Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.cer (raw, json)
Hash identifier: 81LN2vlM93ZcPU6BWuo8zcnIFo85g3WggsfLTcvtBHs=
Subject key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B6E4B2C4269E982AA3EC836AA4224538E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Dec 2025 08:06:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48404
IP: 2a12:6500::/29
Validation: Failed, certificate revoked on Tue 30 Dec 2025 08:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6e:4b:2c:42:69:e9:82:aa:3e:c8:36:aa:42:24:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 30 08:06:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:e7:49:c3:40:4f:ec:72:87:71:0a:b9:82:
f1:0d:ef:08:a9:f5:3b:14:4a:5b:1e:ad:bc:25:11:
dd:ef:ab:b9:31:e7:10:45:66:cc:e0:cc:07:35:a5:
52:35:4c:f0:68:8c:ff:10:b8:ff:d5:d9:2f:7a:56:
12:12:cd:28:f6:01:f9:60:9e:3a:53:d9:be:e5:a2:
b2:24:17:46:d3:ac:c5:0d:28:04:50:8a:7c:71:ac:
71:13:30:d4:14:29:2b:8c:fc:25:8d:f5:a1:1b:c3:
f0:8e:98:8e:23:8d:99:be:51:db:4b:68:0c:83:e1:
f0:4a:d4:0a:fa:72:cf:b0:2c:02:a8:26:55:dc:aa:
e6:6d:a5:b0:d3:86:65:d2:aa:77:bc:88:6c:5b:2b:
cd:3b:65:0b:81:c4:22:64:e3:e0:d2:fc:6e:d1:bd:
01:b5:6a:c5:5d:6f:ec:fb:30:98:c1:e9:9f:6b:34:
32:15:c7:3a:06:ab:ed:a9:e7:36:a9:52:e6:27:78:
2f:a2:90:fa:c6:2e:e4:53:bf:61:a2:fb:4a:c3:23:
15:10:ad:10:76:d4:15:1f:e1:29:01:93:93:e1:3a:
ab:44:54:c0:32:93:b0:61:08:86:bd:67:17:44:1b:
e3:8d:32:e8:5a:ca:4d:95:ee:ce:ec:3f:81:e0:31:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48404
Signature Algorithm: sha256WithRSAEncryption
4c:42:1e:dd:20:f2:38:ec:1e:63:af:c6:79:1d:ac:ca:44:86:
3a:3a:5c:2f:50:82:b3:ce:a3:be:4a:aa:29:ca:a0:b8:e4:99:
a6:67:00:6a:f1:d2:6f:cb:e9:11:63:1a:0e:44:f1:b5:1b:71:
28:b9:9b:50:fb:47:ad:2e:93:99:b4:ed:ac:ee:70:97:8b:4a:
ce:48:45:dd:6a:4b:1b:89:e1:b1:8a:5b:42:b1:3f:70:0d:e6:
c7:10:07:fb:80:9a:96:2f:54:6e:00:1d:52:47:6e:11:05:a5:
3e:82:f2:cf:f8:bb:e3:73:4a:05:f3:4d:08:cd:11:8b:2c:3b:
1f:0b:61:86:71:0d:f5:3d:d9:2d:11:0c:ce:d3:2d:17:bd:a6:
cf:f4:5c:75:99:e1:ff:e6:e7:6d:3c:64:2a:9f:34:65:da:f1:
68:aa:00:67:0b:8f:56:29:27:b0:e6:82:55:b1:12:de:21:1e:
52:a2:9b:6f:cd:0b:24:4f:51:f3:66:e8:96:a8:97:ca:03:35:
a3:7c:3e:b8:30:a7:b2:6c:78:bf:f1:cd:26:c4:a3:ee:11:96:
9c:6b:9d:b6:34:d9:26:bc:60:df:81:ca:5d:97:0a:3f:28:91:
83:f3:c2:34:6d:b0:ba:eb:40:46:c3:a6:92:f3:a3:04:b7:72:
61:7f:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 17:24:09 2026 by rpki-client