Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
File: z3MgFidzz_4oZtlxKnOOQZlTYRc.cer (raw, json)
Hash identifier: zkyJk36Vg5SDj+2bJS3w8+5fRrD60+VBZXgMLpcMfSw=
Subject key identifier: CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78350A54C9A4F3C5734CC7B210B31AF6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208824
Validation: Failed, certificate revoked on Mon 05 Jan 2026 14:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:0a:54:c9:a4:f3:c5:73:4c:c7:b2:10:b3:1a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf7320162773cffe2866d9712a738e4199536117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:71:65:f0:44:d5:dd:31:bd:11:b6:0c:a9:
f4:98:02:8c:95:16:43:52:54:7d:4d:87:75:96:80:
da:7b:e9:71:7c:9f:27:fa:17:6d:48:95:4f:69:75:
c8:90:52:3d:9d:68:de:7b:97:35:bc:14:6e:a4:ea:
2b:29:ed:da:25:c8:96:87:71:5e:db:01:05:97:06:
08:76:36:e3:e6:67:fb:f0:d0:16:8c:24:18:6b:7b:
fc:e2:ad:c1:20:69:b6:84:2c:cd:63:c2:17:7c:b6:
fe:4a:90:b8:cc:0d:5b:df:ac:8b:c7:e0:c9:fc:37:
e4:5f:78:00:0a:9c:01:10:a0:3a:e8:73:49:e3:06:
30:e5:33:75:a2:c4:58:09:af:79:21:a0:98:84:48:
f1:ea:a5:39:22:c8:2c:db:d9:61:fb:7d:83:85:db:
0e:f1:b0:30:1f:95:8f:0e:59:d8:3b:9a:23:9f:67:
4d:e5:30:a4:1e:ed:b4:41:0a:af:74:d4:66:e2:a4:
09:c4:51:76:c3:96:bc:8c:70:ac:40:e1:23:c4:b9:
d8:96:a5:ab:b5:9a:63:07:b8:34:0f:bc:06:bb:69:
8b:bb:91:3e:93:b5:ce:47:d7:81:02:0e:2d:8e:fd:
3b:3a:3a:83:cd:d6:9d:4d:61:2e:72:44:44:fc:d9:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208824
Signature Algorithm: sha256WithRSAEncryption
8d:91:61:f6:ce:58:18:fb:fb:6f:6b:b3:b9:c7:fc:e1:7a:62:
2f:50:39:90:d1:9d:9d:ec:49:e5:e5:bc:50:e5:20:24:77:55:
86:dd:ca:69:67:d4:f8:ae:2d:e5:f7:43:5a:f3:a1:0d:b8:75:
15:de:7f:6d:63:28:8f:cd:4c:01:df:1c:2d:cb:a5:89:43:9c:
16:43:70:a7:2b:c8:95:1b:80:28:5f:69:69:6e:fe:e0:c3:4d:
23:2d:cf:d1:e5:6f:c9:09:62:e0:5a:5c:f7:d3:d9:4a:4c:96:
bf:ec:46:5e:5c:29:95:55:93:f3:56:4c:ca:d1:c9:11:2c:ec:
38:0b:d1:4d:7a:5c:5d:cb:0e:b1:d7:13:99:8e:cb:5b:7d:ce:
ef:83:c7:94:39:a5:81:ce:f3:fd:e0:cb:6d:69:87:2c:c3:d5:
3a:aa:fb:5f:45:6c:23:8c:df:1a:c4:24:db:ac:85:f1:c8:93:
53:77:d5:e7:ec:d3:20:85:0e:9f:4d:c4:3b:b2:45:f2:b2:d3:
7a:c1:46:36:c1:49:c5:1a:06:e8:58:61:b1:f1:89:82:09:fa:
9a:8b:17:c7:9a:56:8c:7a:73:d7:55:b2:76:63:cf:83:0c:8c:
68:e4:8d:b2:bd:ec:1b:e0:72:22:c1:3d:90:c5:2f:64:1f:63:
fd:a9:94:8d
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZt4NQpUyaTzxXNMx7IQsxr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjczMjAxNjI3NzNjZmZlMjg2NmQ5NzEyYTczOGU0MTk5NTM2MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMpxZfBE1d0xvRG2DKn0mAKMlRZD
UlR9TYd1loDae+lxfJ8n+hdtSJVPaXXIkFI9nWjee5c1vBRupOorKe3aJciWh3Fe
2wEFlwYIdjbj5mf78NAWjCQYa3v84q3BIGm2hCzNY8IXfLb+SpC4zA1b36yLx+DJ
/DfkX3gACpwBEKA66HNJ4wYw5TN1osRYCa95IaCYhEjx6qU5Isgs29lh+32DhdsO
8bAwH5WPDlnYO5ojn2dN5TCkHu20QQqvdNRm4qQJxFF2w5a8jHCsQOEjxLnYlqWr
tZpjB7g0D7wGu2mLu5E+k7XOR9eBAg4tjv07OjqDzdadTWEuckRE/NkRRQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFM9zIBYnc8/+KGbZcSpzjkGZU2EXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQzMDVj
YjNiLThkNGYtNDk3My05MmIyLTk2MmEwZDdlMGRiNy8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDMw
NWNiM2ItOGQ0Zi00OTczLTkyYjItOTYyYTBkN2UwZGI3LzAvQ0Y3MzIwMTYyNzcz
Q0ZGRTI4NjZEOTcxMkE3MzhFNDE5OTUzNjExNy5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDL7gw
DQYJKoZIhvcNAQELBQADggEBAI2RYfbOWBj7+29rs7nH/OF6Yi9QOZDRnZ3sSeXl
vFDlICR3VYbdymln1PiuLeX3Q1rzoQ24dRXef21jKI/NTAHfHC3LpYlDnBZDcKcr
yJUbgChfaWlu/uDDTSMtz9Hlb8kJYuBaXPfT2UpMlr/sRl5cKZVVk/NWTMrRyREs
7DgL0U16XF3LDrHXE5mOy1t9zu+Dx5Q5pYHO8/3gy21phyzD1Tqq+19FbCOM3xrE
JNushfHIk1N31efs0yCFDp9NxDuyRfKy03rBRjbBScUaBuhYYbHxiYIJ+pqLF8ea
Vox6c9dVsnZjz4MMjGjkjbK97BvgciLBPZDFL2QfY/2plI0=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:09:52 2026 by rpki-client