Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hZgt-MdxoBI0HmZ6w42L1PMbCE4.cer
File: hZgt-MdxoBI0HmZ6w42L1PMbCE4.cer (raw, json)
Hash identifier: rl04HBvXQBXH5sw8ef6pJFM09/1GaksBPpz2RB02GaU=
Subject key identifier: 85:98:2D:F8:C7:71:A0:12:34:1E:66:7A:C3:8D:8B:D4:F3:1B:08:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01971B57491348F852CB6E9012CB04C2AAC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/hZgt-MdxoBI0HmZ6w42L1PMbCE4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 May 2025 09:19:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209569
IP: 2001:678:dcc::/48
Validation: Failed, certificate revoked on Sun 01 Jun 2025 14:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:57:49:13:48:f8:52:cb:6e:90:12:cb:04:c2:aa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 09:19:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85982df8c771a012341e667ac38d8bd4f31b084e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:4a:2b:d2:c0:93:ab:99:4f:f1:54:3c:86:
5b:aa:79:eb:30:2f:87:de:3a:e4:7e:4b:36:51:da:
19:2a:a1:ca:f7:6d:0c:ff:70:55:45:0d:5d:9b:c9:
5d:99:19:3d:02:3a:fd:23:18:36:4a:2f:fc:8e:40:
50:99:f6:0a:e3:11:71:26:b2:96:dd:ae:7e:39:06:
a3:3b:b8:dd:8f:93:4e:6c:7c:51:a1:46:90:0b:83:
4a:f6:82:a8:4c:e3:66:37:20:33:1b:b4:8b:97:ee:
f5:5f:b3:9d:47:5b:b4:b4:35:37:69:ff:c5:b1:ad:
2b:81:4e:37:ba:18:b1:e3:5d:f7:9b:21:e1:28:74:
99:70:a9:c5:9e:a4:16:36:96:5b:7e:3e:c3:e8:82:
73:01:4a:a0:a1:b2:4f:9c:48:4a:68:08:6a:43:7b:
3f:40:44:b0:80:da:4a:7c:97:b2:8a:24:a3:4c:67:
4e:3e:d2:e7:0c:0c:d3:f6:a0:69:c4:b2:a8:83:e6:
e0:22:a1:74:60:15:7e:f3:7a:db:7a:7f:e6:3c:92:
d8:12:29:1b:cb:cd:19:cb:ce:43:ed:9b:e0:1e:5b:
5f:a0:48:d5:16:a4:10:92:a5:16:cb:cf:8c:f6:94:
2b:4e:00:b8:6d:b3:b7:1e:0d:88:04:63:d3:23:08:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:98:2D:F8:C7:71:A0:12:34:1E:66:7A:C3:8D:8B:D4:F3:1B:08:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/hZgt-MdxoBI0HmZ6w42L1PMbCE4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dcc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209569
Signature Algorithm: sha256WithRSAEncryption
9a:72:24:02:a1:9e:7d:90:86:b6:21:f2:5c:55:ef:f1:51:5a:
cd:03:8a:ea:b2:ec:f1:c1:cc:3c:83:88:ae:3b:e0:67:3b:aa:
22:b3:ff:b2:5c:6c:fa:89:9c:ea:a0:65:0b:53:4b:b2:a9:c1:
ac:d9:c3:8a:f8:6d:09:65:89:7c:92:9e:90:72:4c:da:ec:79:
b9:5d:99:f0:8e:5a:c8:51:69:8c:ab:19:09:6a:b6:df:80:45:
eb:6e:20:3e:f5:63:32:ca:a0:8d:ae:34:90:06:2b:01:49:7d:
ef:29:79:05:ca:85:4e:0d:f3:b2:cf:8a:c9:24:12:36:95:5b:
9e:eb:8d:ba:27:29:72:a8:84:d4:8a:c5:cd:b4:02:c9:8c:6a:
86:79:01:48:58:36:f1:1a:16:65:2b:5a:ce:7e:4a:88:87:73:
6d:1f:3e:27:8f:ea:00:1a:4b:b5:ed:46:59:f2:04:93:44:ad:
93:18:2d:a8:73:ed:25:13:9c:8e:40:9f:fb:62:4f:9b:4e:68:
2e:3c:b2:4a:fe:c2:24:fa:ec:a0:d5:91:ea:d5:4a:a6:c3:9f:
0b:05:ea:28:94:de:ad:f6:34:f5:18:c0:9d:f0:66:1e:6f:7c:
4f:10:e5:1f:2c:f3:74:9c:9b:cf:90:c1:59:74:78:1a:e6:6b:
cf:fa:80:c8
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZcbV0kTSPhSy26QEssEwqrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNTI5MDkxOTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTk4MmRmOGM3NzFhMDEyMzQxZTY2N2FjMzhkOGJkNGYzMWIwODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyJKK9LAk6uZT/FUPIZbqnnrMC+H
3jrkfks2UdoZKqHK920M/3BVRQ1dm8ldmRk9Ajr9Ixg2Si/8jkBQmfYK4xFxJrKW
3a5+OQajO7jdj5NObHxRoUaQC4NK9oKoTONmNyAzG7SLl+71X7OdR1u0tDU3af/F
sa0rgU43uhix4133myHhKHSZcKnFnqQWNpZbfj7D6IJzAUqgobJPnEhKaAhqQ3s/
QESwgNpKfJeyiiSjTGdOPtLnDAzT9qBpxLKog+bgIqF0YBV+83rben/mPJLYEikb
y80Zy85D7ZvgHltfoEjVFqQQkqUWy8+M9pQrTgC4bbO3Hg2IBGPTIwh9iQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFIWYLfjHcaASNB5mesONi9TzGwhOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzhiODM4
Zi1hYTlmLTQ1MGYtYTYyZS0zZDU1YmRjOTU2NTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvOGI4Mzhm
LWFhOWYtNDUwZi1hNjJlLTNkNTViZGM5NTY1MC8xL2haZ3QtTWR4b0JJMEhtWjZ3
NDJMMVBNYkNFNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA3MMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMyoTANBgkqhkiG9w0BAQsFAAOCAQEAmnIkAqGefZCGtiHyXFXv8VFazQOK
6rLs8cHMPIOIrjvgZzuqIrP/slxs+omc6qBlC1NLsqnBrNnDivhtCWWJfJKekHJM
2ux5uV2Z8I5ayFFpjKsZCWq234BF624gPvVjMsqgja40kAYrAUl97yl5BcqFTg3z
ss+KySQSNpVbnuuNuicpcqiE1IrFzbQCyYxqhnkBSFg28RoWZStazn5KiIdzbR8+
J4/qABpLte1GWfIEk0StkxgtqHPtJROcjkCf+2JPm05oLjyySv7CJPrsoNWR6tVK
psOfCwXqKJTerfY09RjAnfBmHm98TxDlHyzzdJybz5DBWXR4GuZrz/qAyA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:53:34 2025 by rpki-client