Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
File: zQwDKJL2la9ME_sKyoBD0Xsbl78.cer (raw, json)
Hash identifier: 4hbv0M+5mC8g2OOsCKGcf14JpsjGRGV3hDi0T5dcVk8=
Subject key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B4A54B8F266779CE422CC7682B96FB259
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Dec 2025 08:30:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210965
IP: 2a04:a600::/29
Validation: Failed, certificate revoked on Wed 24 Dec 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:54:b8:f2:66:77:9c:e4:22:cc:76:82:b9:6f:b2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 23 08:30:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:c0:a3:47:2c:02:f4:fc:a3:fa:aa:7b:5f:
78:cd:2f:c1:8b:b7:00:c7:da:1d:96:7a:98:14:d6:
3f:1c:ac:bc:6c:f1:a3:bd:55:86:d3:d4:3f:e7:70:
d1:56:16:4d:28:6c:9f:5b:cf:9e:49:ca:d8:74:ba:
bb:87:12:94:45:e1:26:10:c9:cc:9b:88:45:a0:22:
d4:59:90:69:48:b0:b1:f6:d9:51:d8:ac:79:6a:d3:
71:09:e2:e9:29:c2:18:34:c7:24:cf:ef:4c:b3:c8:
50:f2:6e:73:54:5c:9f:42:7b:73:fc:cd:9e:1b:f3:
93:e9:be:e9:94:61:58:f3:f5:83:f4:54:70:7e:38:
f2:85:5e:cd:70:3e:1c:be:88:6d:61:7d:d7:39:2d:
86:b8:dd:9d:a5:fe:05:c9:62:2e:fd:d7:c2:71:65:
c4:e1:07:cd:72:42:48:dc:23:39:c7:0b:f0:f2:39:
35:59:3f:1f:9e:da:7e:d2:c9:42:9f:5c:9e:51:80:
19:24:ce:49:ab:bb:04:0c:34:57:8f:56:62:1b:d4:
20:37:d5:9f:92:fd:19:3a:d1:bc:27:5c:be:ef:5b:
77:aa:87:84:01:04:7a:8b:e6:a3:45:47:64:5a:79:
88:78:09:82:21:7a:05:94:69:c1:a0:4d:bd:06:99:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210965
Signature Algorithm: sha256WithRSAEncryption
29:a1:85:61:a2:d8:da:89:0d:5d:1b:57:14:62:9b:a8:37:45:
62:8b:67:49:5c:73:02:f6:ed:ce:9a:2c:7e:97:94:62:b4:c3:
17:4d:0a:31:99:6e:6b:cf:18:76:4a:b3:91:67:1b:32:55:72:
9f:88:33:d2:97:1e:3e:98:35:2f:69:b3:e4:33:4e:fb:ca:09:
0e:7a:16:85:52:22:5b:2c:b4:f4:25:b0:05:5e:03:a2:59:37:
81:f2:22:85:6c:d6:de:63:31:b6:71:da:37:3e:aa:b0:86:b2:
f4:21:e1:ff:68:b9:10:f1:aa:08:c5:e8:ad:b4:d6:72:38:67:
be:eb:8e:e4:02:78:ad:0e:1e:c9:ff:8e:ce:19:e4:25:5e:e4:
2c:c0:04:c1:84:8b:1f:81:c8:e8:a8:d6:1a:67:4b:11:81:a2:
1d:29:9d:75:30:ca:44:6b:a4:56:f2:a1:e5:64:20:b4:7f:0f:
8f:0e:34:45:ba:7c:68:83:b6:41:ff:c5:7a:87:5e:e9:a9:8f:
94:49:96:58:e8:68:07:be:68:e0:4a:df:bd:73:76:2f:d1:9d:
6d:dc:79:cd:3e:64:63:88:f1:4e:6d:b4:f3:6d:9e:95:26:da:
69:e4:66:80:0b:c0:0b:87:94:8c:08:75:9d:77:e8:5f:bf:cb:
5b:14:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:54:18 2026 by rpki-client