Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
File: Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer (raw, json)
Hash identifier: siP3kSX4R1iykGwjaKueUMpYRZF7ZGWXei2R2Zbod9A=
Subject key identifier: 62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B58DB94A20C35270EDD4F7CDD855D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/Ymo-iOnkZDSUbkaR8W_mvri54Ck.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31250
IP: 93.152.128.0 -- 93.152.204.255
IP: 93.152.236.0/22
IP: 195.93.214.0/23
IP: 195.93.236.0/23
IP: 2a00:87c0::/32
Validation: Failed, certificate revoked on Tue 14 May 2024 09:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:58:db:94:a2:0c:35:27:0e:dd:4f:7c:dd:85:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:26:5e:ae:cb:87:f2:71:88:57:60:17:12:
7c:be:e5:5b:56:54:cf:3d:c1:ba:50:dc:94:19:67:
75:b5:62:d0:34:20:a1:e6:97:24:b9:d0:3f:5b:0b:
16:51:18:a7:31:e3:71:79:a0:5c:1c:95:d2:4a:58:
61:00:a0:93:0d:da:ff:fd:14:1a:47:db:88:f4:21:
92:75:e1:7b:70:b8:df:d7:6b:8b:1e:3f:4d:5a:94:
99:64:d0:d5:9f:54:b9:ff:6e:5b:91:59:ed:2f:fc:
4b:b9:eb:00:0e:68:e3:5f:ec:82:b4:98:e1:d1:f1:
71:f7:02:40:c8:c1:7f:c0:56:6d:64:96:5e:dd:7a:
ca:27:66:7a:4b:e9:9a:23:c9:c3:b2:35:43:97:07:
ec:f7:b7:ed:81:82:06:ff:b1:ca:b6:58:76:a5:25:
20:2a:06:24:2e:eb:27:15:05:02:df:dd:f2:d9:62:
87:8a:99:b6:79:c1:49:6e:f7:d4:5d:c1:eb:85:6c:
43:88:b7:f3:04:f1:5f:8a:45:97:8a:ef:c9:b9:c4:
20:b9:f1:f6:0c:be:1c:54:28:24:62:76:11:c0:af:
87:f9:88:76:47:11:78:b4:0b:12:f6:2e:2b:64:dc:
ff:6e:72:d9:28:c5:da:6a:91:8c:17:36:66:84:b6:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/Ymo-iOnkZDSUbkaR8W_mvri54Ck.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.128.0-93.152.204.255
93.152.236.0/22
195.93.214.0/23
195.93.236.0/23
IPv6:
2a00:87c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31250
Signature Algorithm: sha256WithRSAEncryption
41:2a:b9:dc:fd:5c:66:6a:96:b0:c5:cf:a9:a3:c8:78:4a:2d:
f8:06:1e:39:72:bd:b2:95:dd:e0:8c:2a:1d:cb:db:ca:ff:96:
a7:af:48:2d:36:a1:86:17:5e:b1:b2:5e:83:39:96:5a:04:ab:
06:6f:3f:41:62:7e:4c:9a:73:7f:36:01:e6:7a:31:39:dd:87:
80:12:c8:d8:d2:3e:75:74:b5:8b:cf:8b:ca:22:77:3d:0e:28:
67:c1:b8:3c:8b:16:9f:79:35:c5:c9:08:63:27:39:7d:50:d1:
07:07:73:a2:1a:1a:14:47:d6:85:84:67:22:61:6c:7b:fa:11:
5e:6f:9c:da:42:5d:4f:b1:88:88:e6:26:42:8d:ab:0b:52:88:
bb:c6:20:2a:b2:68:2b:b7:1d:ad:38:39:65:f6:bf:0e:25:f4:
37:1e:43:5b:b6:da:3e:10:d0:99:4b:a4:08:e7:8b:9a:72:08:
21:9b:b3:15:ff:91:c1:df:4a:ae:98:a4:98:7f:8a:fe:c2:42:
57:d4:8d:e5:87:32:86:21:89:a8:90:e6:f8:b8:52:ea:79:23:
d4:e1:19:15:8d:7d:bd:bd:4e:5a:24:61:f8:1f:27:90:a3:84:
ef:57:f5:6c:99:dd:40:c3:f3:41:9e:df:90:c9:20:ba:32:bb:
11:53:71:d0
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAYzGS1jblKIMNScO3U983YVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjZhM2U4OGU5ZTQ2NDM0OTQ2ZTQ2OTFmMTZmZTZiZWI4YjllMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUomXq7Lh/JxiFdgFxJ8vuVbVlTP
PcG6UNyUGWd1tWLQNCCh5pckudA/WwsWURinMeNxeaBcHJXSSlhhAKCTDdr//RQa
R9uI9CGSdeF7cLjf12uLHj9NWpSZZNDVn1S5/25bkVntL/xLuesADmjjX+yCtJjh
0fFx9wJAyMF/wFZtZJZe3XrKJ2Z6S+maI8nDsjVDlwfs97ftgYIG/7HKtlh2pSUg
KgYkLusnFQUC393y2WKHipm2ecFJbvfUXcHrhWxDiLfzBPFfikWXiu/JucQgufH2
DL4cVCgkYnYRwK+H+Yh2RxF4tAsS9i4rZNz/bnLZKMXaapGMFzZmhLbmrwIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFGJqPojp5GQ0lG5GkfFv5r64ueApMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzAxMmI3
NS01MzE4LTQxOWYtOTUyNi01OGQ5ZGI3ZDY5NDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMDEyYjc1
LTUzMTgtNDE5Zi05NTI2LTU4ZDlkYjdkNjk0OS8xL1ltby1pT25rWkRTVWJrYVI4
V19tdnJpNTRDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAmBAIAATAgMAwDBAddmIADBABdmMwDBAJdmOwDBAHDXdYDBAHD
XewwDQQCAAIwBwMFACoAh8AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICehIwDQYJ
KoZIhvcNAQELBQADggEBAEEqudz9XGZqlrDFz6mjyHhKLfgGHjlyvbKV3eCMKh3L
28r/lqevSC02oYYXXrGyXoM5lloEqwZvP0Fifkyac382AeZ6MTndh4ASyNjSPnV0
tYvPi8oidz0OKGfBuDyLFp95NcXJCGMnOX1Q0QcHc6IaGhRH1oWEZyJhbHv6EV5v
nNpCXU+xiIjmJkKNqwtSiLvGICqyaCu3Ha04OWX2vw4l9DceQ1u22j4Q0JlLpAjn
i5pyCCGbsxX/kcHfSq6YpJh/iv7CQlfUjeWHMoYhiaiQ5vi4Uup5I9ThGRWNfb29
TlokYfgfJ5CjhO9X9WyZ3UDD80Ge35DJILoyuxFTcdA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:00 2024 by rpki-client on console-ams.rpki-client.org