
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PlPauUleR4dQPawcGbbHx49dUUQ.cer
File: PlPauUleR4dQPawcGbbHx49dUUQ.cer (raw, json)
Hash identifier: FjiPR04QMTqCBm8iq5JkZR8unilsHeEEQSOXQuPrizM=
Subject key identifier: 3E:53:DA:B9:49:5E:47:87:50:3D:AC:1C:19:B6:C7:C7:8F:5D:51:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019740CB61E40C46420130F086A5D7978CC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/66be81-be88-45a8-9c00-314fa25fc29e/1/PlPauUleR4dQPawcGbbHx49dUUQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/66be81-be88-45a8-9c00-314fa25fc29e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 05 Jun 2025 15:52:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207427
Validation: Failed, certificate revoked on Fri 06 Jun 2025 12:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:cb:61:e4:0c:46:42:01:30:f0:86:a5:d7:97:8c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 5 15:52:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e53dab9495e4787503dac1c19b6c7c78f5d5144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:e9:c4:dd:18:a3:5c:17:96:6e:a1:10:a0:
a9:23:8e:dc:b4:e4:59:f2:a9:b3:18:09:37:3b:f6:
5d:33:bd:51:66:31:32:2c:d9:2c:c6:49:cc:59:88:
69:6b:a0:37:b1:35:a4:0a:f4:87:08:be:a5:9d:db:
ba:fd:09:d2:72:c1:de:18:b6:e4:23:d8:f8:4d:0a:
86:bf:05:31:1a:2d:85:7c:01:6c:7f:0e:bf:ef:10:
89:46:59:81:28:74:a3:30:6a:34:c4:93:e1:ee:97:
8b:c0:35:ed:62:0e:49:a5:00:b2:a4:81:0d:b1:00:
93:02:73:20:bf:3e:2a:9b:b5:88:8d:d8:d8:cf:8e:
de:5a:8b:26:6e:5a:0a:5f:0f:31:b1:c8:5c:d2:69:
41:50:b0:8e:97:f0:d7:57:4f:09:7f:be:85:95:4a:
5d:aa:47:b1:ca:c9:d1:a5:ff:44:79:ec:90:d9:d6:
05:21:dc:61:7d:15:cf:94:59:89:26:03:5c:1b:93:
c9:2f:31:ca:91:70:be:a6:ff:6d:ed:eb:aa:49:b3:
2c:c7:43:93:5d:43:d6:fd:d5:ec:72:be:ad:1a:d5:
26:14:1a:60:f9:3d:de:e3:3e:3d:94:66:65:22:3f:
7b:5d:c7:c3:75:5c:34:ff:98:66:77:5f:31:90:ed:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:53:DA:B9:49:5E:47:87:50:3D:AC:1C:19:B6:C7:C7:8F:5D:51:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/66be81-be88-45a8-9c00-314fa25fc29e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/66be81-be88-45a8-9c00-314fa25fc29e/1/PlPauUleR4dQPawcGbbHx49dUUQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207427
Signature Algorithm: sha256WithRSAEncryption
5f:72:9a:a9:09:d0:75:44:9e:66:26:3b:8d:2a:f3:28:f8:2f:
6d:49:b8:d9:cc:76:a6:de:bf:91:51:ed:f5:38:cd:a2:dd:dc:
94:cc:ce:a4:1a:18:23:ff:e1:20:07:73:32:bf:4d:a5:34:a5:
3c:ee:3d:60:8f:ae:30:e4:3b:4d:bd:5e:9c:2a:2e:e5:83:13:
42:6b:ac:ca:6f:0a:7e:d4:25:15:ff:9f:1f:3b:2f:0e:c5:d8:
3c:a2:e3:0b:b3:fe:20:cd:88:88:63:39:5e:f0:43:ca:68:21:
35:9e:50:3c:c1:81:83:b3:7f:b8:f8:f4:70:02:24:f3:c0:ec:
88:49:85:5b:d6:49:ca:d3:bf:7e:56:94:44:97:fd:c5:8c:e5:
64:70:fe:a2:54:29:64:ec:0b:f1:f0:d4:a1:dc:13:e0:90:e0:
8e:d4:e7:a4:a7:84:ab:00:e8:92:fd:dc:34:ec:00:af:39:4a:
04:7d:c7:a2:1e:66:d1:7d:8c:c5:6f:ac:0d:b6:98:6f:db:c6:
7a:c3:70:b5:74:0e:90:ef:2f:46:bf:a4:e1:3f:bb:47:c7:76:
7e:3e:7a:bf:f5:23:00:e7:4f:ff:d7:1a:9f:af:ee:52:7a:04:
ca:08:0d:a3:5d:af:b2:04:be:39:69:08:f3:e7:53:c1:82:66:
3a:84:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:23:34 2025 by rpki-client