Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
File: r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer (raw, json)
Hash identifier: RUJL7OtwKXRT2Y+ls4ASm1/hUo1yP2mzGhtbSr1nGSg=
Subject key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE3BAF6B0CE1D9D08BBFC4B86BF388
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50225
Validation: Failed, certificate revoked on Fri 02 Jan 2026 07:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:3b:af:6b:0c:e1:d9:d0:8b:bf:c4:b8:6b:f3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afff13a67f225c3c2a606658c23965b8191d4008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:22:d7:ee:f5:b9:6c:dc:cb:03:86:3c:f1:
c5:0c:fe:96:d2:b2:5b:cc:41:49:6d:07:5d:19:a5:
50:67:31:d5:57:ad:15:12:59:eb:c8:f3:1b:46:58:
52:55:8a:03:6b:89:7c:86:81:96:25:dc:06:f2:61:
ce:9f:85:21:89:c8:c8:26:85:d3:ad:94:89:76:6f:
5e:2e:d6:f4:34:3e:c7:5a:b4:5a:ea:73:bd:3a:aa:
c3:2a:77:08:23:6b:0d:1b:33:1d:dc:eb:c5:c4:08:
4b:13:b5:2f:2d:60:62:f8:89:8f:b6:21:c0:22:61:
bf:87:07:e8:d6:60:b6:4e:d2:be:89:9d:0b:67:b6:
4b:67:f9:17:48:61:f9:08:5f:24:ff:b7:e7:fc:0d:
c4:65:48:09:b4:29:d2:6d:4d:51:1e:2b:6b:16:12:
86:4f:ee:39:4e:88:0a:2b:70:16:06:00:5f:63:36:
c2:ac:fb:49:7e:df:9c:af:15:d2:fc:b0:bd:34:5e:
b3:ef:2d:df:27:99:87:21:cf:48:ef:da:37:64:f2:
3a:9d:e9:4c:19:5a:a9:6f:fc:8f:11:4e:89:83:59:
51:24:57:27:50:27:14:7f:fa:0b:b1:50:ed:b3:50:
f7:b3:6c:25:4e:02:36:64:da:66:dc:25:c4:24:cc:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50225
Signature Algorithm: sha256WithRSAEncryption
64:90:3f:b4:62:48:a4:f8:28:2a:db:f3:aa:39:1d:fb:f9:f5:
60:81:55:df:53:31:1f:7d:f0:99:25:dd:a8:30:fa:9b:24:52:
2c:74:06:5c:0f:87:2f:00:6e:ee:9e:8d:32:5e:87:1c:55:06:
1f:32:8d:10:9f:d1:0e:b9:bb:a4:78:a3:7d:9a:7e:03:e7:cc:
76:a2:df:a2:ef:fe:3f:09:ab:f9:76:42:8d:c9:28:55:62:f1:
11:9f:f4:67:c7:c0:9a:b1:1d:3e:b8:fc:b9:3e:a1:cd:05:bf:
cd:0a:49:cd:c2:b6:2d:16:e6:c7:30:fd:f7:6f:f8:db:11:7c:
d8:4f:89:b0:47:88:a1:18:14:3d:07:db:b4:e9:82:97:79:95:
b0:4f:49:8c:33:fb:b1:75:3c:c9:60:87:a8:1c:6e:c5:ef:36:
5c:9e:86:99:89:83:02:e9:c4:1f:59:81:f7:06:a2:4a:5c:51:
78:5b:fc:72:4d:c1:f6:98:fa:b2:2e:a6:c6:b1:5d:a3:f6:27:
7b:bc:7b:31:17:ed:f5:99:ca:65:6e:71:6e:1a:25:81:dc:f4:
6a:55:30:5c:6d:7c:97:54:3e:ba:0b:45:ad:44:10:13:6e:3b:
dc:3f:9a:42:58:e5:a6:02:64:f6:b0:bc:3e:fa:ed:2b:1b:1a:
9c:64:d3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:24 2026 by rpki-client