:b1:7d:61:7a:47:cf:6d:42:b0:27:e7:5b:d3:cf:
cb:19:b4:10
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZt+N1R6uDspPk2QoE/ip99pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWJlMDc2NzBjMmM5YTJhZTAyNzgxMzFhYTI5Y2YzY2U3YTVhYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq/kO/nouDIFADdVuTPciDSqO6C1
xHseGZnSc+ZFEE8VrCtrqYeVa+HEg4I0Y6lh+91Rye02UlzQ7wZ8EtrxCNlM9yvf
bFHRcYCUe5tkgS2aSqDsI7SSG9/4OKsMnBlQYdOgjx70V0yvTu7HW8CFyjuBaT0w
StaRycZ7gOo2m3XYW9iqs/wZQ9KTYJEz+emzXfsCX/Ht7pcwX+sSy4T8bGjrmYed
edtolm2dQ1wfdcUyVFYJDmBMU27wtmXQu6kJH22cYR31pwCZfU9iP4BqD1USp5Uy
N7482XMZnOLuEebb/PjW1f5LG/8fgmfuD625UV8gXTElLj2c21Z3HAV7NQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNW+B2cMLJoq4CeBMaopzzznpaqjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzJjYzNj
ZS1lYzgxLTQ1ZWQtODZlNi05YWRhMjM3OGE5YTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMmNjM2Nl
LWVjODEtNDVlZC04NmU2LTlhZGEyMzc4YTlhMC8xLzFiNEhad3dzbWlyZ0o0RXhx
aW5QUE9lbHFxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwm7dMA0GCSqGSIb3DQEBCwUAA4IBAQB/wXYB
xnKuM8kJDQo2Jd15T0dzQy/7k12OIsCMuWm6qk0ZonX9lEWfL/yAXTcUrQHba2gl
R0GixLPNMjgyg/PM2zW6JD6A8XTHMBBnW540dzApgjWAbgGfh0G7Mh9HSCnLPYPl
ZoDHmPNTqe+TA7yP6b8yCY/k8IZ/CHehSJ+Gty9knkuYcq5ck3HaQoQMdmqPNugk
zl3b//ycsB2ueE1d8twVxpKjf2l9ZCiuUmofg3kOZvvV+l6uqR5fmtMjnWd1DvbW
ge5oWdjgG7F4+OJcuwCR663YnrfTPXgV1Jqz86h4gecxmR6Yv3QiPbvNsX1hekfP
bUKwJ+db08/LGbQQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:24:48 2026 by rpki-client