Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
File:                     A2G_1FDhLplUBKROs3ovnkK_4Hw.cer (raw, json)
Hash identifier:          1ksGphP6qBr4EyRIQAGIQOYpmAb+2vSUN7CgJh9r6O8=
Subject key identifier:   03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7B3689B3901B4CDC5215E00A4852B805
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 20:18:50 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214880
Validation:               Failed, certificate revoked on Tue 03 Mar 2026 08:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:89:b3:90:1b:4c:dc:52:15:e0:0a:48:52:b8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:26:48:53:13:45:e0:52:b0:29:b6:86:50:e4:
                    d0:39:8a:3b:4d:e7:9d:24:06:72:ff:d7:19:87:fe:
                    0e:b8:e8:da:8a:87:6e:dd:98:eb:cb:c7:06:69:99:
                    d6:44:cc:3d:3d:a5:ed:90:92:9c:4a:ef:4a:04:b6:
                    24:9a:92:a6:5f:52:39:4e:b2:ba:db:fe:86:af:e7:
                    77:b5:4c:44:c5:62:c7:34:d4:24:ab:a2:0c:67:f5:
                    08:8c:4b:73:5e:ee:39:21:a5:74:91:47:ab:97:21:
                    e2:9b:f9:99:4c:2b:2c:78:c4:a4:0d:93:96:a5:de:
                    01:d5:8f:5a:a3:fd:2f:15:d2:37:fa:03:82:b9:22:
                    03:c9:91:fe:fe:00:e5:a8:33:c2:81:f3:1a:2d:8e:
                    02:d2:fa:68:cf:0b:f3:bc:67:75:35:64:6f:2d:d0:
                    1c:ea:fe:70:3e:e4:6e:21:b8:71:e9:18:28:c9:3e:
                    f0:3c:bb:89:68:ca:87:fb:45:a4:66:0f:c3:e0:20:
                    f0:10:16:1c:27:55:89:52:1a:95:90:59:60:d9:2e:
                    69:ac:f7:bc:27:c6:aa:67:51:e2:f7:42:57:26:de:
                    34:f2:81:b1:8d:de:cc:a0:72:6c:cb:71:71:87:5a:
                    43:c8:ab:4b:60:d1:14:c2:8b:b5:18:be:0d:3b:b0:
                    7e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214880

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:e8:c1:62:f8:e1:9c:4d:9c:ff:99:7d:ca:fd:44:8a:8a:
         e4:b6:fa:c7:74:6b:99:ae:9e:0a:56:5e:b9:7f:0d:44:55:10:
         dd:20:72:9f:6d:6e:8b:47:f9:c0:95:ed:6b:e9:9a:51:fa:5e:
         dd:02:f4:15:4c:86:a7:3e:f8:a9:72:99:89:d2:24:4b:48:48:
         da:68:2b:a6:d5:f8:b4:48:67:d2:bf:d3:33:3d:0b:c2:dd:00:
         22:df:3a:f6:13:bc:21:9b:c8:d4:cf:74:f9:be:4b:d1:a6:49:
         5b:86:21:cf:4d:13:d2:8b:d1:90:94:1d:9b:c1:b8:d0:16:f5:
         f9:4e:e0:88:d5:90:40:50:d0:e9:0c:a2:23:94:01:b5:25:ce:
         a3:53:c9:df:49:00:42:80:db:da:84:55:9d:fc:f3:f3:5a:bd:
         2a:29:08:f2:78:fa:c0:87:20:15:99:3c:0e:8b:4a:e5:27:9d:
         f5:12:f5:b4:31:04:eb:eb:d8:67:f0:96:aa:15:46:fc:68:27:
         b7:f5:4f:18:fe:d1:63:b0:46:14:27:98:2b:50:78:50:06:a0:
         ca:d7:c3:c4:c6:72:df:a7:dc:aa:d9:f6:54:1b:35:a1:20:77:
         58:26:1b:8e:d3:a1:73:74:49:b5:22:db:98:f7:b7:b1:ed:96:
         06:36:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:01:04 2026 by rpki-client