Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5t8ydZNsKsTbszRFOe1ROubBhhA.cer
File: 5t8ydZNsKsTbszRFOe1ROubBhhA.cer (raw, json)
Hash identifier: 1NSxuPtNTsz8Mbmz7919w5t3wjWO4NA8SpNMcBi3+70=
Subject key identifier: E6:DF:32:75:93:6C:2A:C4:DB:B3:34:45:39:ED:51:3A:E6:C1:86:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197CC9FEC0770FD97F815776D76CAD13D0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/497c5f27-1bf0-4e9e-b9da-37aa0a12d732/2/E6DF3275936C2AC4DBB3344539ED513AE6C18610.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/497c5f27-1bf0-4e9e-b9da-37aa0a12d732/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 02 Jul 2025 19:32:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61138
IP: 5.253.84.0/22
IP: 27.0.232.0/22
IP: 81.31.208.0/21
IP: 83.142.30.0/23
IP: 85.90.220.0/23
IP: 89.39.210.0/23
IP: 89.187.68.0/23
IP: 94.24.108.0/23
IP: 94.26.24.0/23
IP: 103.68.108.0/22
IP: 103.137.192.0/23
IP: 103.139.88.0/23
IP: 103.141.12.0/23
IP: 103.146.102.0/23
IP: 103.151.40.0/23
IP: 103.204.192.0/22
IP: 103.214.68.0/22
IP: 103.230.140.0/22
IP: 104.167.16.0/23
IP: 111.235.150.0/23
IP: 118.91.184.0/22
IP: 144.48.80.0/22
IP: 160.202.132.0/22
IP: 185.90.62.0/23
IP: 185.99.132.0/22
IP: 185.121.160.0/22
IP: 185.121.168.0/22
IP: 185.121.176.0/22
IP: 185.147.32.0/22
IP: 185.195.236.0/24
IP: 185.195.238.0/23
IP: 185.214.172.0/22
IP: 185.236.212.0/22
IP: 194.58.64.0/23
IP: 195.184.246.0/23
IP: 202.50.52.0/22
IP: 206.53.0.0/22
IP: 206.245.166.0/23
IP: 2a05:dfc0::/29
IP: 2a06:1280::/29
IP: 2a06:9f40::/29
IP: 2a06:9f80::/29
IP: 2a06:a000::/29
IP: 2a07:54c0::/29
IP: 2a09:54c0::/29
IP: 2a0a:6040::/29
IP: 2a0b:9e40::/29
IP: 2a0d:d900::/29
IP: 2a0f:6280::/29
Validation: Failed, certificate revoked on Thu 03 Jul 2025 03:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:9f:ec:07:70:fd:97:f8:15:77:6d:76:ca:d1:3d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 19:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6df3275936c2ac4dbb3344539ed513ae6c18610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:6b:e9:cd:8c:32:c1:0e:83:1d:ba:44:5a:
3e:44:b3:13:b9:30:e1:3c:2c:51:b1:57:fc:04:34:
97:1e:06:e9:6e:8b:f8:5a:44:17:f5:6c:9e:84:a1:
21:64:24:70:22:f3:63:87:88:93:be:2c:ff:25:ea:
1e:d5:d5:44:ff:42:0d:55:70:9e:1b:0e:e2:0d:40:
