Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
File:                     BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer (raw, json)
Hash identifier:          os/wmVwEK565fuz24uRtLyK2HG2pcKfcWfgYwKkYImk=
Subject key identifier:   04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B76EBA087B8EF3E1CB299C763BAAB8DB4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:18:32 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 51791
Validation:               Failed, certificate revoked on Fri 06 Feb 2026 09:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:a0:87:b8:ef:3e:1c:b2:99:c7:63:ba:ab:8d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:be:bb:79:a9:a8:07:7f:e1:29:f1:1c:ca:
                    a4:07:f7:30:60:2a:ec:4b:89:38:c3:cd:ee:25:8b:
                    1a:e0:13:d4:b7:ca:92:d2:1c:5e:1f:71:00:01:06:
                    7e:1e:1e:c7:81:10:bb:b3:3a:53:69:1c:fa:82:c0:
                    a9:b4:63:28:75:80:4d:1b:00:41:5c:2d:2f:cb:f6:
                    42:32:ac:0c:56:ea:3e:2d:b0:af:16:c4:ce:bd:c8:
                    37:c1:eb:74:8f:eb:d4:f8:8c:89:17:9f:30:e2:fa:
                    02:03:c8:34:0d:4a:b2:e3:c2:c9:d2:ed:7d:17:55:
                    c4:ac:f5:0f:5e:27:fe:35:a9:b0:c5:7c:04:60:64:
                    ee:45:33:a8:28:dd:32:9b:89:e1:dc:5d:1f:f4:ca:
                    7d:ad:f3:38:b2:ce:c1:94:1d:42:b1:51:bb:be:05:
                    0f:da:3e:f0:4f:8a:d6:87:21:46:4b:e8:0a:de:d6:
                    14:88:31:b6:10:b9:e0:b8:45:d1:06:21:0c:af:d3:
                    83:9e:e5:7c:4b:cb:9b:9d:d2:b8:30:c9:22:8b:62:
                    9f:02:33:f4:4c:cc:b1:20:ff:ad:7a:12:aa:1d:9b:
                    4d:c0:c0:d6:ed:66:82:b7:57:69:72:72:49:8b:48:
                    e9:f8:04:f1:4a:cb:af:44:04:e4:b0:2c:ce:09:cd:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51791

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:9e:52:a6:f9:05:bb:a7:a3:96:09:0e:94:3a:7f:94:2c:
         66:ad:3f:45:39:a5:7e:04:c3:1f:00:24:20:97:f3:dc:c3:a9:
         63:d8:5e:7e:8b:25:1b:5d:40:62:74:15:de:9b:16:3e:2c:ce:
         3e:c6:f1:a4:21:2f:14:ae:6a:a1:3d:6d:b2:94:30:f6:64:ee:
         5d:ae:12:f0:22:f5:72:6e:f6:d2:8a:f1:46:85:87:d8:48:0b:
         9f:d3:9d:1b:8e:fa:cc:34:36:d3:91:e7:9f:9b:be:be:f9:ec:
         60:a5:99:89:95:09:a7:aa:54:13:74:19:6f:81:62:3e:b1:c9:
         03:f4:9a:d7:98:3a:95:f7:9a:12:2c:82:f2:ca:8d:d3:c7:93:
         c2:ae:82:0e:24:16:b2:f2:8a:fc:d4:83:47:60:bc:f2:78:1e:
         fd:54:03:81:8f:e7:ac:34:ac:69:87:8c:92:fd:0e:83:d9:86:
         74:1b:eb:e2:2c:69:95:d3:21:ea:bf:7e:09:5b:83:1d:26:6c:
         98:f8:b2:ff:bb:08:80:e1:39:c4:c6:c1:71:30:35:1c:74:73:
         00:de:4c:f2:80:47:89:43:9b:4b:cf:96:2d:7c:a1:e3:bd:b2:
         b2:b0:26:73:58:69:78:e0:c0:e1:0f:54:25:b4:52:c0:da:fa:
         13:83:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 14:57:13 2026 by rpki-client