Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
File: _gG0rfO5SE6VdhmUdLIbtCXgWvI.cer (raw, json)
Hash identifier: yvJ8VfGBYqP7EhPqXArUGs9YRx+/dX5frr7esE5qmiA=
Subject key identifier: FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198DFC311ACC3FB18D4E2992ED65C929187
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 25 Aug 2025 05:45:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.220.104.0/21
IP: 185.40.124.0/22
Validation: Failed, certificate revoked on Mon 29 Sep 2025 13:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:df:c3:11:ac:c3:fb:18:d4:e2:99:2e:d6:5c:92:91:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 25 05:45:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:9e:6a:01:88:39:8a:30:37:43:93:81:68:
2f:d6:43:31:e9:1d:1b:aa:ef:f2:a6:49:3f:c4:27:
54:f8:46:a1:08:c9:78:4c:2e:9a:ed:7d:5d:b9:9d:
df:93:7a:31:b7:11:ac:f9:0d:85:6e:f8:16:82:37:
27:5e:84:dc:3c:80:37:92:c9:7b:ab:27:f8:9e:82:
00:49:3e:5c:8b:95:5f:4f:00:2a:eb:0c:88:82:34:
1a:16:a1:f3:6b:7b:f5:a7:1a:5a:3b:95:d8:41:7a:
04:50:84:a4:b9:4a:d7:0c:1c:2d:8c:70:3b:0f:3f:
46:eb:84:f5:0c:2b:4b:dd:25:a5:20:a8:39:9b:cd:
c9:ad:6c:31:bc:4b:1f:65:5c:33:36:b9:8f:f3:ef:
97:21:11:8e:79:34:dc:41:8a:9e:b7:22:2a:f3:4c:
22:d6:81:d2:78:52:92:aa:af:51:68:8d:4e:90:92:
d9:45:8d:6b:d5:11:25:e2:15:38:5e:48:dd:60:b4:
06:8e:fe:dd:9f:68:65:91:24:a3:41:1a:99:65:93:
32:b6:83:8a:61:54:4f:6a:de:63:f2:06:b9:36:c0:
93:c8:81:bd:8f:97:f0:62:53:85:4f:70:0a:3d:29:
44:af:59:67:9a:ca:d8:34:ea:49:05:f4:e9:54:44:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.104.0/21
185.40.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:d1:e6:73:5b:80:5e:9e:f7:82:63:97:bf:37:d9:08:ce:e6:
7e:a3:25:a1:aa:b7:32:de:b5:04:dd:8b:a4:8e:85:dd:f4:d1:
8c:11:f4:cd:73:c0:a6:cc:a6:3c:4f:c0:5d:21:5e:c3:4b:35:
fd:b5:fd:18:78:56:64:f9:24:5c:f3:83:7d:5a:1f:93:59:56:
33:e1:70:95:bc:a3:7f:7e:4d:92:2e:d7:fc:64:ee:a1:88:eb:
a8:52:2d:fe:c1:8e:d6:b7:39:93:3a:5c:d4:d8:27:69:45:c6:
fc:72:63:02:d7:26:de:f3:b3:4c:9d:27:81:80:dd:d8:02:53:
48:10:81:34:c5:55:3c:03:e9:7a:6d:1f:c8:4a:a1:5f:4d:bc:
b8:c3:b1:50:b5:70:9f:15:65:d8:18:ee:71:75:c6:f7:f1:de:
77:2f:c6:fa:4b:6f:bd:07:c2:4c:0f:41:de:62:69:22:2a:81:
76:35:7d:5d:18:04:72:6b:51:78:41:8b:75:01:c0:01:4b:58:
ea:7a:31:ab:5a:2b:85:1b:55:ce:19:5a:57:18:17:96:bf:e6:
d2:72:79:e9:2b:e9:82:f7:44:0a:c3:95:d5:c1:61:4b:f1:39:
8f:9d:fa:d1:c1:f0:a6:52:a8:33:7d:bc:17:ca:95:d7:9d:90:
12:88:34:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:45:10 2025 by rpki-client