05:bf:b0:f4:96:df:9e:26:da:fa:ec:9b:af:6b:bb:
25:57:19:09:a8:82:a0:c0:95:16:a2:01:a6:f2:52:
fb:d9:5a:0c:83:bb:4c:0f:de:df:5d:8a:4e:32:6e:
4f:88:86:8c:92:63:2e:73:16:ad:c7:e9:9c:03:d8:
9a:d4:2a:7b:27:a3:ef:53:fa:1c:57:45:d5:bd:dc:
46:12:d6:04:ff:c1:25:3d:70:b9:bb:5a:54:fe:12:
1f:27:58:7b:d7:76:d3:0c:c6:c9:9d:4f:52:ad:dc:
e2:60:5a:ae:f3:d3:4d:62:d6:45:08:56:6d:af:f6:
ff:73:93:ab:cf:d0:70:7b:c6:58:7c:41:a8:57:52:
eb:60:4a:2f:94:eb:ef:6f:cd:e2:69:89:85:b0:7c:
5a:83:e8:7a:64:e5:13:1f:e9:d2:7b:17:13:dd:82:
64:d8:1b:c4:d9:4c:51:27:f0:b5:78:3d:74:c3:a9:
9f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DF:32:75:93:6C:2A:C4:DB:B3:34:45:39:ED:51:3A:E6:C1:86:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/497c5f27-1bf0-4e9e-b9da-37aa0a12d732/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/497c5f27-1bf0-4e9e-b9da-37aa0a12d732/2/E6DF3275936C2AC4DBB3344539ED513AE6C18610.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
27.0.232.0/22
81.31.208.0/21
83.142.30.0/23
85.90.220.0/23
89.39.210.0/23
89.187.68.0/23
94.24.108.0/23
94.26.24.0/23
103.68.108.0/22
103.137.192.0/23
103.139.88.0/23
103.141.12.0/23
103.146.102.0/23
103.151.40.0/23
103.204.192.0/22
103.214.68.0/22
103.230.140.0/22
104.167.16.0/23
111.235.150.0/23
118.91.184.0/22
144.48.80.0/22
160.202.132.0/22
185.90.62.0/23
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.236.0/24
185.195.238.0/23
185.214.172.0/22
185.236.212.0/22
194.58.64.0/23
195.184.246.0/23
202.50.52.0/22
206.53.0.0/22
206.245.166.0/23
IPv6:
2a05:dfc0::/29
2a06:1280::/29
2a06:9f40::/29
2a06:9f80::/29
2a06:a000::/29
2a07:54c0::/29
2a09:54c0::/29
2a0a:6040::/29
2a0b:9e40::/29
2a0d:d900::/29
2a0f:6280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61138
Signature Algorithm: sha256WithRSAEncryption
77:cf:76:37:59:66:bc:92:97:46:75:ce:c7:ff:60:b4:18:aa:
dc:13:6a:22:76:11:b8:9c:c6:8a:04:02:5c:e9:cd:65:26:f2:
0d:e8:f1:90:79:69:bc:1c:35:d5:3f:79:de:e0:20:9f:c3:c5:
98:b7:b6:ca:e6:a1:37:c5:92:4c:37:e2:71:e1:f1:a9:05:9c:
4f:5c:8f:a7:83:c3:27:26:89:d4:13:cd:59:92:dc:11:6e:86:
9e:ba:3d:fc:34:a7:33:9c:6f:0f:27:04:69:ab:9b:c8:55:a0:
fa:a0:54:c7:19:73:d7:90:85:a2:6e:a2:08:b6:f7:51:8d:01:
9d:2e:03:fd:f4:2e:e4:8c:2d:58:e9:86:b4:e0:07:80:a9:1d:
3f:3a:cf:8a:37:da:d1:91:bd:9c:b9:0c:42:a0:c7:9b:45:02:
