Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y1-cq3GebNb8JAQRRShxiXBup_w.cer
File: Y1-cq3GebNb8JAQRRShxiXBup_w.cer (raw, json)
Hash identifier: jrfN8zv5Nd8tBdmRdzBh3YDmbWN382v99wMRldlmBcY=
Subject key identifier: 63:5F:9C:AB:71:9E:6C:D6:FC:24:04:11:45:28:71:89:70:6E:A7:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187085D37E89A929231C252229E30AB89A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/dd6507-60a0-4136-b939-ff7c34bc3bd8/1/Y1-cq3GebNb8JAQRRShxiXBup_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/dd6507-60a0-4136-b939-ff7c34bc3bd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Mar 2023 08:08:59 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 83.138.8.0/21
Validation: Failed, certificate revoked on Fri 24 Mar 2023 13:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:5d:37:e8:9a:92:92:31:c2:52:22:9e:30:ab:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 22 08:08:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=635f9cab719e6cd6fc24041145287189706ea7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:3a:81:57:e8:a4:05:25:fa:f9:d6:69:2b:
c3:83:35:87:cf:09:22:44:3b:49:68:2d:6a:26:f7:
13:9a:95:70:6b:3b:48:99:6c:a5:96:54:a0:17:43:
57:fb:7b:24:f5:46:10:13:a8:cb:b1:bc:e4:b4:29:
3a:d1:fb:ef:ce:cd:01:37:3c:ed:40:10:8c:d1:95:
50:18:49:85:e7:98:67:f1:86:ff:54:d3:9b:48:ed:
e0:4b:cf:64:63:66:33:c5:02:82:49:51:89:46:e2:
e0:de:ec:18:21:b2:bb:63:b2:b5:03:ad:3c:58:e8:
61:50:7e:ed:8d:9e:ea:a5:b6:16:e6:22:51:48:0a:
7d:76:da:1a:f7:06:e8:0e:e5:f9:8d:32:c4:d1:5e:
23:e9:0f:ed:2f:9d:f4:f4:29:f5:eb:21:aa:2f:21:
22:64:c0:22:44:b6:09:e7:65:cf:60:80:55:fb:36:
3f:2d:d3:b2:1e:00:05:57:97:19:92:c5:f8:a3:48:
70:40:e2:89:93:ca:5a:bf:a6:a5:00:9f:29:df:6d:
56:91:16:a1:6f:45:d6:82:da:b1:e8:00:c4:a4:13:
2e:65:19:87:12:72:61:e5:20:d1:36:4a:3f:69:db:
c7:92:9a:49:e5:0a:df:9d:2a:d0:4e:bf:e9:f2:45:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5F:9C:AB:71:9E:6C:D6:FC:24:04:11:45:28:71:89:70:6E:A7:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/dd6507-60a0-4136-b939-ff7c34bc3bd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/dd6507-60a0-4136-b939-ff7c34bc3bd8/1/Y1-cq3GebNb8JAQRRShxiXBup_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:1f:67:dc:34:c6:d0:4d:33:1b:80:2d:f3:97:8c:17:8a:74:
08:d1:f8:fd:5f:64:de:09:79:9f:23:49:67:ee:d0:88:9a:08:
1e:00:9b:49:1a:50:65:c1:14:20:49:c8:85:b1:90:48:21:a6:
8c:23:18:e1:ef:72:79:15:31:6d:5d:94:c8:c4:2f:f6:15:c6:
2f:f7:29:64:41:0c:b5:c4:dd:f3:88:36:b8:be:d9:e6:2b:e1:
d7:9e:9b:3b:c2:64:9c:73:3f:9f:23:e3:bf:49:78:c0:47:a8:
51:42:d7:99:a4:d8:48:31:85:76:35:14:98:14:6e:43:f9:09:
e7:3a:e7:fa:4a:2e:95:32:1c:99:f7:f4:a5:2b:ec:f3:85:29:
86:27:ab:2f:d6:36:b4:05:46:aa:ee:7b:72:53:25:8a:1a:d5:
36:1c:96:f9:e8:bc:79:99:15:5f:b2:88:8e:02:31:ec:4e:e1:
2c:68:51:8b:96:9c:4e:b1:56:2a:f8:6b:55:46:8e:3d:aa:be:
de:9b:ed:56:f8:81:d8:41:20:a4:99:4d:a3:5e:e7:2f:cb:93:
9e:bc:dc:60:98:3b:b5:07:f7:0e:aa:3d:06:3b:50:ab:e5:23:
1d:7a:d3:11:66:51:96:62:64:1b:ca:d4:de:fe:8d:3d:0d:50:
d0:51:a4:f1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYcIXTfompKSMcJSIp4wq4mnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzIyMDgwODU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzVmOWNhYjcxOWU2Y2Q2ZmMyNDA0MTE0NTI4NzE4OTcwNmVhN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu86gVfopAUl+vnWaSvDgzWHzwki
RDtJaC1qJvcTmpVwaztImWylllSgF0NX+3sk9UYQE6jLsbzktCk60fvvzs0BNzzt
QBCM0ZVQGEmF55hn8Yb/VNObSO3gS89kY2YzxQKCSVGJRuLg3uwYIbK7Y7K1A608
WOhhUH7tjZ7qpbYW5iJRSAp9dtoa9wboDuX5jTLE0V4j6Q/tL5309Cn16yGqLyEi
ZMAiRLYJ52XPYIBV+zY/LdOyHgAFV5cZksX4o0hwQOKJk8pav6alAJ8p321WkRah
b0XWgtqx6ADEpBMuZRmHEnJh5SDRNko/advHkppJ5QrfnSrQTr/p8kXDGQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGNfnKtxnmzW/CQEEUUocYlwbqf8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2RkNjUw
Ny02MGEwLTQxMzYtYjkzOS1mZjdjMzRiYzNiZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvZGQ2NTA3
LTYwYTAtNDEzNi1iOTM5LWZmN2MzNGJjM2JkOC8xL1kxLWNxM0dlYk5iOEpBUVJS
U2h4aVhCdXBfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDU4oIMA0GCSqGSIb3DQEBCwUAA4IBAQBKH2fc
NMbQTTMbgC3zl4wXinQI0fj9X2TeCXmfI0ln7tCImggeAJtJGlBlwRQgSciFsZBI
IaaMIxjh73J5FTFtXZTIxC/2FcYv9ylkQQy1xN3ziDa4vtnmK+HXnps7wmSccz+f
I+O/SXjAR6hRQteZpNhIMYV2NRSYFG5D+QnnOuf6Si6VMhyZ9/SlK+zzhSmGJ6sv
1ja0BUaq7ntyUyWKGtU2HJb56Lx5mRVfsoiOAjHsTuEsaFGLlpxOsVYq+GtVRo49
qr7em+1W+IHYQSCkmU2jXucvy5OevNxgmDu1B/cOqj0GO1Cr5SMdetMRZlGWYmQb
ytTe/o09DVDQUaTx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:40 2024 by rpki-client on console-ams.rpki-client.org