Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yLyuq0Y_-u_ankdc7e9UEooNxl8.cer
File: yLyuq0Y_-u_ankdc7e9UEooNxl8.cer (raw, json)
Hash identifier: wBQ4Gatd/NY8dh+aP5cZtwfjU97uHCLyEc+Xfrvn/pk=
Subject key identifier: C8:BC:AE:AB:46:3F:FA:EF:DA:9E:47:5C:ED:EF:54:12:8A:0D:C6:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBCF7E5D178C1DF670796A9B650675
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc7b6e-30cb-4eac-849a-c1d9eb8be4f9/1/yLyuq0Y_-u_ankdc7e9UEooNxl8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc7b6e-30cb-4eac-849a-c1d9eb8be4f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.242.218.0/24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 11:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:cf:7e:5d:17:8c:1d:f6:70:79:6a:9b:65:06:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8bcaeab463ffaefda9e475cedef54128a0dc65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:f8:ae:39:83:72:d1:a0:79:eb:3c:21:7a:
72:f7:0e:2b:b5:e3:bf:6d:85:d5:1a:b3:76:3a:dc:
47:6f:20:51:74:92:9b:56:58:67:95:d0:ff:f6:07:
30:57:9d:3e:8e:38:63:ec:18:f3:ee:24:54:08:74:
f9:fc:94:58:94:7b:6f:45:a8:88:bc:3f:35:b9:60:
68:d3:88:af:ab:22:b8:9d:4d:e1:07:29:38:cc:97:
4f:08:ed:70:c8:d3:56:aa:06:b8:fa:ff:02:5b:9b:
2d:59:5a:cd:73:9c:7a:2d:d9:69:73:c8:be:12:b6:
34:09:d4:3f:f7:a9:ac:d1:41:36:ca:4d:24:e2:b1:
e0:36:aa:0d:dc:1e:a0:1c:d7:fe:23:27:ab:3e:4e:
7d:e1:23:f3:4c:74:49:a3:04:7b:88:f0:5c:be:ee:
92:6c:4f:95:c3:fc:25:37:b2:26:eb:7c:b2:c9:67:
96:14:4d:f3:48:7f:83:48:6e:03:ad:5d:e3:19:0e:
aa:a3:5d:36:db:3a:43:f0:f0:52:cf:04:65:60:b3:
89:4c:ba:0d:3a:0f:1f:86:5d:83:e8:80:a6:ba:16:
fa:ab:91:34:59:5a:a9:a6:5f:1b:d3:59:9f:7a:6d:
ed:ea:36:06:e5:b2:b7:8c:f9:03:ef:c1:cd:f0:46:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BC:AE:AB:46:3F:FA:EF:DA:9E:47:5C:ED:EF:54:12:8A:0D:C6:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc7b6e-30cb-4eac-849a-c1d9eb8be4f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc7b6e-30cb-4eac-849a-c1d9eb8be4f9/1/yLyuq0Y_-u_ankdc7e9UEooNxl8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.218.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2e:41:48:de:64:fe:a6:7b:ac:ec:ae:bc:36:d6:9b:a4:40:
a0:ba:47:a2:9d:5e:c6:4f:37:40:70:90:bf:71:d9:80:bf:ed:
50:e6:24:e2:44:2b:48:d1:d8:e0:99:89:3f:73:fc:3a:36:7b:
2b:14:18:35:b0:84:c1:d6:bb:8d:3c:a6:2d:39:06:20:77:87:
5e:e9:e4:29:d3:03:92:61:5e:02:cc:56:0d:3c:89:41:a4:ab:
5d:4e:0b:8e:74:08:16:75:a6:93:d6:38:4f:2d:d1:d8:91:43:
9b:8e:ce:a0:7f:99:1b:fb:ae:4b:fd:35:0a:be:0e:38:64:08:
98:06:1b:6d:07:30:5c:d8:45:d4:d7:a4:a5:e5:99:90:cb:30:
38:24:47:84:c9:2d:34:18:6f:b9:de:6b:c1:7e:c0:cf:f8:80:
84:91:22:47:b1:42:eb:a8:01:43:e9:b0:86:09:f2:fb:74:23:
50:5c:e0:f0:09:77:d5:41:a6:e2:3f:5a:79:73:af:45:2b:a4:
d9:fb:8e:a3:e0:0d:24:f8:a4:40:3c:15:4d:89:fe:68:92:73:
23:1b:2d:93:ed:da:d3:21:96:9c:46:68:25:af:34:19:aa:5d:
40:e0:df:47:b2:2d:bb:39:71:60:62:da:34:ca:64:ac:f5:eb:
f6:9f:77:73
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVu+89+XReMHfZweWqbZQZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGJjYWVhYjQ2M2ZmYWVmZGE5ZTQ3NWNlZGVmNTQxMjhhMGRjNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb/4rjmDctGgees8IXpy9w4rteO/
bYXVGrN2OtxHbyBRdJKbVlhnldD/9gcwV50+jjhj7Bjz7iRUCHT5/JRYlHtvRaiI
vD81uWBo04ivqyK4nU3hByk4zJdPCO1wyNNWqga4+v8CW5stWVrNc5x6Ldlpc8i+
ErY0CdQ/96ms0UE2yk0k4rHgNqoN3B6gHNf+IyerPk594SPzTHRJowR7iPBcvu6S
bE+Vw/wlN7Im63yyyWeWFE3zSH+DSG4DrV3jGQ6qo1022zpD8PBSzwRlYLOJTLoN
Og8fhl2D6ICmuhb6q5E0WVqppl8b01mfem3t6jYG5bK3jPkD78HN8EbEdwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMi8rqtGP/rv2p5HXO3vVBKKDcZfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2JjN2I2
ZS0zMGNiLTRlYWMtODQ5YS1jMWQ5ZWI4YmU0ZjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYmM3YjZl
LTMwY2ItNGVhYy04NDlhLWMxZDllYjhiZTRmOS8xL3lMeXVxMFlfLXVfYW5rZGM3
ZTlVRW9vTnhsOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAufLaMA0GCSqGSIb3DQEBCwUAA4IBAQBzLkFI
3mT+pnus7K68NtabpECgukeinV7GTzdAcJC/cdmAv+1Q5iTiRCtI0djgmYk/c/w6
NnsrFBg1sITB1ruNPKYtOQYgd4de6eQp0wOSYV4CzFYNPIlBpKtdTguOdAgWdaaT
1jhPLdHYkUObjs6gf5kb+65L/TUKvg44ZAiYBhttBzBc2EXU16Sl5ZmQyzA4JEeE
yS00GG+53mvBfsDP+ICEkSJHsULrqAFD6bCGCfL7dCNQXODwCXfVQabiP1p5c69F
K6TZ+46j4A0k+KRAPBVNif5oknMjGy2T7drTIZacRmglrzQZql1A4N9Hsi27OXFg
Yto0ymSs9ev2n3dz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:26 2024 by rpki-client on console-ams.rpki-client.org