Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
File: flNU4TNHCPGAASuyN6lfn6x6Tlw.cer (raw, json)
Hash identifier: Cz/nclVMmDoa9FhWexyY33FbMGXKUBRxKgWQDjvlmUE=
Subject key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79102EE25ED45E063BEEE9E0352726AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:17:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.188.30.0/24
IP: 2a12:d940::/29
Validation: Failed, certificate revoked on Mon 05 Jan 2026 10:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:2e:e2:5e:d4:5e:06:3b:ee:e9:e0:35:27:26:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:c0:82:22:3d:ec:36:40:8d:c9:77:9f:0d:
4a:9e:34:b0:ee:f7:26:d9:49:a2:8c:81:05:1b:f1:
49:c0:b9:5b:52:87:06:bd:cc:ba:f1:e9:d8:d0:e6:
da:d3:5e:0a:c2:22:83:09:aa:82:eb:51:ac:87:34:
ad:25:5b:9c:40:e1:dc:b0:ac:8c:2b:24:84:f7:6a:
84:67:6b:31:1b:67:ec:bf:5f:c7:c7:d1:75:84:8c:
ee:5c:73:ca:ba:7d:f9:b0:20:65:97:74:4a:da:99:
a6:03:6f:e6:a0:f7:9d:d1:11:69:2a:b1:b1:ac:67:
5c:14:c2:60:51:9a:60:18:bf:18:a5:af:8c:3a:97:
e0:85:50:fe:ef:be:be:9d:49:b1:8f:59:e4:13:71:
45:84:cb:85:78:8c:fe:5b:40:bb:0d:9b:78:4f:ae:
41:c4:d5:5f:c0:02:5e:cc:17:63:6e:71:93:ce:6a:
1a:ff:d6:4d:a5:bc:cf:46:0a:bf:de:bb:11:2f:07:
28:47:2d:e6:f4:a8:18:30:1d:af:f2:23:a2:fb:b7:
f7:8f:c6:07:e7:4c:1f:a0:88:e0:6b:3c:be:70:6b:
b2:d8:70:cf:67:ce:f0:a8:4f:f8:f5:78:91:c7:56:
72:65:73:29:a4:7a:ec:51:67:36:29:ce:7d:e2:ce:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.30.0/24
IPv6:
2a12:d940::/29
Signature Algorithm: sha256WithRSAEncryption
6b:06:fd:66:33:b8:d7:b7:97:2a:ae:6c:74:e7:ac:6d:b9:ef:
b8:86:62:6c:75:22:98:ee:14:e5:d5:c3:f7:ea:96:ff:83:18:
11:a7:86:2e:fd:5a:0a:90:5e:e6:52:1c:b5:74:50:53:d6:1c:
96:36:f8:ea:98:c8:86:16:fd:5d:b2:81:c6:69:27:55:31:f6:
01:e6:09:da:9e:fc:8b:fd:be:70:99:1b:ac:76:e7:71:9c:8f:
52:70:3f:e5:cf:2d:f7:82:b4:94:23:23:cf:49:76:f6:dc:e0:
3e:17:af:1e:03:20:67:f9:3f:18:1d:e4:19:ac:67:f3:d1:47:
5b:4d:fa:3d:5b:11:1c:07:90:ab:7d:07:82:42:fc:14:d0:44:
13:b0:2f:93:83:55:c3:14:0e:3e:aa:15:6d:84:a6:c0:13:e8:
73:02:40:b8:ef:cd:85:e7:c4:91:04:40:9c:13:a1:97:51:a4:
49:ba:d7:0d:b9:a7:23:75:c3:53:88:4c:a8:fe:14:44:95:10:
f5:8b:c2:d1:dd:b0:e0:93:fe:35:3d:ed:5a:e0:f6:23:4c:de:
8d:80:de:52:ba:d5:d0:08:d6:b4:18:cb:3e:56:64:4f:bc:dd:
59:b4:87:19:df:2f:71:e6:ae:66:4a:8f:7b:ad:fc:07:19:10:
cf:73:d5:37
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZt5EC7iXtReBjvu6eA1JyavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTUzNTRlMTMzNDcwOGYxODAwMTJiYjIzN2E5NWY5ZmFjN2E0ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR7AgiI97DZAjcl3nw1KnjSw7vcm
2UmijIEFG/FJwLlbUocGvcy68enY0Oba014KwiKDCaqC61GshzStJVucQOHcsKyM
KySE92qEZ2sxG2fsv1/Hx9F1hIzuXHPKun35sCBll3RK2pmmA2/moPed0RFpKrGx
rGdcFMJgUZpgGL8Ypa+MOpfghVD+776+nUmxj1nkE3FFhMuFeIz+W0C7DZt4T65B
xNVfwAJezBdjbnGTzmoa/9ZNpbzPRgq/3rsRLwcoRy3m9KgYMB2v8iOi+7f3j8YH
50wfoIjgazy+cGuy2HDPZ87wqE/49XiRx1ZyZXMppHrsUWc2Kc594s6nPQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFH5TVOEzRwjxgAErsjepX5+sek5cMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzIxNDQz
Zi1lNjhmLTQ5ZTYtYWJjOS02MDgzMzkzY2Y0NmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjE0NDNm
LWU2OGYtNDllNi1hYmM5LTYwODMzOTNjZjQ2ZS8xL2ZsTlU0VE5IQ1BHQUFTdXlO
NmxmbjZ4NlRsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAubweMA0EAgACMAcDBQMqEtlAMA0GCSqGSIb3
DQEBCwUAA4IBAQBrBv1mM7jXt5cqrmx056xtue+4hmJsdSKY7hTl1cP36pb/gxgR
p4Yu/VoKkF7mUhy1dFBT1hyWNvjqmMiGFv1dsoHGaSdVMfYB5gnanvyL/b5wmRus
dudxnI9ScD/lzy33grSUIyPPSXb23OA+F68eAyBn+T8YHeQZrGfz0UdbTfo9WxEc
B5CrfQeCQvwU0EQTsC+Tg1XDFA4+qhVthKbAE+hzAkC4782F58SRBECcE6GXUaRJ
utcNuacjdcNTiEyo/hRElRD1i8LR3bDgk/41Pe1a4PYjTN6NgN5SutXQCNa0GMs+
VmRPvN1ZtIcZ3y9x5q5mSo97rfwHGRDPc9U3
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:52 2026 by rpki-client