Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
File: s9AoD1AGlaQyBCUcmDBFTKii56w.cer (raw, json)
Hash identifier: lEERf1g5kgTpJEBwPTVUyEIpJRfBzyHMFzWxxWZsChg=
Subject key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD23717C02E341617C37623291013CC31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 09 Mar 2026 10:49:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215838
IP: 2a0b:6c80::/29
Validation: Failed, certificate revoked on Fri 13 Mar 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:37:17:c0:2e:34:16:17:c3:76:23:29:10:13:cc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 10:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:e5:ec:0d:50:ac:ad:f9:c2:0a:ad:1f:9b:
c3:42:83:41:15:59:f0:b9:b5:86:48:fc:da:ac:92:
b3:18:e9:66:08:1a:09:76:55:b7:5d:51:36:08:07:
30:41:e7:2d:ff:b7:3c:8f:3a:65:13:4b:87:30:39:
ac:c8:86:44:c9:ed:7e:c8:2a:e8:e0:c0:04:90:cc:
3b:be:cf:37:43:f7:21:a7:7c:bd:e4:a5:b0:27:88:
96:e7:c9:2b:9a:0e:1d:9d:ed:33:e8:2d:4b:8f:50:
dd:b6:29:b6:83:8e:42:c7:57:ec:04:60:59:c0:88:
4b:54:35:44:71:c1:66:4b:4b:20:35:c7:30:fb:ca:
73:c5:63:ba:0d:c0:dc:9c:9d:80:29:20:87:4d:13:
18:dc:6b:f0:e5:17:40:c2:c8:93:89:a8:51:f4:7e:
69:ef:86:96:b4:f6:7d:c9:bf:07:e9:ab:c4:98:9f:
12:92:11:a0:f7:58:de:66:57:f7:62:f0:1a:43:ce:
38:8b:0b:a3:f8:b3:31:be:32:a1:cf:50:6d:25:24:
05:bf:32:b4:d2:34:67:66:e4:6e:96:81:45:09:2d:
00:8e:44:af:16:20:1a:f6:d3:43:3f:b0:19:e8:98:
e5:11:e9:21:77:4c:98:23:45:43:db:7f:64:0e:57:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215838
Signature Algorithm: sha256WithRSAEncryption
2a:57:f6:0f:46:2a:c8:a0:01:39:fe:86:85:2f:76:b7:13:cb:
49:1e:d4:6b:a0:81:00:93:c3:b6:de:4c:24:0a:0c:df:b1:94:
23:9a:c0:bf:fe:e7:ae:e9:34:10:c5:7e:b6:47:61:78:72:5e:
2f:80:7b:58:7c:01:ed:c3:ef:53:b8:28:c8:b6:3a:56:4e:b3:
ec:b2:98:b4:e7:e1:6e:5e:a9:95:ec:ab:0a:36:a0:94:26:c9:
68:8f:f7:5f:db:49:10:0c:5c:3f:67:e1:59:6f:88:05:63:13:
35:78:cb:23:2d:8e:b1:7c:93:73:c4:8a:70:a0:83:c2:e9:0c:
a5:57:31:71:67:49:c0:31:84:85:b1:dc:d9:fc:30:17:66:5e:
d4:26:74:eb:99:14:de:97:fc:e1:4a:60:91:7a:f3:ff:2c:cd:
3f:3d:43:c8:76:a9:78:23:4d:58:c5:34:43:8b:bd:5e:f5:f8:
f3:17:49:a7:cf:65:44:3d:a8:89:2d:b2:19:76:45:f8:20:51:
4f:bf:70:ba:47:d5:74:a5:3c:7b:78:41:96:07:a2:88:4f:32:
5f:88:b2:53:1b:2d:a9:f9:4a:9f:5e:2c:8a:d6:d1:10:9a:b4:
de:4e:60:78:f9:22:7d:e8:e0:d4:75:0e:c2:fc:f0:36:57:f8:
84:0e:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:50:05 2026 by rpki-client