Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YxckM9-wLx3rM4Gu2MbAlnvZoNQ.cer
File: YxckM9-wLx3rM4Gu2MbAlnvZoNQ.cer (raw, json)
Hash identifier: t06jimRT/R12AbHRnZM5raHpmKrC/zomWzHd9igHHxQ=
Subject key identifier: 63:17:24:33:DF:B0:2F:1D:EB:33:81:AE:D8:C6:C0:96:7B:D9:A0:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887BFAD9056C55AC8F871A07EDA5196C58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/63172433DFB02F1DEB3381AED8C6C0967BD9A0D4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 12:00:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 130.193.75.0/24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 11:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:fa:d9:05:6c:55:ac:8f:87:1a:07:ed:a5:19:6c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 12:00:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63172433dfb02f1deb3381aed8c6c0967bd9a0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:9f:1b:f8:c0:31:d8:a4:0a:50:24:6b:7f:
0c:77:54:ae:f3:7f:60:53:02:51:31:22:62:d0:42:
f9:3e:4d:32:e1:cf:12:4a:e9:8d:a2:91:45:de:ec:
22:22:8f:a9:a2:46:d1:bb:42:55:16:40:ff:18:33:
1d:3c:ad:c3:55:34:07:15:c5:55:36:c6:b1:d0:09:
34:9b:f5:2a:77:c2:2d:81:88:a4:90:9c:b9:db:c2:
8b:2c:07:4b:f6:6c:ce:39:01:2f:9b:68:ee:7b:bf:
bc:53:9d:ce:ed:f1:df:7d:6e:d6:0b:62:6a:29:15:
67:b3:81:52:5d:3c:d2:95:b3:06:39:3c:1e:e0:b8:
5b:a9:01:e5:d3:75:5d:f0:b1:d6:15:64:4e:de:02:
cf:31:53:0d:d4:13:f9:15:8e:d2:c7:52:46:22:a6:
cb:86:cc:fe:50:d6:2f:a9:c6:24:30:d6:af:5f:3b:
80:05:b8:70:41:02:b0:06:20:8b:09:8d:de:a0:a5:
f4:0b:42:32:61:90:67:53:79:d0:3f:39:35:7a:53:
58:45:e8:2d:f2:bb:6a:e9:5d:b3:00:48:d2:e0:e6:
de:d8:66:e7:70:71:da:5b:2e:ab:da:66:81:42:0d:
2c:22:4f:bb:9a:4a:49:bc:6c:67:9a:d5:2e:80:e4:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:24:33:DF:B0:2F:1D:EB:33:81:AE:D8:C6:C0:96:7B:D9:A0:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/63172433DFB02F1DEB3381AED8C6C0967BD9A0D4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
31:73:e1:06:33:52:f8:49:ac:e9:eb:e4:b9:53:a9:ea:28:1e:
ee:fb:05:33:dd:f4:d7:5a:e3:56:e5:13:9f:67:2d:c4:f3:b4:
22:e2:c5:ac:ab:e5:58:3b:57:92:f7:17:f3:9f:10:61:c7:2d:
ab:b4:83:a9:5f:34:43:2b:a8:91:28:34:05:9a:82:d9:ec:b3:
19:4b:dd:8d:71:c4:98:a9:c2:43:98:b6:f1:7d:ba:0b:b6:e8:
84:55:bc:63:8c:be:3c:7f:1e:65:10:c6:2a:f5:fa:50:1f:a0:
c7:97:26:e3:42:dc:48:f1:37:c0:f5:1c:e5:35:c6:16:20:df:
1d:ce:65:84:e7:5d:42:76:ab:4c:60:4d:a2:ca:7a:99:43:d6:
a8:fa:70:9e:c0:5b:c4:59:80:98:5c:6a:cd:c5:61:bf:9a:6d:
c9:2e:a1:71:dd:a5:18:03:64:ab:2d:51:cf:02:c5:63:e6:02:
e9:08:16:79:2b:14:f6:c5:49:d4:0f:70:a0:54:6b:e7:15:4c:
b8:7f:b1:5c:6e:2d:4a:32:7a:70:c5:db:aa:02:9d:12:89:b5:
8c:bf:f2:5e:2d:8f:37:04:21:55:8c:87:97:a8:31:63:10:91:
20:f7:98:d2:9b:c7:96:37:de:c4:d8:5b:76:fb:72:1f:c1:27:
52:41:40:7f
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYh7+tkFbFWsj4caB+2lGWxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjAyMTIwMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzE3MjQzM2RmYjAyZjFkZWIzMzgxYWVkOGM2YzA5NjdiZDlhMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19afG/jAMdikClAka38Md1Su839g
UwJRMSJi0EL5Pk0y4c8SSumNopFF3uwiIo+pokbRu0JVFkD/GDMdPK3DVTQHFcVV
Nsax0Ak0m/Uqd8ItgYikkJy528KLLAdL9mzOOQEvm2jue7+8U53O7fHffW7WC2Jq
KRVns4FSXTzSlbMGOTwe4LhbqQHl03Vd8LHWFWRO3gLPMVMN1BP5FY7Sx1JGIqbL
hsz+UNYvqcYkMNavXzuABbhwQQKwBiCLCY3eoKX0C0IyYZBnU3nQPzk1elNYRegt
8rtq6V2zAEjS4Obe2GbncHHaWy6r2maBQg0sIk+7mkpJvGxnmtUugOTzNQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFGMXJDPfsC8d6zOBrtjGwJZ72aDUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZTFm
MDE0LTlkOWYtNGU5MS1hMGMzLTU1ZjhiZWUzMjczNy8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJl
MWYwMTQtOWQ5Zi00ZTkxLWEwYzMtNTVmOGJlZTMyNzM3LzAvNjMxNzI0MzNERkIw
MkYxREVCMzM4MUFFRDhDNkMwOTY3QkQ5QTBENC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AILBSzANBgkqhkiG9w0BAQsFAAOCAQEAMXPhBjNS+Ems6evkuVOp6ige7vsFM930
11rjVuUTn2ctxPO0IuLFrKvlWDtXkvcX858QYcctq7SDqV80QyuokSg0BZqC2eyz
GUvdjXHEmKnCQ5i28X26C7bohFW8Y4y+PH8eZRDGKvX6UB+gx5cm40LcSPE3wPUc
5TXGFiDfHc5lhOddQnarTGBNosp6mUPWqPpwnsBbxFmAmFxqzcVhv5ptyS6hcd2l
GANkqy1RzwLFY+YC6QgWeSsU9sVJ1A9woFRr5xVMuH+xXG4tSjJ6cMXbqgKdEom1
jL/yXi2PNwQhVYyHl6gxYxCRIPeY0pvHljfexNhbdvtyH8EnUkFAfw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:04 2024 by rpki-client on console-ams.rpki-client.org