Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
File:                     ge84bpUp6_89_qsXonx5OCPNPVU.cer (raw, json)
Hash identifier:          G0Hf8Lwol5DV24Ct8GDO6cwnqnW2IghVqlhFUCFwlQc=
Subject key identifier:   81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5AFDE47205CCB8B58EE1A7A1EE24DD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:17:53 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 198086
Validation:               Failed, certificate revoked on Tue 27 Jan 2026 17:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:fd:e4:72:05:cc:b8:b5:8e:e1:a7:a1:ee:24:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:11:00:22:6c:2e:a6:6b:a3:74:43:d2:fe:
                    3b:71:89:33:97:59:7d:87:94:2f:3e:79:79:68:b0:
                    75:70:4f:e8:95:72:81:3c:1a:f9:f0:3c:f7:39:58:
                    da:15:16:8f:6d:a3:e5:69:ed:9b:9a:77:ef:56:39:
                    00:d4:35:20:79:c3:48:f1:be:1d:d4:a6:a3:93:19:
                    ea:1d:8a:45:73:98:3a:32:fe:a1:b4:ae:4c:2f:b3:
                    cf:11:87:e2:cc:58:82:b1:f4:08:12:db:a5:9e:39:
                    1f:2d:e4:1a:36:64:23:65:fd:2f:dc:fa:a7:c9:d4:
                    f5:b2:ba:82:c8:b0:34:cc:73:87:c8:a0:42:ec:57:
                    aa:5f:f9:f1:94:71:69:f3:dc:11:f2:ec:ca:16:c0:
                    ee:2c:3c:29:5b:10:8f:61:af:9d:6c:12:24:92:2d:
                    71:f4:06:7f:e6:06:49:79:34:f6:e4:04:14:9b:1e:
                    79:03:b4:02:0f:b2:1f:b1:ea:79:28:e8:1b:84:ab:
                    cc:10:98:e3:91:7f:8d:bd:a5:c0:47:27:93:60:d2:
                    ec:9c:09:1a:98:81:dc:f8:64:ba:3c:61:6b:fb:42:
                    12:ec:6d:19:45:7d:d6:a6:b8:cb:06:9c:05:d8:01:
                    e0:c9:74:76:fd:e6:0d:39:c2:57:7f:68:ef:29:b6:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198086

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:e7:d0:f6:94:ca:ac:c9:b0:22:6f:b5:a7:1d:ec:b1:1c:
         92:2d:06:80:98:f7:b1:d2:1f:fc:82:f0:77:0b:90:ee:ad:6e:
         0d:07:4f:84:c0:b9:e1:94:f3:33:a0:a3:11:3c:35:a1:2a:bc:
         bc:34:c5:00:0d:87:57:20:63:e5:25:24:8c:37:40:28:d8:4d:
         ca:38:00:9b:05:ee:01:8b:ab:a6:59:02:06:6f:f3:f9:45:62:
         1e:16:ab:bf:a8:d7:f2:0e:04:16:a6:e7:0a:a3:01:52:90:6d:
         f4:49:27:77:8f:89:80:e8:79:92:fe:34:db:30:57:80:34:15:
         98:ea:02:08:4b:f6:f9:ee:3c:22:d5:df:0a:4c:8b:4f:85:f5:
         38:c1:0b:af:25:63:37:a3:e2:ab:39:eb:5a:7b:5b:3f:38:07:
         f1:b4:6a:cf:58:a4:0c:f5:dd:3f:5f:a1:ee:2c:b3:5d:4e:dd:
         e6:2e:b0:66:e2:3d:a1:9b:87:2a:b3:2e:7a:11:a8:c1:3a:bf:
         6e:60:52:a2:a0:81:41:f1:2b:93:28:13:03:eb:3f:77:1a:03:
         10:27:93:2c:1b:93:70:1a:98:82:03:8a:a5:6e:9b:71:ae:9a:
         6c:c0:00:3d:29:b5:f5:f6:cc:dd:1d:aa:28:74:21:69:9d:c6:
         6d:99:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:33 2026 by rpki-client