Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YPZuVPaUvOfjLIoyYTblwoOjhJg.cer
File: YPZuVPaUvOfjLIoyYTblwoOjhJg.cer (raw, json)
Hash identifier: 0HS1Zo8dcmax0WQv1RIMzPQuRq2apoXuEYSEr3LFrDE=
Subject key identifier: 60:F6:6E:54:F6:94:BC:E7:E3:2C:8A:32:61:36:E5:C2:83:A3:84:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701CD7CA58EA7D997137991BD26811BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/YPZuVPaUvOfjLIoyYTblwoOjhJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:33:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.132.0/24
IP: 2a12:ad00::/29
Validation: Failed, certificate revoked on Fri 17 Nov 2023 07:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1c:d7:ca:58:ea:7d:99:71:37:99:1b:d2:68:11:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:33:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60f66e54f694bce7e32c8a326136e5c283a38498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:16:20:26:53:d3:77:db:e3:b1:0f:1f:82:
90:b8:ae:2f:d2:eb:2e:89:fa:d3:7a:b8:91:71:b7:
6b:03:50:b4:7c:a4:90:3f:d3:3f:df:7c:c9:2c:03:
f4:c4:84:08:f2:64:60:98:10:a4:17:92:f6:8e:73:
33:e8:19:0d:a1:02:ea:69:ee:58:8d:06:9b:7f:4b:
e8:74:da:09:d4:42:cf:87:4f:e7:fc:0c:a9:91:4a:
2a:27:17:d6:24:34:e8:44:9a:05:46:1b:30:57:31:
34:1a:d3:26:b4:e3:3f:8d:68:9f:37:71:c8:db:f4:
4e:90:0e:85:08:d0:83:f5:13:f3:76:10:17:c4:60:
07:a2:55:0e:7b:ff:05:b3:94:14:03:fe:79:2c:35:
fb:00:60:b6:33:dd:a5:a2:6a:9e:29:16:bb:2a:26:
fd:47:6e:ca:ef:9d:57:80:de:d8:ae:16:56:15:40:
32:e2:d4:fd:d4:76:81:0b:4c:26:ff:4a:8f:06:6c:
e0:de:2c:ab:03:2d:00:11:cc:5a:8c:66:14:39:48:
b4:f5:d7:39:4e:c3:3d:a2:f8:0a:6a:80:c7:7d:0e:
88:4a:9e:b1:f6:06:2e:5c:d8:b8:7c:2e:1e:09:7c:
72:94:33:de:c2:2d:39:6b:a1:a0:13:83:0e:eb:67:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F6:6E:54:F6:94:BC:E7:E3:2C:8A:32:61:36:E5:C2:83:A3:84:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/YPZuVPaUvOfjLIoyYTblwoOjhJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.132.0/24
IPv6:
2a12:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
59:ad:e5:f8:c1:3d:eb:f1:5b:a9:20:a3:e6:ed:07:14:dc:d2:
5d:58:a9:6c:f3:8a:3a:b9:e7:d2:aa:04:fb:2b:8d:5d:8f:91:
de:84:21:0e:ff:bd:68:37:f8:93:49:fb:94:75:bc:dc:24:72:
11:30:4b:48:9c:b1:69:b8:37:e1:0e:b1:69:87:f0:ae:75:13:
c5:0a:db:0e:e5:95:0c:87:42:c7:03:e4:f3:7c:73:78:b0:6e:
28:a4:26:06:5b:d6:bf:b0:9a:e4:7c:df:f7:f7:d7:22:9d:b1:
1c:15:95:de:00:b9:a9:56:7f:4d:52:5f:65:50:e7:a2:a2:88:
88:38:25:7b:9d:d9:40:41:8b:ad:5d:64:3c:d3:7b:4b:34:17:
d9:ba:e7:97:11:87:6f:0f:b3:11:03:ea:1b:36:d4:bc:74:a8:
87:b5:7f:0d:f0:61:1c:24:ed:f4:7c:49:d7:72:54:8b:06:4e:
1e:b1:35:de:ea:a7:31:78:bf:cd:7a:50:70:50:94:df:8b:79:
43:e7:3b:e8:d2:55:95:bf:fa:51:cc:76:21:65:94:49:0d:e6:
73:99:a7:a1:5d:51:03:3e:ad:43:ec:1a:3b:41:ce:23:3b:a6:
42:59:ae:58:ea:d8:77:41:e2:45:32:23:8f:87:0c:ba:e4:cb:
ec:8d:e6:d3
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVwHNfKWOp9mXE3mRvSaBG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzMzM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGY2NmU1NGY2OTRiY2U3ZTMyYzhhMzI2MTM2ZTVjMjgzYTM4NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eoWICZT03fb47EPH4KQuK4v0usu
ifrTeriRcbdrA1C0fKSQP9M/33zJLAP0xIQI8mRgmBCkF5L2jnMz6BkNoQLqae5Y
jQabf0vodNoJ1ELPh0/n/AypkUoqJxfWJDToRJoFRhswVzE0GtMmtOM/jWifN3HI
2/ROkA6FCNCD9RPzdhAXxGAHolUOe/8Fs5QUA/55LDX7AGC2M92lomqeKRa7Kib9
R27K751XgN7YrhZWFUAy4tT91HaBC0wm/0qPBmzg3iyrAy0AEcxajGYUOUi09dc5
TsM9ovgKaoDHfQ6ISp6x9gYuXNi4fC4eCXxylDPewi05a6GgE4MO62dBKwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGD2blT2lLzn4yyKMmE25cKDo4SYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzNlYTg2
Ny1kZjlhLTQ4ZTAtYjhlMy01NTU5OTE1ZjM3NTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvM2VhODY3
LWRmOWEtNDhlMC1iOGUzLTU1NTk5MTVmMzc1OS8xL1lQWnVWUGFVdk9makxJb3lZ
VGJsd29PamhKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhOEMA0EAgACMAcDBQMqEq0AMA0GCSqGSIb3
DQEBCwUAA4IBAQBZreX4wT3r8VupIKPm7QcU3NJdWKls84o6uefSqgT7K41dj5He
hCEO/71oN/iTSfuUdbzcJHIRMEtInLFpuDfhDrFph/CudRPFCtsO5ZUMh0LHA+Tz
fHN4sG4opCYGW9a/sJrkfN/399cinbEcFZXeALmpVn9NUl9lUOeiooiIOCV7ndlA
QYutXWQ803tLNBfZuueXEYdvD7MRA+obNtS8dKiHtX8N8GEcJO30fEnXclSLBk4e
sTXe6qcxeL/NelBwUJTfi3lD5zvo0lWVv/pRzHYhZZRJDeZzmaehXVEDPq1D7Bo7
Qc4jO6ZCWa5Y6th3QeJFMiOPhwy65MvsjebT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:09 2024 by rpki-client on console-fra.rpki-client.org