Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer
File: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer (raw, json)
Hash identifier: SfX4AWpq2Oou5uw4bAkYWB/4kXU9Aad1IeeBjhjve1o=
Subject key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 11179ECD675FAB66FAD394C63CB5DAC9F421E7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 07 Sep 2026 12:28:33 +0000
Certificate not after: Mon 06 Sep 2027 12:33:33 +0000
Subordinate resources: IP: 2a0a:d685::/32
Validation: Failed, certificate revoked on Mon 07 Sep 2026 13:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:17:9e:cd:67:5f:ab:66:fa:d3:94:c6:3c:b5:da:c9:f4:21:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Sep 7 12:28:33 2026 GMT
Not After : Sep 6 12:33:33 2027 GMT
Subject: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:ad:70:12:9b:8f:fb:ab:91:fb:29:69:bc:
1f:47:0b:7b:23:f4:4c:28:2c:49:e7:e5:78:cc:e9:
3d:47:cf:1c:96:1f:62:4e:a3:d2:94:72:05:03:d8:
89:63:7a:04:5e:6e:11:86:c7:54:26:70:f8:f5:44:
f9:f6:71:e5:75:b1:a6:93:68:f1:29:e7:90:e7:0e:
75:13:6d:b4:ac:27:5f:23:9a:3d:88:3b:c7:a7:38:
d9:e1:cc:24:ca:2c:19:dd:41:9a:55:4a:35:bd:fd:
ca:03:fb:70:d8:80:df:da:56:b8:76:8e:eb:f9:3e:
bc:ca:36:11:94:9f:f9:53:9f:8f:e6:90:eb:46:88:
0a:5a:ff:00:48:d8:ad:4c:86:91:e9:d9:da:51:58:
fb:f4:2a:1a:a1:bf:e4:60:53:10:06:40:4e:f9:d3:
1e:bf:73:6c:13:01:da:c6:4f:38:34:6a:0c:00:eb:
13:41:2b:f8:63:6f:68:36:0f:29:8c:26:85:d4:ec:
fa:be:57:b9:60:aa:20:6e:67:06:c8:39:06:39:04:
bb:08:f0:3b:fc:22:9e:24:4c:2f:be:32:93:4a:95:
d1:3f:6b:6c:28:a0:ef:6d:4e:fa:6f:93:19:35:b0:
38:64:16:ac:81:9e:8a:8b:b2:9d:65:e0:5b:05:c1:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d685::/32
Signature Algorithm: sha256WithRSAEncryption
5c:19:d8:28:a4:c1:64:dd:6d:2a:2e:02:47:00:15:ee:21:3e:
9f:85:ff:48:49:9d:11:c8:3c:d4:d5:ac:5c:65:86:9d:e4:ca:
95:ea:03:49:3f:a1:43:bd:97:6c:9f:89:2d:b0:75:eb:13:7a:
aa:27:8f:ce:78:98:60:e2:b0:84:e1:5b:a7:25:14:1d:57:28:
92:ca:33:3f:39:91:21:28:73:32:56:c7:d6:aa:99:4c:0a:d9:
e4:73:c9:3a:18:9f:2c:9a:6f:47:b6:a9:69:ec:35:92:ba:af:
af:5a:7b:f5:60:cd:51:19:bf:02:b8:0e:5d:e2:3d:fb:db:5f:
e1:81:ee:a8:c5:39:4f:1e:56:7d:e9:61:33:dc:9e:07:b0:11:
66:55:87:22:06:9e:92:6b:d2:6b:66:8c:63:02:bc:f0:e5:f2:
22:5e:e9:29:2d:13:6f:c8:f4:8c:4f:57:6a:d3:d5:7c:85:58:
96:71:9a:57:f8:62:4b:d1:3c:90:ca:af:93:80:b8:04:78:15:
b8:38:8c:92:dc:ec:95:d9:f6:f7:b0:e6:64:75:d5:de:27:f8:
bf:99:ef:7a:e0:b2:3d:88:56:51:5a:a4:70:21:42:3f:f5:18:
f9:0c:dc:94:11:ee:3b:d6:b3:6d:5a:d1:f9:a3:39:ec:5a:47:
29:d4:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:43:44 2026 by rpki-client