Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
File: YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer (raw, json)
Hash identifier: GHahNUf9G2G7X4Lcby6FzzTBWEpV+4KwsRGSA8T2+2Q=
Subject key identifier: 60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1AC97AB1EA69F42857CD1302A285C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.144.108.0/22
IP: 2a07:3ec0::/29
Validation: Failed, certificate revoked on Thu 21 Dec 2023 15:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:c9:7a:b1:ea:69:f4:28:57:cd:13:02:a2:85:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:dd:f0:03:f9:dd:93:0f:db:3a:d6:80:76:
cc:ac:78:60:64:7b:53:01:ba:bd:d3:91:fa:b6:45:
af:d4:e4:3a:fc:d6:7e:d9:f5:6c:2b:71:fb:12:65:
aa:ec:21:ee:a7:6a:e1:05:f7:28:40:2f:05:83:b3:
f8:77:d4:0f:8d:ae:0d:32:68:5c:f3:47:f1:28:07:
13:f8:7c:8d:23:d9:da:73:c7:56:96:eb:5d:dd:48:
f8:85:42:b4:e4:f9:bb:0a:17:42:11:f8:dc:7e:4f:
31:85:53:38:5f:b6:a2:bc:ef:09:21:ec:bd:3c:1d:
bd:ed:02:de:95:f5:d0:dd:d8:ed:c0:80:81:6d:c4:
3f:80:c5:11:01:b7:6d:1a:9f:b4:46:83:f5:4f:ec:
7e:9c:a8:8e:84:2c:25:18:57:39:5e:de:af:03:10:
a4:fb:9f:d3:e8:64:cb:50:69:e3:d6:a6:77:22:d2:
5d:17:b3:38:83:05:f7:a3:8b:9a:86:b1:90:48:54:
57:ed:ae:93:e2:df:70:2a:8d:81:eb:3d:b1:ae:ee:
bf:5c:4f:fc:99:53:ef:44:63:b9:6e:e2:de:51:16:
45:fd:88:f8:1e:43:72:1c:6c:75:f7:9a:e4:00:0f:
52:88:95:04:76:ec:26:ad:b4:69:1e:a4:a3:21:91:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.108.0/22
IPv6:
2a07:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
70:28:f8:31:af:f3:f6:e4:98:f9:43:51:80:cb:f7:15:b8:94:
5d:a9:0d:4f:73:e6:70:6d:37:03:99:89:bc:6c:24:4c:1b:08:
4c:51:29:ec:47:84:2e:a2:b6:00:0d:2b:fa:fa:32:76:b0:94:
f0:b7:ad:d9:2f:a9:88:f6:80:91:e6:45:06:17:cf:95:d1:4c:
5a:33:aa:78:08:76:d2:de:56:bf:f1:32:e2:cd:70:2f:ee:59:
1d:44:70:29:7d:f4:09:9b:66:01:a1:19:33:85:9b:56:57:c1:
82:10:1b:6a:b4:4b:0f:d6:16:77:9b:84:59:ef:dd:7d:a2:89:
3b:9d:b3:9d:f1:f6:1b:9c:40:fe:ef:51:fd:b7:f0:29:51:4a:
94:12:7c:8a:31:ad:12:63:7a:31:36:21:e0:1c:0c:b9:18:8e:
f4:ed:46:cf:c1:a1:7c:78:41:75:68:d7:e7:03:5b:ab:48:d7:
00:6a:35:37:26:05:91:0a:11:4c:90:46:35:9d:78:02:a9:16:
21:ec:76:10:ed:23:5f:c6:e9:f6:58:80:8e:d2:bf:7a:04:a8:
2c:fc:81:c1:da:5a:af:6e:07:a4:5e:d6:49:66:b5:27:54:22:
ec:e9:87:7a:d0:bb:d3:0b:fa:3f:25:d5:28:4f:fe:78:f7:4f:
71:14:ca:ea
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtGsl6sepp9ChXzRMCooXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGQzYWM0ODI1ZGNhN2VlYzk3MDA1ZGJhM2IwYmZmMjc5MDRmNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8jd8AP53ZMP2zrWgHbMrHhgZHtT
Abq905H6tkWv1OQ6/NZ+2fVsK3H7EmWq7CHup2rhBfcoQC8Fg7P4d9QPja4NMmhc
80fxKAcT+HyNI9nac8dWlutd3Uj4hUK05Pm7ChdCEfjcfk8xhVM4X7aivO8JIey9
PB297QLelfXQ3djtwICBbcQ/gMURAbdtGp+0RoP1T+x+nKiOhCwlGFc5Xt6vAxCk
+5/T6GTLUGnj1qZ3ItJdF7M4gwX3o4uahrGQSFRX7a6T4t9wKo2B6z2xru6/XE/8
mVPvRGO5buLeURZF/Yj4HkNyHGx195rkAA9SiJUEduwmrbRpHqSjIZHOAwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGDTrEgl3KfuyXAF26Owv/J5BPWKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2I0NzY1
Zi1hNjBmLTQzNTYtOTgyYS0xYWZkMjY0OWIyOTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvYjQ3NjVm
LWE2MGYtNDM1Ni05ODJhLTFhZmQyNjQ5YjI5OS8xL1lOT3NTQ1hjcC03SmNBWGJv
N0NfOG5rRTlZby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZBsMA0EAgACMAcDBQMqBz7AMA0GCSqGSIb3
DQEBCwUAA4IBAQBwKPgxr/P25Jj5Q1GAy/cVuJRdqQ1Pc+ZwbTcDmYm8bCRMGwhM
USnsR4QuorYADSv6+jJ2sJTwt63ZL6mI9oCR5kUGF8+V0UxaM6p4CHbS3la/8TLi
zXAv7lkdRHApffQJm2YBoRkzhZtWV8GCEBtqtEsP1hZ3m4RZ7919ook7nbOd8fYb
nED+71H9t/ApUUqUEnyKMa0SY3oxNiHgHAy5GI707UbPwaF8eEF1aNfnA1urSNcA
ajU3JgWRChFMkEY1nXgCqRYh7HYQ7SNfxun2WICO0r96BKgs/IHB2lqvbgekXtZJ
ZrUnVCLs6Yd60LvTC/o/JdUoT/54909xFMrq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:52 2024 by rpki-client on console-ams.rpki-client.org