Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
File: C53uHUCq19-1viY4ApT04HcD14Q.cer (raw, json)
Hash identifier: cd1BLbdTNDQG7Weh9DZ/yGR7cJlwYVgY5DWMYOm6+tg=
Subject key identifier: 0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199571EF9BA3DEE7E07A1FE4A3C52A1A3F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 17 Sep 2025 10:01:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.238.131.0/24
IP: 2001:67c:54c::/48
Validation: Failed, certificate revoked on Fri 19 Sep 2025 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:1e:f9:ba:3d:ee:7e:07:a1:fe:4a:3c:52:a1:a3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 17 10:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:7a:5e:f8:76:06:77:9b:5f:80:7a:da:a4:
be:ff:61:1a:03:81:a7:dd:4c:58:67:c9:4c:c5:e4:
38:95:bd:e4:6a:23:f4:fe:02:86:ab:9e:b4:67:1e:
dc:80:19:d3:b7:7e:1b:46:7e:d7:64:b5:13:aa:76:
37:72:ec:f0:cf:43:cf:ff:32:02:2d:24:18:1d:bc:
85:99:d8:40:0f:40:bf:d8:1f:0c:ba:e8:04:ad:16:
54:5e:b2:09:1a:5c:2f:52:26:98:f0:80:fd:52:3e:
ed:ab:90:c8:ce:64:1f:84:94:a2:a9:bf:d3:7b:c2:
df:31:28:28:8a:e4:76:b2:0e:ae:98:03:b5:3f:a1:
d0:f4:bb:c5:da:0b:58:29:7e:79:04:a9:be:f3:1c:
5d:17:ee:b2:8e:72:45:cd:33:ce:5c:99:78:ef:d0:
d0:dc:d7:7c:52:d8:6d:03:be:c9:3e:d3:7a:ba:07:
0b:5d:a1:c4:95:d0:98:e7:7b:11:6d:62:e0:67:08:
46:a1:74:9d:86:58:5e:23:4a:f7:5b:be:65:8c:44:
53:6a:8d:b2:34:ec:d5:05:d6:5b:e8:07:bc:41:9d:
8b:21:9a:18:d8:a7:2c:b8:62:0b:b9:6b:af:1b:bb:
f4:2b:36:d6:16:d7:26:5a:90:1e:07:14:9a:77:ea:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.131.0/24
IPv6:
2001:67c:54c::/48
Signature Algorithm: sha256WithRSAEncryption
11:cd:65:04:c1:ff:c9:20:50:fa:81:39:70:30:63:62:b8:44:
c2:85:d6:b7:3f:3c:4d:4e:94:97:56:8c:25:8d:71:ef:5b:7c:
04:91:ba:33:1c:3e:ba:09:b6:f2:cb:73:29:3b:b1:d3:ab:71:
64:06:32:90:d1:fb:7b:00:69:4f:31:4f:c7:3d:3a:13:f9:5c:
80:58:47:59:d7:2a:1f:ba:dd:1d:70:09:58:a4:04:3b:40:fa:
5d:62:83:8b:96:20:51:82:9e:29:e7:91:a5:bc:c4:8b:11:42:
b7:5a:10:9a:1e:01:6c:ca:fb:52:9c:b2:17:df:b8:ad:17:f7:
53:d3:bb:18:56:27:a7:46:8b:88:81:3d:9d:3a:01:9b:8b:f9:
24:29:62:34:de:12:c3:db:64:9a:56:3f:8b:57:3e:e5:1a:84:
b1:0c:b7:41:b3:ea:65:59:26:34:8d:42:76:8a:bf:41:3a:94:
47:e5:fe:af:92:86:6e:5e:7c:3e:86:b8:48:96:ea:95:1f:a7:
99:a1:47:46:52:5e:46:2f:4a:47:f4:0f:97:f9:63:52:d3:62:
26:9e:e3:66:eb:9a:2f:2c:0c:e6:62:40:f7:d5:e1:f8:64:68:
bb:54:d0:c3:29:9a:85:f7:8b:90:12:d8:77:fa:4d:58:f7:df:
dd:39:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 14:57:56 2026 by rpki-client