Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
File: bdAj-z-UyML6I8q4AZRm-hp_UQk.cer (raw, json)
Hash identifier: RMBXpuRZaQNVuHEtSc8yWSR+s226s9SpCSXuu9Kfnzs=
Subject key identifier: 6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BFB429D6C5BE28A3F59E246D81390BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Thu 01 Jan 2026 23:53:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207885
Validation: Failed, certificate revoked on Sat 10 Jan 2026 20:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:fb:42:9d:6c:5b:e2:8a:3f:59:e2:46:d8:13:90:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:53:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:a1:13:1d:4b:cf:8a:9c:1d:03:30:08:01:
23:b7:c4:a2:65:a0:50:2c:dc:f5:9b:54:1d:4c:92:
e6:59:84:8b:33:78:b4:05:54:a0:b5:c1:e6:96:ee:
75:ab:5a:71:2d:8c:8d:d0:3b:c4:14:6f:ce:91:84:
4d:08:cf:c7:61:e8:28:c6:0d:74:77:b6:4b:78:77:
fe:69:62:72:db:cf:85:53:a6:43:65:c5:4c:5e:84:
5d:c7:b6:b6:11:14:93:4a:a2:99:fa:22:c8:d0:fc:
26:a3:eb:01:54:c4:ab:b9:e6:79:d0:1f:06:36:6b:
99:38:dc:71:28:e1:9f:40:fb:16:6f:f5:bb:aa:7c:
97:13:66:88:10:ca:69:27:65:a2:9c:b6:6b:55:0b:
27:bb:70:c9:15:6e:bf:9e:9f:d4:85:66:a3:c1:3f:
eb:84:d9:7c:8d:98:4f:c1:4a:e2:20:d4:bb:46:d3:
26:8d:aa:de:10:e7:74:b4:97:73:72:c0:3b:ab:4b:
42:0d:5e:50:f6:4c:d8:38:74:95:af:75:f1:7d:70:
a4:5b:bf:49:9b:74:74:27:ee:7f:31:eb:c7:89:80:
70:81:e6:18:8c:04:c9:09:c9:27:8b:b3:f2:49:84:
17:97:5f:57:55:42:bd:bb:cd:4b:bf:8a:c9:24:f7:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207885
Signature Algorithm: sha256WithRSAEncryption
a3:fd:d4:40:8a:86:b7:62:27:96:77:25:d1:76:a7:6d:28:d7:
9f:f4:e0:4d:e0:8c:12:d7:63:d3:4f:ba:37:d8:64:c0:89:9c:
f2:e9:a8:78:72:f1:54:8a:da:41:49:72:46:30:9c:01:28:a1:
d0:64:f6:7a:a0:7d:85:08:71:fe:45:7c:22:c8:36:31:f2:bc:
75:63:34:ef:27:d3:7e:40:7f:59:91:fd:d8:4d:c2:44:6c:3f:
25:d6:d4:40:c3:05:0a:dd:9e:b9:27:54:bd:dc:5c:b6:14:2c:
95:cd:a7:ac:37:a3:5f:a6:82:40:4c:0d:c5:00:ee:e2:d4:bb:
8a:23:7a:b1:0f:90:40:2a:ff:df:a4:f6:ec:7b:70:c7:11:68:
59:2c:2a:f3:2a:c5:0f:0f:0a:59:07:11:7a:a3:89:59:8b:a4:
91:01:57:c6:8b:58:fb:8a:c8:1d:45:90:29:9e:45:05:f9:9f:
9a:8a:0f:ac:97:54:ed:5b:20:c9:54:49:1f:83:85:8f:47:35:
6e:06:0f:67:2b:98:8e:56:83:1b:b9:ff:f9:d9:a8:0b:c0:90:
1f:86:b3:1d:fc:21:54:29:b9:50:5d:b4:7a:e1:05:e1:87:3a:
47:06:46:20:c6:ef:16:a1:5f:eb:bd:f6:3c:ec:f3:2f:c1:15:
cc:4d:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:40 2026 by rpki-client