This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer
File:                     WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer (raw, json)
Hash identifier:          3etjgQjEcq3z5MpARyALquJJyDqfREpOkUQvqVHSPiU=
Subject key identifier:   58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01944652EDD8B991DBBBFF8C7658E30C6B5A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 08 Jan 2025 14:30:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212045
                          IP: 85.117.228.0/22
                          IP: 185.213.248.0/22
                          IP: 194.34.252.0/22
Validation:               Failed, certificate revoked on Fri 10 Jan 2025 14:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:46:52:ed:d8:b9:91:db:bb:ff:8c:76:58:e3:0c:6b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  8 14:30:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:75:da:08:0a:8b:de:9b:49:14:f3:e1:7e:
                    61:1e:65:7d:fe:ba:4a:00:26:89:7e:69:23:a3:9d:
                    6e:9d:8a:86:41:21:f8:15:ac:cd:eb:98:58:96:9e:
                    5e:72:28:c9:3f:a9:7e:cb:dc:f7:50:78:af:b5:9b:
                    6b:c9:5b:18:65:19:e6:78:bd:c4:18:01:f2:ca:2a:
                    23:5a:a0:68:eb:e4:c3:6a:2e:05:04:33:a5:27:fa:
                    7a:35:b0:10:dc:e5:81:33:08:df:2f:58:0b:82:cd:
                    c9:f2:12:13:0b:72:40:7b:05:bb:4d:91:c4:b9:97:
                    2f:dd:2c:d1:b6:3e:33:48:1f:70:d6:62:ab:d5:47:
                    c4:71:c9:71:1b:d4:81:23:56:65:d2:cf:96:e5:ba:
                    04:f9:97:25:cf:56:40:0f:77:a0:bf:8d:3e:12:ed:
                    ff:ed:54:8f:9d:80:60:50:15:cf:e2:fd:09:1b:04:
                    d9:7a:d6:6a:7c:55:cf:e1:34:af:f5:d8:db:d6:57:
                    87:34:ed:2f:20:6f:ad:7c:11:b7:9c:fd:9c:31:35:
                    79:d8:59:03:71:0f:24:b8:69:07:b3:6d:59:52:da:
                    e9:81:d6:45:f3:08:6f:02:36:c7:b3:ac:97:39:1e:
                    7e:bb:04:f5:38:bf:d3:14:d8:54:d6:85:00:4d:a6:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.117.228.0/22
                  185.213.248.0/22
                  194.34.252.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212045

    Signature Algorithm: sha256WithRSAEncryption
         74:34:00:1c:12:ee:e2:3a:2f:36:59:05:45:b4:96:7d:36:86:
         50:d9:6b:e8:d5:8e:f6:47:41:3a:c1:33:6f:d2:b2:a2:32:4e:
         99:40:48:a6:2a:ca:94:72:0f:71:90:18:24:f5:20:a3:d2:cb:
         80:3c:24:00:a3:8f:64:b2:89:78:56:64:78:59:36:a6:67:66:
         ab:22:a1:fe:a1:4c:ea:47:5d:16:63:a2:21:ca:44:8f:5f:69:
         8e:cc:ba:67:c9:ed:67:b2:1c:84:3a:2b:bf:6d:cb:b2:6c:4e:
         22:95:3a:87:fd:19:63:71:27:6c:7b:3f:d8:f1:74:77:cd:2a:
         6b:6f:6d:13:7e:10:ec:b2:6c:db:a2:00:f6:a8:15:c1:b4:c5:
         fd:58:73:bd:a9:59:55:75:97:47:17:b9:04:0f:2f:87:07:5c:
         92:f2:e4:01:9d:63:c0:3d:5f:58:6b:6a:0b:65:98:75:c3:c3:
         09:11:9a:eb:f1:29:44:a0:9a:31:f1:c3:fe:74:01:24:9b:6c:
         5d:c4:57:64:9c:53:44:47:b6:ab:30:d5:67:b7:e4:f9:19:c3:
         c0:8a:20:d8:ae:88:b7:1f:cc:bd:c8:64:b4:69:b4:38:bb:46:
         e4:15:a7:d6:c2:d9:d5:ea:8d:18:d4:b1:df:70:cb:5e:09:98:
         b4:a9:93:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----