Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
File:                     1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer (raw, json)
Hash identifier:          gILzlX+boa6ldp/YlDNQl8UetsK+pMgQQQJ5XoLVRDo=
Subject key identifier:   D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5CD0131CCDBED6AEAEFEEA2C6575D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:19:53 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 199839
Validation:               Failed, certificate revoked on Wed 07 Jan 2026 13:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:d0:13:1c:cd:be:d6:ae:ae:fe:ea:2c:65:75:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:f0:4a:ae:b3:6a:d3:4b:6a:7c:14:f5:8a:
                    be:23:66:74:1f:ce:d4:f2:d5:05:a9:ca:e7:af:67:
                    15:ec:98:f4:5d:a5:1f:4a:da:e8:3e:e6:68:ac:01:
                    7a:12:1c:d6:49:66:fe:c2:dc:d4:16:c9:ac:61:c2:
                    35:37:42:35:27:63:43:6f:f3:c2:01:1e:e2:0d:fb:
                    ea:cf:72:62:de:a2:07:dd:7c:fa:0e:bd:ac:6b:f0:
                    34:65:c8:95:0d:14:89:c1:0c:2f:a3:7e:bb:d1:98:
                    f2:a3:e6:9b:c3:c0:f5:c4:8c:0b:11:64:e7:5b:b2:
                    65:ec:c5:c6:1b:13:08:85:9a:e3:ac:b0:e8:6f:9f:
                    e6:fb:2f:48:96:a0:53:5d:14:aa:ba:ad:ba:25:7a:
                    d8:3e:42:3e:fb:a3:71:34:22:d0:cc:79:56:19:d7:
                    97:90:18:53:59:e2:99:8b:7d:75:6d:12:da:27:9e:
                    4f:1e:7a:f5:29:bd:53:14:bf:f6:30:40:e5:c9:fb:
                    67:20:fc:86:27:9b:4d:0c:32:9a:75:22:e7:05:90:
                    79:83:96:c0:d6:44:3d:c6:a1:72:47:ed:26:4f:3a:
                    c6:ab:3c:2f:4b:b9:4b:f6:e7:cb:ac:e3:3e:44:73:
                    d1:7a:01:e7:58:4f:db:ee:92:57:6c:d1:b0:80:54:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199839

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:86:07:c1:d7:71:5b:65:14:2e:ae:4d:f9:9f:82:45:bc:
         82:62:36:c9:d3:f4:2c:88:98:32:06:c6:7f:65:a1:fc:88:4e:
         49:19:3d:bf:d8:91:22:ae:f6:b4:8a:7a:c7:89:87:8e:f8:a5:
         a7:15:bf:1d:c8:1d:a9:cd:a5:0b:bb:4d:2b:0b:63:e7:4e:b6:
         61:55:d1:b2:7d:b9:87:f7:dd:1f:19:ef:da:f0:b9:38:55:ca:
         9f:9c:ea:e9:76:c5:43:1b:ba:dd:4b:bc:ba:d4:38:13:6a:4e:
         f8:ed:0b:88:1e:cf:60:be:fc:8d:0a:b1:95:52:4b:4e:c8:f7:
         b1:3c:cd:22:c2:7e:0c:19:1a:7f:fc:cb:ee:6c:8f:1d:b3:b6:
         02:26:c2:50:10:f7:e4:e8:a7:90:10:81:c7:59:1a:f0:34:40:
         c6:f4:03:38:5d:c4:a5:42:bb:65:f9:22:9b:46:3d:2a:f6:f3:
         7b:23:1f:77:77:5d:f0:ed:7f:25:60:4d:c4:7d:47:e1:a4:da:
         84:69:b2:bd:bc:ca:69:fc:97:da:b2:99:a3:39:d7:1d:cb:63:
         54:0f:ba:d0:e6:a7:86:e7:ae:3a:0d:bf:75:30:b9:81:8f:b8:
         15:7c:27:8b:80:48:42:57:61:39:82:6e:4c:89:3f:46:d5:5a:
         bb:c7:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:48:35 2026 by rpki-client