Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
File: dC44IKB42kewo3Ti06ZtYmPB4j8.cer (raw, json)
Hash identifier: RB6oXICCD92kOXkXS373YEQW7WmGnUWWZMVxS4OJ6O4=
Subject key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C7678838812FEC79B5DA0B4EFB97D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48741
Validation: Failed, certificate revoked on Thu 29 Jan 2026 06:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:67:88:38:81:2f:ec:79:b5:da:0b:4e:fb:97:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:d0:d4:b9:20:0d:ae:2c:7a:39:1d:66:13:
0c:6f:0a:b9:5a:d2:1b:b4:64:63:c5:0c:07:8c:5a:
1a:b8:3e:df:75:b8:16:08:ee:82:5a:17:e3:66:b3:
d4:9e:9f:5f:e7:7f:45:48:eb:54:01:b5:9c:c8:e2:
b5:ea:6d:61:05:3f:c1:51:18:df:8f:d5:ab:8f:b6:
fd:62:34:ac:01:c9:98:52:53:30:9c:39:ec:fa:39:
46:5c:d6:54:81:3d:18:d4:d3:d0:57:b2:b9:41:3d:
6d:62:c6:81:24:a3:c3:5a:49:cb:8f:af:74:b7:93:
36:f5:53:ee:c4:4e:e3:28:dc:45:58:41:7b:4d:01:
3f:81:1a:06:44:ac:1f:9a:f4:f6:45:fd:c1:af:e3:
7d:b5:0a:e9:3a:df:b3:12:6b:fe:3a:82:e2:ec:11:
5a:5d:c2:65:9d:41:1f:d0:9d:bb:b9:8e:5f:d9:ff:
05:b9:cd:72:4b:6a:37:8f:8d:42:70:e5:00:e4:30:
76:4c:7c:1d:92:84:0c:e1:41:ad:68:03:ef:8b:3d:
03:b5:09:48:13:ac:72:dc:1a:52:9c:03:2a:7f:29:
c3:0c:58:b8:5c:44:63:f2:be:70:54:96:d3:3e:b4:
40:36:8a:9f:fe:2e:1e:de:9b:94:9c:87:12:84:9d:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48741
Signature Algorithm: sha256WithRSAEncryption
6e:38:88:eb:24:02:f5:e3:c7:22:76:14:67:bb:22:68:4d:db:
a5:ac:99:98:1e:24:21:fc:61:60:fd:d1:eb:9f:57:6b:03:f3:
7b:70:14:6b:72:ee:c6:3a:45:5e:36:a5:b6:8e:c8:a1:09:1b:
e5:69:29:68:0c:21:70:76:e0:fa:70:ec:88:18:b3:d7:61:7b:
ba:a0:50:17:13:5c:3a:71:53:df:67:41:f6:31:a4:5e:c6:8e:
ca:e6:d7:10:ea:c2:15:ce:80:f6:40:ec:a8:7b:f5:c3:f2:da:
f7:32:41:e7:a3:11:24:1d:0a:80:94:34:12:87:0a:49:73:e4:
fd:19:33:16:60:f2:6d:72:db:16:09:0e:68:d8:11:9b:a9:cc:
4b:d1:87:32:aa:3a:a0:c9:c6:c0:0a:7b:02:9c:c5:b0:f1:c5:
9a:23:df:1c:3f:ef:4e:57:aa:b1:a3:d2:15:07:ed:54:38:f4:
56:d3:2e:fc:f0:13:f6:ed:19:ce:91:bd:f7:30:01:ce:4a:6c:
80:f0:5d:b0:b8:66:9a:09:44:7d:f3:b0:97:54:b3:a8:ea:86:
7b:fb:45:7d:6e:86:b3:3d:d2:63:db:8d:2f:23:fe:41:43:05:
d2:00:db:87:60:45:6e:49:cb:4a:6d:9f:82:c8:34:f4:8e:de:
31:2b:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:51:18 2026 by rpki-client