Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
File: yliutBKfjiybxCzRkYXI1_Dm6vk.cer (raw, json)
Hash identifier: fLo/OKri6QXUMjF98E4bC79eQptpSaP96YfB4/wut04=
Subject key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA6B078F6327CDCCAEDA56A046E7E10
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:20:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.113.116.0/24
IP: 2a14:4400::/29
Validation: Failed, certificate revoked on Mon 05 Jan 2026 13:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:b0:78:f6:32:7c:dc:ca:ed:a5:6a:04:6e:7e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:de:5d:0b:1b:81:ad:f6:c2:8c:48:96:ba:
d0:3c:94:57:3c:35:22:38:e1:b9:70:26:c7:99:45:
2a:6b:b6:1c:96:93:0c:ad:ee:74:77:02:ac:60:6e:
e2:67:c5:bb:b5:bf:07:e8:21:b0:e3:bf:0d:d7:04:
e7:6d:66:de:1b:8c:d4:15:cf:d3:85:48:be:c4:25:
95:33:c9:68:b9:d7:0f:ea:9a:31:73:63:db:16:e8:
e3:c5:98:88:f5:b9:be:ee:3e:28:08:c0:10:4a:9f:
00:bc:d0:f7:39:f0:2c:4d:b8:ad:5b:a7:3c:e1:84:
98:f5:23:6d:12:b7:6d:47:33:11:f9:dc:d4:87:65:
f7:0b:2f:00:91:0d:b8:da:8a:c5:10:b9:65:d9:84:
30:bc:ef:f6:04:b4:5e:64:47:81:8c:a4:99:b5:3a:
ba:d5:21:1f:59:ee:00:0c:f9:9d:fd:66:12:55:c8:
58:0f:af:8f:c2:2d:3e:91:c2:d5:b0:c7:8c:dd:ce:
2a:28:3b:06:08:4f:36:e3:e3:de:4b:1b:a0:a5:6f:
af:9e:1a:c7:c8:ee:2b:27:e2:b8:45:be:70:dd:98:
6c:b8:a4:79:59:4b:64:6d:48:ac:c6:bf:54:b7:4d:
ce:8b:c9:2e:cb:8f:52:66:eb:41:27:c8:32:f6:84:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.116.0/24
IPv6:
2a14:4400::/29
Signature Algorithm: sha256WithRSAEncryption
78:27:0f:7f:d8:df:fd:39:73:96:0c:da:61:60:51:57:09:90:
cc:f1:f7:58:9e:b6:3e:bb:77:77:ac:36:d0:bf:98:d7:e9:16:
95:68:ed:81:38:3e:4a:18:ce:2e:d0:26:01:fa:98:d5:e4:ff:
cb:6b:04:83:b5:7a:41:08:84:fe:79:4f:0f:ef:c7:ec:f8:b6:
33:a0:eb:3b:ad:31:a6:53:10:3e:cb:38:51:1e:e1:02:b6:92:
c7:d8:9d:ce:a0:67:b5:3e:20:92:ed:a8:cc:c6:7a:1c:00:be:
be:f9:44:b7:14:ae:94:d7:ca:e2:f9:46:d0:bf:f5:8a:20:ee:
44:52:59:e4:d0:5f:66:54:14:d7:f2:1d:69:b2:6f:66:42:bb:
f2:ac:0d:93:ef:70:ad:50:38:d5:f6:57:aa:29:92:a9:56:0f:
52:7c:ba:55:39:ba:3f:4d:b6:d3:e0:15:8a:9d:ae:54:bc:85:
8a:cc:c2:b9:94:8f:7d:ed:b5:15:04:e8:09:18:ba:df:bd:d0:
ce:c4:1a:56:d9:15:64:da:51:b3:bc:ef:b7:aa:93:64:44:ed:
d8:48:20:54:84:8d:15:57:f1:13:90:78:76:79:1e:2e:e9:5c:
0c:7a:31:79:6d:61:14:73:ef:1d:1a:a1:f1:65:72:08:26:f9:
39:84:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:46 2026 by rpki-client