de:01:9a:89:5a:c7:e0:aa:46:55:35:64:b1:ba:8d:43:77:79:
30:93:81:96:70:55:a1:db:c8:d0:8e:29:33:5c:1c:6c:b4:db:
90:0e:56:94:15:b5:c6:ed:e2:6b:48:8d:23:ce:78:a0:15:10:
d9:1c:3c:39:24:61:43:a2:37:04:8a:95:a8:96:37:79:79:7e:
78:a4:40:c2:58:91:e1:e4:20:ad:3a:df:51:d9:80:7f:4e:09:
3d:18:33:cd
-----BEGIN CERTIFICATE-----
MIIG6zCCBdOgAwIBAgISAZfMn+wHcP2X+BV3bXbK0T0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzAyMTkzMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmRmMzI3NTkzNmMyYWM0ZGJiMzM0NDUzOWVkNTEzYWU2YzE4NjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrZr6c2MMsEOgx26RFo+RLMTuTDh
PCxRsVf8BDSXHgbpbov4WkQX9WyehKEhZCRwIvNjh4iTviz/Jeoe1dVE/0INVXCe
Gw7iDUAFv7D0lt+eJtr67Juva7slVxkJqIKgwJUWogGm8lL72VoMg7tMD97fXYpO
Mm5PiIaMkmMucxatx+mcA9ia1Cp7J6PvU/ocV0XVvdxGEtYE/8ElPXC5u1pU/hIf
J1h713bTDMbJnU9SrdziYFqu89NNYtZFCFZtr/b/c5Orz9Bwe8ZYfEGoV1LrYEov
lOvvb83iaYmFsHxag+h6ZOUTH+nSexcT3YJk2BvE2UxRJ/C1eD10w6mfGwIDAQAB
o4ID9zCCA/MwHQYDVR0OBBYEFObfMnWTbCrE27M0RTntUTrmwYYQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5N2M1
ZjI3LTFiZjAtNGU5ZS1iOWRhLTM3YWEwYTEyZDczMi8yLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDk3
YzVmMjctMWJmMC00ZTllLWI5ZGEtMzdhYTBhMTJkNzMyLzIvRTZERjMyNzU5MzZD
MkFDNERCQjMzNDQ1MzlFRDUxM0FFNkMxODYxMC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjCCAVgGCCsGAQUFBwEHAQH/BIIBRzCCAUMwgesE
AgABMIHkAwQCBf1UAwQCGwDoAwQDUR/QAwQBU44eAwQBVVrcAwQBWSfSAwQBWbtE
AwQBXhhsAwQBXhoYAwQCZ0RsAwQBZ4nAAwQBZ4tYAwQBZ40MAwQBZ5JmAwQBZ5co
AwQCZ8zAAwQCZ9ZEAwQCZ+aMAwQBaKcQAwQBb+uWAwQCdlu4AwQCkDBQAwQCoMqE
AwQBuVo+AwQCuWOEAwQCuXmgAwQCuXmoAwQCuXmwAwQCuZMgAwQAucPsAwQBucPu
AwQCudasAwQCuezUAwQBwjpAAwQBw7j2AwQCyjI0AwQCzjUAAwQBzvWmMFMEAgAC
ME0DBQMqBd/AAwUDKgYSgAMFAyoGn0ADBQMqBp+AAwUDKgagAAMFAyoHVMADBQMq
CVTAAwUDKgpgQAMFAyoLnkADBQMqDdkAAwUDKg9igDAaBggrBgEFBQcBCAEB/wQL
MAmgBzAFAgMA7tIwDQYJKoZIhvcNAQELBQADggEBAHfPdjdZZrySl0Z1zsf/YLQY
qtwTaiJ2EbicxooEAlzpzWUm8g3o8ZB5abwcNdU/ed7gIJ/DxZi3tsrmoTfFkkw3
4nHh8akFnE9cj6eDwycmidQTzVmS3BFuhp66Pfw0pzOcbw8nBGmrm8hVoPqgVMcZ
c9eQhaJuogi291GNAZ0uA/30LuSMLVjphrTgB4CpHT86z4o32tGRvZy5DEKgx5tF
At4Bmolax+CqRlU1ZLG6jUN3eTCTgZZwVaHbyNCOKTNcHGy025AOVpQVtcbt4mtI
jSPOeKAVENkcPDkkYUOiNwSKlaiWN3l5fnikQMJYkeHkIK0631HZgH9OCT0YM80=
-----END CERTIFICATE-----
Generated at Wed Jul 23 16:37:14 2025 by rpki-client