Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
File:                     3pj4NjKYKX-6uupodyArXEQOWpA.cer (raw, json)
Hash identifier:          oWBP1k3NeJQVDz2b53RrOucoDEiCJGjlE0q7PDmn5mo=
Subject key identifier:   DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA3E38F01D221E1DE1C970849DC9BE9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:18:16 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 212756
Validation:               Failed, certificate revoked on Wed 04 Feb 2026 13:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:e3:8f:01:d2:21:e1:de:1c:97:08:49:dc:9b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=de98f8363298297fbabaea6877202b5c440e5a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:df:5c:b4:06:29:74:33:f3:be:fe:8b:df:
                    5a:e5:ed:5d:9c:5a:34:88:c0:3f:ee:33:bd:18:66:
                    04:6d:d1:40:cc:a6:9b:de:ee:3f:32:1d:a7:88:b1:
                    92:23:bf:15:15:1b:89:35:da:83:ee:79:7e:a2:93:
                    56:02:23:7a:58:0e:35:2b:a0:aa:4b:cf:af:25:e7:
                    7b:6a:76:4b:47:b5:1b:7c:b4:9c:5f:83:e8:25:d3:
                    60:df:d4:b8:b7:2e:ec:f4:c2:e8:32:b2:41:2f:ff:
                    e7:be:d6:ab:d7:dc:bb:78:7c:2a:2f:23:10:58:2b:
                    ef:51:ec:5d:78:7b:2c:cd:fd:0f:1b:4b:aa:6d:a5:
                    2f:22:df:6b:92:09:a2:81:23:ea:8c:fb:32:c0:aa:
                    62:26:0a:57:cf:6c:7c:ec:c1:8a:e4:93:e2:d1:b3:
                    7d:3b:0f:37:18:0f:6d:88:f1:89:3f:a4:b0:7a:05:
                    79:ad:c6:b3:8e:85:a1:6f:05:9e:d3:3c:2a:31:f3:
                    de:d7:79:cd:0f:a7:70:b1:83:ef:a4:98:aa:af:62:
                    28:21:15:a6:0a:52:5d:91:87:50:25:ba:0c:30:a1:
                    e3:42:e0:ff:e3:40:ee:51:54:17:49:3a:17:64:5e:
                    a5:9c:79:8d:bb:de:41:68:4b:b9:bf:4d:62:7d:11:
                    c8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212756

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:9d:ea:28:be:78:5a:d4:c6:d9:54:ce:59:14:d2:a0:84:
         e6:d1:be:78:74:49:52:f2:b2:06:27:28:75:e5:c4:d1:4d:d2:
         4c:ef:36:7a:c3:a4:96:29:dd:99:20:40:96:47:64:07:86:2c:
         db:58:be:f7:32:e9:f8:0d:98:5a:e6:0c:50:a1:b3:6d:b2:c1:
         da:a5:f9:24:c2:5d:78:a1:41:cc:c2:7c:ce:69:05:a5:88:52:
         94:24:bf:53:fd:15:b3:5c:3d:0f:45:13:aa:2a:9e:f4:08:cb:
         60:29:ae:9f:31:84:e2:08:ed:31:0e:68:f7:ce:a2:f8:8e:5f:
         c5:3f:3f:fc:d9:59:10:0c:48:b2:b2:1a:55:d6:3b:19:e5:40:
         75:68:b6:06:1f:b7:82:30:cc:74:cd:90:b1:0a:fc:f1:6d:d0:
         d4:2b:24:ef:06:11:17:21:7e:99:30:de:cc:3d:28:da:7d:dd:
         71:85:66:0d:76:56:4e:f1:7d:1d:5b:93:cf:88:47:af:19:66:
         34:34:b4:a5:17:0b:63:ef:fa:06:c1:24:05:e7:39:dc:32:1d:
         21:60:d2:95:32:f1:3a:14:db:b0:00:e4:e7:10:95:58:93:92:
         6b:00:f4:4b:9c:dc:45:57:18:1d:a0:92:00:84:e1:bd:99:03:
         fd:0c:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:57 2026 by rpki-client