Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Sr03aL8AfjhR5MISwrMiWWncWw.cer
File:                     6Sr03aL8AfjhR5MISwrMiWWncWw.cer (raw, json)
Hash identifier:          mn8KGqW3JrmfNrlIL4dI1n2vv5Ki32uxGJV8pWUWc/g=
Subject key identifier:   E9:2A:F4:DD:A2:FC:01:F8:E1:47:93:08:4B:0A:CC:89:65:A7:71:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019D23E8ECAB6A351E4A31FD3F770C50985F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/6Sr03aL8AfjhR5MISwrMiWWncWw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 25 Mar 2026 07:32:40 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213279
                          IP: 194.62.114.0/24
                          IP: 2a14:b400::/29
Validation:               Failed, certificate revoked on Fri 27 Mar 2026 15:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:23:e8:ec:ab:6a:35:1e:4a:31:fd:3f:77:0c:50:98:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 25 07:32:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e92af4dda2fc01f8e14793084b0acc8965a7716c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:ac:de:ba:4a:a2:78:33:c1:52:21:b6:d9:
                    15:3a:12:66:29:b2:85:b8:60:d0:0f:de:80:62:26:
                    d0:66:3d:2f:3a:aa:9c:ce:e7:e3:8e:6b:23:f3:ff:
                    2c:33:4e:70:32:e0:a5:ce:31:ca:8a:c8:4a:20:8c:
                    60:5a:b6:e8:50:69:cd:62:9a:77:45:2f:6c:ab:92:
                    0e:99:43:9a:b0:d9:65:b7:99:ca:f2:45:32:69:ee:
                    a5:d1:4a:83:70:df:c0:97:54:ef:b8:c2:4c:1f:07:
                    f3:21:7e:53:f8:a8:2c:8b:11:9d:ce:a5:26:d7:78:
                    c2:0b:be:51:1a:e0:bf:f7:9e:93:7f:e2:f6:27:4d:
                    a0:2f:47:80:63:80:fc:47:00:70:fd:67:e9:3b:b3:
                    98:53:b3:ea:2d:41:1a:15:1a:28:f6:18:75:53:99:
                    b5:56:ac:75:de:ba:99:46:0d:2c:35:da:c2:61:49:
                    3d:9f:1a:4e:3a:3d:5a:97:58:8e:8a:67:2e:59:1d:
                    16:ff:c0:65:89:91:e3:0e:b1:5e:13:4f:22:ef:05:
                    0d:1e:37:85:c4:e8:02:83:ec:29:c9:77:9d:d4:89:
                    f4:aa:64:42:bd:29:0a:fe:a4:d8:72:bd:97:c5:e0:
                    c4:4c:36:3a:d8:28:0b:62:d0:30:5a:c2:d8:10:3e:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2A:F4:DD:A2:FC:01:F8:E1:47:93:08:4B:0A:CC:89:65:A7:71:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/6Sr03aL8AfjhR5MISwrMiWWncWw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.114.0/24
                IPv6:
                  2a14:b400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213279

    Signature Algorithm: sha256WithRSAEncryption
         6e:59:26:3e:47:59:47:2a:5a:39:67:b3:7f:84:dd:68:f3:fe:
         44:5d:9c:39:a9:4b:01:ea:58:08:3d:bd:90:40:ab:6a:ce:ac:
         ee:f2:e1:fc:94:26:82:ba:ea:ad:1c:02:4d:e0:12:73:17:3b:
         ef:3a:29:25:94:58:8c:a2:2c:4b:25:dc:4f:75:d4:b0:3d:a0:
         4a:a5:1e:17:1b:0e:01:ca:cb:e8:9b:e8:91:3a:35:01:d4:ff:
         2c:08:e2:a8:a6:45:f5:f8:47:e9:f6:9e:32:7f:24:db:56:3a:
         03:10:5b:a1:67:d9:bc:d3:f4:ac:61:4d:6c:e6:d5:87:ac:7c:
         d6:fa:66:ba:37:c9:7a:f1:71:ca:a2:10:a0:17:60:59:48:e8:
         24:06:e5:c5:c0:9b:4e:34:2f:42:0a:9d:7a:35:d7:c1:1d:d5:
         0e:fe:36:8d:d2:f4:4f:6e:d1:30:be:97:88:9e:4c:28:65:4f:
         ec:9e:16:d4:dc:04:c7:48:d1:48:34:2d:e9:30:56:0a:25:7b:
         0b:c6:ce:17:42:b2:6d:93:55:2e:d8:a3:27:ac:2a:c8:01:af:
         39:89:fb:cf:6c:40:38:ec:ce:ae:f4:53:59:19:c1:92:78:68:
         ce:7a:3a:f3:c1:e9:7c:d0:10:18:5a:75:e0:8d:00:84:8b:e3:
         80:4b:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:37 2026 by rpki-client