Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
File: YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer (raw, json)
Hash identifier: 6+4fOmSNb/vy1eKt0cZBTiS31yRViA83SUti722y3Jc=
Subject key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018798B2A25CD79F6932E52A04E0AB7DD56E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Apr 2023 08:47:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.26.0/24
IP: 109.122.32.0/21
IP: 2a06:5e80::/29
Validation: Failed, certificate revoked on Tue 12 Dec 2023 07:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:b2:a2:5c:d7:9f:69:32:e5:2a:04:e0:ab:7d:d5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 19 08:47:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6255f073ffb04727d15cd758399c6c613faef10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:ca:23:ce:88:0f:d3:ca:a3:17:a7:cc:57:
89:7c:52:33:a0:f1:77:08:a9:2c:aa:cb:b6:7d:a4:
7d:c4:74:b3:41:4b:57:ed:a7:4b:60:87:fd:ef:89:
4a:22:fe:12:cc:0d:c9:a7:ef:b5:b4:7f:17:66:98:
b8:d5:99:35:b0:17:f2:6c:67:70:44:b5:83:94:8c:
db:5e:97:14:cf:af:83:4c:70:98:5d:11:e2:d3:0a:
ac:a2:07:cb:47:9e:17:ca:54:e0:28:8f:55:b0:33:
f3:6f:6e:be:aa:e0:a7:d3:16:85:0f:3f:65:03:73:
3e:05:7d:03:55:b2:2f:dd:d5:55:c8:a6:79:94:88:
89:db:ae:37:2a:fd:1e:20:1a:1f:58:3f:bc:b8:48:
58:21:ec:41:24:55:cf:d9:17:1f:ec:9a:66:c5:d4:
42:d5:90:d1:e6:51:62:c8:c3:7e:1c:44:57:27:80:
70:4b:ff:54:da:f4:e3:20:d1:15:1b:02:06:e4:30:
46:57:f3:09:2e:d9:56:ec:e5:66:21:c3:08:a2:c3:
f4:cd:ce:97:73:78:0a:4f:04:5b:78:7a:d4:e9:04:
29:55:0d:f7:fb:d5:bf:36:c2:a2:73:c4:49:3d:af:
83:32:20:3e:45:98:a5:6b:e1:5e:a8:de:9d:80:20:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.26.0/24
109.122.32.0/21
IPv6:
2a06:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
36:92:aa:e3:e5:e9:f7:a8:69:52:e8:3b:71:21:c3:33:20:ed:
9f:1e:a9:5e:9f:bd:22:01:fe:61:20:b7:a3:ff:a5:c2:dd:d8:
41:01:97:5a:2d:16:c2:4e:b5:ee:d1:94:23:ee:ab:e5:ec:7c:
2b:c9:2d:08:22:16:c5:58:ac:a4:94:cf:af:d9:88:48:d8:91:
bf:e0:76:fc:6a:7e:36:f7:35:86:22:b6:2f:ed:4e:58:8b:ce:
c6:cf:8c:40:7c:15:d8:1c:f0:34:4e:97:71:0e:1b:bc:60:43:
b2:1f:0e:a9:2b:2e:62:1a:c2:7c:50:fe:60:e2:16:a7:2f:a6:
4f:64:43:8c:bf:eb:d7:66:85:76:8a:9d:6d:56:b4:f2:73:d0:
cb:5d:7f:55:60:28:cb:0e:e4:c9:eb:61:f5:a0:3c:42:c0:ab:
36:46:91:60:35:c2:b5:4a:91:03:d3:a2:ad:f7:c1:b5:7b:0b:
c8:6b:79:11:f0:91:34:0a:11:04:5f:3d:2b:e8:55:39:05:75:
ee:33:8a:64:37:8f:f9:28:69:6c:a7:3d:b1:ba:be:b0:85:d4:
aa:4b:28:fe:2a:8d:47:6d:f8:3c:a1:7c:84:d3:9f:8c:3e:b7:
c6:3d:c6:86:88:bc:33:9d:d0:35:b9:9e:da:70:12:18:d9:74:
c7:9e:1a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:14 2024 by rpki-client on console-fra.rpki-client.org