Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YE4h-R5BzgmUoV4sNrq_GVPnJ4o.cer
File: YE4h-R5BzgmUoV4sNrq_GVPnJ4o.cer (raw, json)
Hash identifier: cNMNd9T8tbp1cO34SlIDkLmLa5D7Xu2Ye4s9whEHn9w=
Subject key identifier: 60:4E:21:F9:1E:41:CE:09:94:A1:5E:2C:36:BA:BF:19:53:E7:27:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708B4E6C856DC3949ADBAF3CABFA22DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/YE4h-R5BzgmUoV4sNrq_GVPnJ4o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.205.56.0/24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 15:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:4e:6c:85:6d:c3:94:9a:db:af:3c:ab:fa:22:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=604e21f91e41ce0994a15e2c36babf1953e7278a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:f9:6f:02:e6:e7:f4:e1:a3:fd:58:ec:c8:
14:79:9c:63:45:b1:98:e1:a4:2b:aa:f8:3b:f6:23:
64:2b:e1:b8:17:11:21:ba:ac:c4:33:e2:57:cd:13:
a5:3b:7a:39:42:68:ca:d3:27:e2:f4:59:e5:36:3d:
6d:94:bb:40:8b:f4:44:55:fb:bf:da:13:26:45:aa:
e1:72:d5:f1:b5:68:bc:26:3f:e9:c0:17:9b:55:ac:
7f:09:67:ee:62:82:24:9e:03:2d:19:cd:b5:73:1c:
c8:a3:e7:19:f0:1e:3d:51:2d:f0:40:53:88:40:22:
d6:7b:f5:e0:80:9d:f0:42:c6:32:99:b8:07:94:30:
55:34:18:b5:58:58:d1:59:1d:83:83:23:30:35:da:
dc:2e:c7:ad:d7:22:51:92:0a:e7:c8:5a:a7:f5:af:
d9:0c:80:46:10:29:d0:58:a1:1b:fa:1f:8f:9e:c9:
0d:61:86:56:63:a7:65:9b:c4:3a:5b:9f:7e:18:b3:
9e:2d:16:8d:d4:6b:e7:46:71:ac:54:75:5e:aa:f3:
ed:47:a1:4e:90:77:9c:5e:6a:f4:14:73:34:73:80:
90:d8:3a:f1:af:aa:42:41:c3:f5:f1:74:4f:0f:1a:
0b:f0:26:ff:80:a1:1d:07:6a:8c:db:95:ca:15:74:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:21:F9:1E:41:CE:09:94:A1:5E:2C:36:BA:BF:19:53:E7:27:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/342db7-350f-4014-bf70-7afe04f2670f/1/YE4h-R5BzgmUoV4sNrq_GVPnJ4o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:7e:eb:0d:43:42:58:02:78:c3:97:3d:4e:6d:88:bc:25:4c:
7b:e3:03:c4:e7:65:d1:ce:8c:34:ab:10:c8:0c:d0:cb:a0:62:
a8:cf:69:75:1c:e9:80:e4:e9:f4:80:19:ad:71:56:8e:38:86:
ea:cd:f1:df:17:61:71:f7:e7:04:3c:c8:59:a1:02:43:95:9b:
be:67:66:f2:49:f8:b1:65:82:05:38:23:df:0a:bf:87:63:1e:
34:85:f9:b7:46:6a:b3:ef:ab:c9:00:ac:eb:87:f7:d8:ab:bf:
5e:a5:57:ef:c8:d9:d9:4d:b9:8b:25:89:b5:f1:e6:86:6f:5e:
da:fb:04:7c:dc:3b:36:f2:a5:fb:4b:c7:40:ae:e2:2d:b5:b0:
4f:ec:71:a7:af:01:46:f5:e5:04:45:42:9a:6c:ee:fb:fd:6d:
ed:56:27:4c:a6:35:c2:03:de:41:cf:e9:28:79:75:53:36:1d:
57:1f:c2:ff:59:51:58:2f:75:fe:4e:92:8b:59:a1:a4:0c:ac:
91:58:2d:f3:56:80:2a:10:55:a0:7f:15:40:33:f4:38:a6:90:
aa:79:27:ef:c6:b6:6c:40:16:65:99:67:b8:97:a0:8c:1d:0e:
37:08:95:77:3a:0d:04:05:6c:68:8d:b1:06:f5:ee:62:87:0e:
52:92:74:c7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVwi05shW3DlJrbrzyr+iLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDRlMjFmOTFlNDFjZTA5OTRhMTVlMmMzNmJhYmYxOTUzZTcyNzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6L5bwLm5/Tho/1Y7MgUeZxjRbGY
4aQrqvg79iNkK+G4FxEhuqzEM+JXzROlO3o5QmjK0yfi9FnlNj1tlLtAi/REVfu/
2hMmRarhctXxtWi8Jj/pwBebVax/CWfuYoIkngMtGc21cxzIo+cZ8B49US3wQFOI
QCLWe/XggJ3wQsYymbgHlDBVNBi1WFjRWR2DgyMwNdrcLset1yJRkgrnyFqn9a/Z
DIBGECnQWKEb+h+PnskNYYZWY6dlm8Q6W59+GLOeLRaN1GvnRnGsVHVeqvPtR6FO
kHecXmr0FHM0c4CQ2Drxr6pCQcP18XRPDxoL8Cb/gKEdB2qM25XKFXR3wQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGBOIfkeQc4JlKFeLDa6vxlT5yeKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzM0MmRi
Ny0zNTBmLTQwMTQtYmY3MC03YWZlMDRmMjY3MGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMzQyZGI3
LTM1MGYtNDAxNC1iZjcwLTdhZmUwNGYyNjcwZi8xL1lFNGgtUjVCemdtVW9WNHNO
cnFfR1ZQbko0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAbc04MA0GCSqGSIb3DQEBCwUAA4IBAQCcfusN
Q0JYAnjDlz1ObYi8JUx74wPE52XRzow0qxDIDNDLoGKoz2l1HOmA5On0gBmtcVaO
OIbqzfHfF2Fx9+cEPMhZoQJDlZu+Z2bySfixZYIFOCPfCr+HYx40hfm3Rmqz76vJ
AKzrh/fYq79epVfvyNnZTbmLJYm18eaGb17a+wR83Ds28qX7S8dAruIttbBP7HGn
rwFG9eUERUKabO77/W3tVidMpjXCA95Bz+koeXVTNh1XH8L/WVFYL3X+TpKLWaGk
DKyRWC3zVoAqEFWgfxVAM/Q4ppCqeSfvxrZsQBZlmWe4l6CMHQ43CJV3Og0EBWxo
jbEG9e5ihw5SknTH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:50 2024 by rpki-client on console-ams.rpki-client.org