Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
File: elUMgGW_YDP8xqOwOBPvknGSQZY.cer (raw, json)
Hash identifier: n+PhN+RmeRqFbkI8WUYBNA2RPIc7S6b0P6jk2QRWNRQ=
Subject key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01999A69D390F89294C4D8D6F16C78507B51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Sep 2025 11:37:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a12:1280::/29
IP: 2a12:8940::/29
Validation: Failed, certificate revoked on Wed 01 Oct 2025 08:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:69:d3:90:f8:92:94:c4:d8:d6:f1:6c:78:50:7b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 30 11:37:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:c8:24:12:c3:9e:05:ac:94:b2:e6:6e:77:
2b:30:ce:2b:9a:6e:dc:12:2a:ed:3f:31:20:0a:50:
1f:7d:30:3c:51:20:d5:89:ee:a6:e2:55:16:54:28:
5e:69:01:86:49:1a:c0:1a:f0:9b:8a:af:0a:61:ef:
60:41:75:a3:3c:b8:20:31:ca:6b:cb:93:66:da:52:
97:e8:56:e1:96:d1:e0:41:4d:c3:c1:10:91:75:ed:
d7:fd:dc:00:75:f6:50:a3:16:5f:99:fb:35:ff:c1:
16:44:e3:b1:41:be:af:4a:5a:28:b5:d0:54:b0:5b:
c6:39:4c:86:09:36:dd:86:b2:97:e1:da:5a:99:f7:
e4:cb:fb:bd:6e:a3:41:24:b3:98:45:bc:8a:99:6e:
40:44:1e:87:ab:8b:52:21:b6:7f:ba:8c:b3:5c:90:
8a:1a:25:03:ee:8c:ad:eb:0a:a1:8d:23:5d:d4:ca:
f6:be:b4:55:f7:6c:07:60:a1:67:f3:4d:e9:1f:31:
7e:40:83:d3:ce:b3:ca:29:b3:57:2e:00:a5:3b:99:
37:1b:ab:e3:58:52:0c:24:b8:32:63:52:36:26:06:
e2:6b:f0:75:d4:96:71:08:05:6c:c0:9e:7b:ce:41:
8b:b2:36:a0:39:36:50:fe:fe:2c:3b:b0:07:77:ff:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1280::/29
2a12:8940::/29
Signature Algorithm: sha256WithRSAEncryption
98:d2:5f:e7:45:cd:ae:f8:ba:ff:dc:6b:53:ef:96:ff:e9:0c:
0d:7b:9b:bf:b5:2e:f2:b8:45:fb:99:9a:54:d6:29:93:5b:ea:
23:db:bf:d5:6b:df:c2:d9:8e:f5:67:94:9a:a8:8f:a5:85:a5:
f8:ab:84:df:0a:2e:62:58:e7:72:48:91:93:22:17:06:ba:6c:
c7:c9:b1:70:e4:53:a6:47:50:2c:3f:45:85:fd:cb:12:ce:60:
cb:2b:54:11:62:e7:bc:00:47:0c:cd:d7:59:8b:5e:f8:85:c2:
88:f6:d6:75:37:0c:d5:8f:a9:9c:af:08:96:01:a9:ef:2a:81:
bb:20:68:2a:85:91:28:25:06:1a:4e:63:dc:06:58:55:b1:2f:
07:c3:35:17:af:df:1a:a2:5f:ed:45:a5:a0:6c:0e:ff:3a:25:
54:99:1c:c6:dd:af:41:80:61:ec:59:cf:0b:a5:8c:60:52:24:
93:e5:62:de:59:4d:e7:17:50:9a:fe:56:f1:49:09:f5:8a:80:
65:16:ef:4b:48:94:7c:c3:bc:94:79:21:12:32:eb:07:fe:fd:
eb:ff:da:7c:35:d7:50:3b:1b:9b:27:7b:97:72:b1:31:75:fb:
85:28:6e:ac:f8:0a:3d:de:ed:4c:7d:f5:c2:77:25:4e:b8:29:
99:f6:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:33:08 2025 by rpki-client