Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
File: KVZYS3DOhHwam0AFSLFNsDG-3_I.cer (raw, json)
Hash identifier: qzlDAPOsnS2MaNELaextGOMYlDL37A1q59I/0Nt+Rbg=
Subject key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B6E745AF0E5E7EE5EB5414DBA4532BEDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Dec 2025 08:51:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a12:2500::/29
IP: 2a12:2700::/29
Validation: Failed, certificate revoked on Tue 30 Dec 2025 09:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6e:74:5a:f0:e5:e7:ee:5e:b5:41:4d:ba:45:32:be:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 30 08:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2956584b70ce847c1a9b400548b14db031bedff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:63:52:74:33:17:d9:69:28:86:52:75:72:
fc:70:18:d6:84:18:d0:fc:0f:0b:ee:c8:cc:91:ed:
ca:08:5a:2b:91:8b:9d:e5:3d:dd:87:16:1e:d6:e1:
49:ac:e5:ad:17:10:b2:b7:5d:c0:cb:5c:ee:72:52:
32:55:33:22:9d:04:51:55:76:02:b6:15:1f:f1:01:
78:87:dd:4e:c2:28:09:7c:c8:2a:46:19:2e:c8:4d:
6e:8f:96:08:5e:26:85:91:80:70:2c:cd:31:4a:a5:
15:ed:c0:1a:67:3c:dc:de:16:74:15:77:6d:e8:65:
c4:34:0b:5c:0c:f8:4d:d0:9b:21:e8:e4:52:65:6f:
a0:18:ba:9a:a9:f4:cb:17:00:1c:57:6a:2f:5c:f2:
8d:d0:86:9c:f9:c0:16:c4:79:59:ab:ca:14:f9:eb:
48:ab:c6:43:77:d2:7f:a5:bc:89:11:12:2a:3a:21:
ef:4c:d6:33:8b:62:ab:f7:de:1b:40:2f:3b:a1:fe:
1f:09:bd:46:6d:6d:7f:de:36:2e:92:f3:1f:80:da:
40:7e:44:69:13:eb:ff:65:c9:2e:ae:ee:05:90:cc:
23:b0:05:4f:56:49:b1:c4:38:50:22:26:24:aa:7c:
c5:83:d1:46:70:22:fd:63:a3:fb:a7:fc:b2:7d:a8:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2500::/29
2a12:2700::/29
Signature Algorithm: sha256WithRSAEncryption
0b:5c:c5:57:b4:14:b6:27:42:b4:ed:f1:dc:ca:db:1f:78:b0:
19:45:7e:af:cc:22:2e:da:48:9d:69:21:f4:95:39:4b:89:64:
f9:da:89:82:e9:91:d7:fc:e2:26:76:bb:99:b8:aa:8a:1c:82:
f8:cd:b5:5b:3f:9a:c9:e8:4f:d7:da:3b:63:ff:74:b4:8a:33:
d6:2c:d6:55:81:fd:df:06:8c:92:b2:4d:67:a1:20:42:fb:11:
e7:61:ff:98:7d:a6:67:6a:d8:a6:1f:e0:3f:c8:d1:72:03:c9:
11:3b:34:5e:62:7f:1d:4a:9c:70:8a:24:7a:9c:c0:04:86:16:
7d:ec:3d:41:af:d5:93:0c:90:85:b0:5c:e0:b9:b8:c9:09:71:
d2:54:92:67:10:14:c7:46:34:ac:07:44:5c:9c:3b:0e:44:43:
c5:6c:f1:89:05:c2:b6:5e:64:6c:15:a3:3f:7a:82:4d:36:81:
38:ad:4d:61:33:bd:2e:41:06:c9:5a:d9:a2:df:e6:c9:53:d2:
a6:e6:e4:f8:95:ee:51:fa:11:b4:35:1e:cd:e6:1c:7e:17:e3:
80:3c:ae:39:7f:4f:79:b1:fa:44:cd:e1:ca:81:5f:1e:8a:d5:
e1:17:2d:80:ee:6c:e6:2b:36:c5:d7:e9:71:e2:34:6a:d2:c4:
ba:f0:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:00:53 2026 by rpki-client