Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AE08ED5B65DE6FCD3501D910D574F54830060A99.cer
File: AE08ED5B65DE6FCD3501D910D574F54830060A99.cer (raw, json)
Hash identifier: mskSJiezeR+g+vCa90FBFh02Tg6/dW5O9nVp/8y9bPA=
Subject key identifier: AE:08:ED:5B:65:DE:6F:CD:35:01:D9:10:D5:74:F5:48:30:06:0A:99
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 48FF85C7B711861FD37629F77D3A68ADCACF648D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://krill.as218338.eepyinsi.de/repo/as218338/0/AE08ED5B65DE6FCD3501D910D574F54830060A99.mft
caRepository: rsync://krill.as218338.eepyinsi.de/repo/as218338/0/
Notify URL: https://krill.as218338.eepyinsi.de/rrdp/notification.xml
Certificate not before: Fri 23 Oct 2026 18:25:49 +0000
Certificate not after: Fri 22 Oct 2027 18:30:49 +0000
Subordinate resources: IP: 2a14:7583:efc5::/48
Validation: Failed, certificate revoked on Sat 24 Oct 2026 11:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ff:85:c7:b7:11:86:1f:d3:76:29:f7:7d:3a:68:ad:ca:cf:64:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 23 18:25:49 2026 GMT
Not After : Oct 22 18:30:49 2027 GMT
Subject: CN=AE08ED5B65DE6FCD3501D910D574F54830060A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:5c:54:15:ba:40:f3:88:25:5a:a3:e1:c6:
84:d3:c9:43:2d:cb:e2:99:73:37:64:fd:96:e2:11:
0d:34:7b:4a:c7:b4:1a:17:a2:5e:f4:bc:17:5d:46:
2b:69:6b:3e:30:8b:10:c4:ce:b1:46:58:78:7e:83:
55:21:e5:3a:0a:e1:44:58:b2:8b:be:23:b8:d8:a2:
f7:1a:20:cd:4c:f3:9f:0b:96:f2:04:4d:05:80:79:
43:34:24:f1:34:98:6a:16:3f:a6:99:12:1e:01:1e:
34:ec:fc:f6:86:f8:0f:dd:d6:eb:9c:b1:c0:b2:53:
d2:b3:47:d4:6d:5e:45:70:dd:07:bb:d6:13:aa:cb:
70:ce:b5:de:56:09:74:6f:cf:be:ab:24:62:6e:54:
b2:bf:03:f7:b3:be:5f:0c:45:c2:58:d4:83:ac:62:
f9:e7:a0:cc:63:e1:f3:4b:fe:86:e7:2f:d5:dc:ca:
f1:26:5e:86:87:79:79:6e:8f:39:8e:61:7c:da:33:
c9:2b:e2:43:84:46:ff:28:03:31:63:2f:59:0c:db:
af:bb:f4:86:97:b1:7f:42:c5:b0:e0:74:33:c6:34:
f5:45:bb:45:da:be:e3:bf:a1:f6:a1:cd:e0:72:ed:
df:91:e9:9c:12:b9:bb:18:86:1e:c4:d9:d5:31:ad:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AE:08:ED:5B:65:DE:6F:CD:35:01:D9:10:D5:74:F5:48:30:06:0A:99
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://krill.as218338.eepyinsi.de/repo/as218338/0/
RPKI Manifest - URI:rsync://krill.as218338.eepyinsi.de/repo/as218338/0/AE08ED5B65DE6FCD3501D910D574F54830060A99.mft
RPKI Notify - URI:https://krill.as218338.eepyinsi.de/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efc5::/48
Signature Algorithm: sha256WithRSAEncryption
59:1b:77:fc:94:90:19:f7:ce:9e:12:eb:e6:b3:c8:99:aa:30:
cb:ad:bc:66:48:39:a9:22:4b:a2:e2:9f:8a:28:fc:90:cf:f0:
07:97:60:06:36:e6:56:a6:f4:c0:0b:4f:ae:be:82:0b:a7:b6:
6f:01:1c:85:1f:cd:9a:e7:fd:57:e6:26:de:83:55:b5:9e:58:
3f:c9:16:42:0f:b6:80:3b:33:87:95:1f:11:84:71:23:c3:c9:
45:a7:48:96:b3:0a:10:3e:c1:e8:54:a2:a9:16:53:f9:54:c5:
13:3f:ab:85:07:2f:89:43:cf:f2:15:1c:cd:03:a1:51:7f:58:
66:e5:c9:8f:35:a5:4e:4d:dc:c5:e9:da:2f:5e:bd:3f:e4:3a:
af:55:33:ea:db:96:cc:31:21:ef:a7:40:dd:9e:48:b3:67:fa:
5a:ac:8e:c9:ee:fc:6b:9d:9e:d7:7e:2f:e6:27:76:1c:6f:e7:
4b:22:1b:95:3d:b2:e5:7d:ef:d1:5f:df:a4:d6:f0:20:f6:b5:
7c:21:9a:92:4d:0b:06:99:50:a8:25:cd:0c:a2:4f:a6:97:0d:
9a:20:43:8d:99:a7:38:b5:0c:b7:30:32:3f:14:93:c5:3d:13:
06:24:13:93:c7:51:28:14:a9:5d:39:cf:30:a6:b3:be:ea:aa:
5b:d9:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:16 2026 by rpki-client