Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.cer (raw, json)
Hash identifier: 5dL8hu7/CvueSS0VuAb3xt7ZxK0XyIuQhofSaLHudA8=
Subject key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A01E26182795A122E215463E04195A6814
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 20 Aug 2026 07:50:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60505
IP: 45.115.108.0/22
IP: 45.149.52.0/24
IP: 103.55.100.0/22
IP: 103.57.40.0/22
IP: 137.59.8.0/22
IP: 185.225.36.0/22
IP: 195.72.124.0/22
Validation: Failed, certificate revoked on Wed 23 Sep 2026 11:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:26:18:27:95:a1:22:e2:15:46:3e:04:19:5a:68:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 20 07:50:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:d2:98:f4:a4:05:c7:a4:2f:ac:09:fb:f5:
6d:87:00:e2:00:d7:8b:83:a3:d3:19:e7:37:de:77:
40:36:12:6c:fb:89:dd:1b:8e:1e:36:44:da:5d:d6:
df:82:68:31:9c:f5:8a:f6:bc:57:c9:d3:82:bf:5e:
80:23:c7:7e:2c:b8:0d:34:b1:53:a3:79:41:ba:63:
bb:cf:b4:60:0d:ba:bb:53:cb:27:b2:b8:df:4c:8a:
ad:cb:19:98:49:f0:b4:be:ff:41:07:f2:b6:2f:4c:
83:5a:30:5e:51:9b:ff:66:4d:e6:c6:76:97:ea:0f:
75:31:01:79:90:ec:8b:47:72:43:03:99:1f:84:b8:
e7:46:5b:0e:24:35:40:6f:39:99:66:79:05:5c:f8:
8d:18:53:f6:dc:02:a2:b9:b6:09:67:95:35:c4:78:
74:4a:a1:f3:c5:2f:7e:3b:28:f3:5a:a5:38:6c:60:
ef:15:85:61:98:b9:eb:a1:20:69:ed:58:11:d3:b1:
2a:87:d5:ae:82:eb:88:0f:e8:e0:7b:f6:ed:ea:f1:
37:b9:5e:6f:4a:98:8d:eb:0d:97:bc:43:32:1e:3c:
eb:30:4b:fb:68:00:b1:44:d0:ce:df:aa:a8:3b:5b:
bc:12:bf:a9:a6:6b:b1:68:49:9c:12:dd:09:7f:fa:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.108.0/22
45.149.52.0/24
103.55.100.0/22
103.57.40.0/22
137.59.8.0/22
185.225.36.0/22
195.72.124.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60505
Signature Algorithm: sha256WithRSAEncryption
2c:98:5b:fb:69:a5:d0:17:cb:5d:cd:42:3b:fe:38:74:a2:8c:
37:cb:e2:d1:a4:8b:67:b3:3d:31:74:5a:79:84:c7:28:af:ea:
06:70:dd:64:8c:a6:86:1b:d2:81:7e:46:17:34:b4:73:4a:fe:
7a:08:16:ba:2a:12:37:c6:80:eb:df:c9:bb:d5:95:45:ee:b7:
81:d8:bb:07:07:46:7a:36:fe:b7:60:43:9e:8d:64:ff:32:ff:
0a:7e:2d:eb:4e:58:19:21:92:26:5c:25:29:83:58:74:09:e3:
b0:ae:8a:d1:55:fc:61:1f:9b:fa:b0:ad:ff:53:b1:3b:df:09:
3a:1a:5b:2e:92:ec:53:1e:f1:27:99:11:0c:f2:c2:7d:f7:6b:
c0:52:09:cc:47:8c:47:96:8b:82:15:07:56:3d:80:bc:ab:e8:
02:7c:a3:ab:44:af:aa:49:fa:e5:de:ed:d7:dd:21:40:6f:9b:
cc:c7:1f:d5:8f:2e:89:64:d3:12:eb:b7:2d:34:b5:df:94:fb:
dd:d8:b3:dc:6b:73:e8:34:0a:d9:fe:64:3f:ab:97:76:a3:cc:
51:45:6d:51:23:78:7f:53:16:dc:30:2e:0e:ba:b6:0d:f0:34:
80:7b:72:45:d5:ce:50:bf:78:77:17:bb:11:58:c0:da:ef:7b:
29:d3:9e:e3
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAaAeJhgnlaEi4hVGPgQZWmgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODIwMDc1MDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzc2NzA2OThjZmFlZjI2NDdmYmM5YTA2ZjczODA4NTZlMmIzMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tnSmPSkBcekL6wJ+/VthwDiANeL
g6PTGec33ndANhJs+4ndG44eNkTaXdbfgmgxnPWK9rxXydOCv16AI8d+LLgNNLFT
o3lBumO7z7RgDbq7U8snsrjfTIqtyxmYSfC0vv9BB/K2L0yDWjBeUZv/Zk3mxnaX
6g91MQF5kOyLR3JDA5kfhLjnRlsOJDVAbzmZZnkFXPiNGFP23AKiubYJZ5U1xHh0
SqHzxS9+OyjzWqU4bGDvFYVhmLnroSBp7VgR07Eqh9WuguuID+jge/bt6vE3uV5v
SpiN6w2XvEMyHjzrMEv7aACxRNDO36qoO1u8Er+ppmuxaEmcEt0Jf/pJJwIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFKx2cGmM+u8mR/vJoG9zgIVuKzAnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzY4ZjY1
MS1mM2E2LTQyNTItOWZhZi05ZTA0NDA5MmI4MjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvNjhmNjUx
LWYzYTYtNDI1Mi05ZmFmLTllMDQ0MDkyYjgyNi8xL3JIWndhWXo2N3laSC04bWdi
M09BaFc0ck1DYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAwBAIAATAqAwQCLXNsAwQALZU0AwQCZzdkAwQCZzkoAwQCiTsI
AwQCueEkAwQCw0h8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsWTANBgkqhkiG
9w0BAQsFAAOCAQEALJhb+2ml0BfLXc1CO/44dKKMN8vi0aSLZ7M9MXRaeYTHKK/q
BnDdZIymhhvSgX5GFzS0c0r+eggWuioSN8aA69/Ju9WVRe63gdi7BwdGejb+t2BD
no1k/zL/Cn4t605YGSGSJlwlKYNYdAnjsK6K0VX8YR+b+rCt/1OxO98JOhpbLpLs
Ux7xJ5kRDPLCffdrwFIJzEeMR5aLghUHVj2AvKvoAnyjq0Svqkn65d7t190hQG+b
zMcf1Y8uiWTTEuu3LTS135T73diz3Gtz6DQK2f5kP6uXdqPMUUVtUSN4f1MW3DAu
Drq2DfA0gHtyRdXOUL94dxe7EVjA2u97KdOe4w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:54:53 2026 by rpki-client