Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/N-iKCgkNz9VjJjNeDd-MVWJXrdo.cer
File: N-iKCgkNz9VjJjNeDd-MVWJXrdo.cer (raw, json)
Hash identifier: lQkIt7Eqp2vxlkx0eUQsrNKqAdxR4MEkbQMzEtcRqCc=
Subject key identifier: 37:E8:8A:0A:09:0D:CF:D5:63:26:33:5E:0D:DF:8C:55:62:57:AD:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0DF328F924340925C04722F13765DB198
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/N-iKCgkNz9VjJjNeDd-MVWJXrdo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 26 Sep 2026 19:30:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213434
Validation: Failed, certificate revoked on Tue 29 Sep 2026 15:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:32:8f:92:43:40:92:5c:04:72:2f:13:76:5d:b1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 19:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37e88a0a090dcfd56326335e0ddf8c556257adda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:fe:68:4e:af:46:ae:97:8e:46:17:8d:c0:
fd:ba:33:d4:d7:75:10:98:ba:ae:a0:e4:a4:d7:74:
3e:1b:1c:43:b5:4f:06:db:f5:48:65:6e:fe:8f:a5:
a4:10:8f:6b:7c:67:fb:b6:ff:b8:ac:47:66:58:01:
0c:ae:ef:aa:fc:b5:c8:32:8c:74:78:22:de:71:74:
b3:8d:df:f0:40:53:8a:c1:b3:78:9e:de:48:27:95:
15:cf:42:54:ea:88:ac:14:8f:8c:15:1c:1c:fc:3d:
54:75:e8:76:cf:ba:af:6a:21:88:50:be:b1:c8:57:
eb:9a:0c:e6:7f:c6:e2:30:15:ef:17:e0:bc:c4:e6:
4a:fc:5e:37:36:e0:48:5a:d9:7e:35:66:29:77:ca:
2b:3f:b7:b5:e0:2c:53:41:27:21:81:db:81:60:fc:
ec:44:00:f4:7c:83:b5:24:4e:62:3a:91:c9:07:22:
ef:3d:40:98:4e:a9:c4:0a:3f:aa:3d:59:f1:61:6b:
01:01:05:ec:1f:7a:99:1a:34:64:6b:f8:6b:af:31:
56:d2:ff:34:d1:6d:e5:dd:64:dc:61:e7:ee:84:48:
15:f0:4d:40:3e:4f:d1:3c:f8:b1:0f:69:3f:a1:66:
5d:08:66:64:db:f1:01:5d:bd:3a:95:bb:3c:70:97:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E8:8A:0A:09:0D:CF:D5:63:26:33:5E:0D:DF:8C:55:62:57:AD:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/N-iKCgkNz9VjJjNeDd-MVWJXrdo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213434
Signature Algorithm: sha256WithRSAEncryption
6e:82:d2:8b:02:00:e6:05:34:da:f7:73:d0:b5:26:42:19:87:
6c:4d:03:0e:56:23:24:b6:d7:9d:e3:a0:62:09:75:1b:07:31:
8f:6a:f9:6f:77:66:65:66:b7:4b:b0:1a:d0:15:38:3d:c7:4e:
f1:62:f9:f3:de:9e:54:32:44:9e:57:0c:c8:d6:9a:62:b5:ae:
40:ef:02:b0:e4:6e:49:93:3c:d3:21:8b:84:ed:22:0f:85:ef:
91:5c:ed:2a:6e:aa:8a:ad:e5:1c:cb:1a:38:38:e3:9a:20:09:
2e:a4:e4:ea:e0:36:1b:19:90:eb:d0:6d:bf:8c:f0:9b:f5:7d:
5d:3e:84:10:84:30:77:b4:2f:4f:79:24:79:73:3f:ba:c5:f1:
74:74:e9:b2:d3:7b:7e:db:c4:15:7d:c5:d2:7b:21:93:42:16:
e5:a8:d5:70:ad:96:63:2c:49:e5:e5:4e:be:d1:14:40:7d:fa:
46:47:07:e3:a7:5e:43:33:a7:34:dc:6b:26:71:2d:a7:24:c2:
a3:a2:7e:3b:df:44:16:71:d0:7b:7e:58:b8:d6:96:e3:12:e0:
d1:f9:3b:7f:cc:ed:7b:62:f7:9b:79:fa:3a:d6:8f:ba:3b:22:
c3:a6:20:6a:cb:5c:f0:7f:1d:7c:f7:bc:c4:1d:94:28:c1:fe:
d1:61:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:55:21 2026 by rpki-client