Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yXxrGDkX8miA3HkjgCodDkTXuCI.cer
File: yXxrGDkX8miA3HkjgCodDkTXuCI.cer (raw, json)
Hash identifier: DP6EBVaFOu8y6khwA9vak17d9HiW9orf7KE+JbOejz8=
Subject key identifier: C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3E6E91D71C8AEF641CEA992A613550
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:31:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.118.35.0/24
IP: 2a11:cd80::/29
Validation: Failed, certificate revoked on Wed 04 Oct 2023 07:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3e:6e:91:d7:1c:8a:ef:64:1c:ea:99:2a:61:35:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:31:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c97c6b183917f26880dc7923802a1d0e44d7b822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:eb:86:0c:1b:24:d1:57:b1:52:f3:a7:b1:
f7:b9:86:98:dc:cf:4a:77:7b:d8:97:d1:d4:f7:15:
b1:21:66:56:92:ff:32:3f:04:8a:41:89:9c:46:9b:
99:a6:ed:70:9d:db:9d:1e:ec:79:b6:d0:41:65:33:
ca:c0:94:cd:b5:48:9d:f4:f5:c8:6e:a1:7d:f1:3b:
05:7d:22:77:a6:69:a8:1b:50:3d:c2:30:5d:c5:3a:
f1:7e:a8:a8:3f:f1:5b:0a:af:fa:0f:73:c8:12:49:
16:6e:6a:1c:62:07:97:d1:64:a8:9a:eb:00:d2:40:
d6:a2:3b:eb:e6:95:f1:87:99:c1:4c:10:c6:17:95:
0b:66:eb:e6:23:ae:03:dc:22:4f:37:73:70:d6:c4:
39:86:30:b1:fc:35:4a:d8:f4:d8:21:cc:b7:a9:30:
0a:a8:cc:62:a7:00:c5:6e:f5:fe:05:40:74:f9:e7:
67:24:20:a6:99:0e:ba:f9:4e:b1:d1:2b:3d:1e:63:
8d:1b:37:d7:ed:3d:36:b1:9b:4a:82:09:2d:a5:d4:
67:e6:50:9c:5c:70:5a:84:fc:bc:7a:13:52:fb:c6:
3f:1c:c9:20:78:4c:dd:a5:b1:a4:be:85:63:96:aa:
1a:e4:b0:71:7d:5b:4d:03:0d:8c:31:da:f5:ab:8a:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.35.0/24
IPv6:
2a11:cd80::/29
Signature Algorithm: sha256WithRSAEncryption
38:82:f4:32:38:d1:58:f5:6b:cd:6f:78:74:5e:74:c8:2a:25:
73:11:94:20:ee:a5:4f:6a:82:68:0c:4c:a6:30:ca:0e:83:7a:
2a:5e:2f:5c:9b:63:92:ba:53:9c:04:7c:1f:1e:fe:2b:57:d3:
10:85:27:4a:9a:74:96:e0:77:f3:71:e8:91:3a:f7:24:3c:76:
e1:9b:5f:df:31:82:57:fc:98:a7:cc:1e:eb:e8:ef:ce:79:9f:
1b:0b:b9:f4:9d:74:90:be:c8:9f:87:e2:6e:59:70:6a:87:8c:
f4:ba:75:1f:16:a4:59:a6:47:5d:d7:33:f2:4c:0e:89:1b:2c:
21:0f:6c:65:62:d1:29:c5:10:80:a8:cb:65:cc:2b:4e:77:1f:
8a:0f:13:08:1e:53:19:9a:4e:96:ae:3c:8b:54:73:53:81:ca:
5d:c7:5a:74:b3:06:eb:33:e4:90:69:4b:17:39:7c:f9:66:55:
06:44:5d:db:b8:39:a3:34:4c:13:7e:9a:1a:ae:31:64:5d:30:
a8:2f:82:0c:22:91:d5:28:71:3d:e7:f6:36:89:9f:24:e8:35:
cc:56:36:ed:d2:d0:54:c4:d0:7a:1b:ce:c5:0e:58:00:be:0a:
de:4a:2d:0e:ff:df:43:c0:c2:ac:26:97:e7:f1:12:10:19:32:
df:02:37:f4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVsPm6R1xyK72Qc6pkqYTVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDczMTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTdjNmIxODM5MTdmMjY4ODBkYzc5MjM4MDJhMWQwZTQ0ZDdiODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sTrhgwbJNFXsVLzp7H3uYaY3M9K
d3vYl9HU9xWxIWZWkv8yPwSKQYmcRpuZpu1wndudHux5ttBBZTPKwJTNtUid9PXI
bqF98TsFfSJ3pmmoG1A9wjBdxTrxfqioP/FbCq/6D3PIEkkWbmocYgeX0WSomusA
0kDWojvr5pXxh5nBTBDGF5ULZuvmI64D3CJPN3Nw1sQ5hjCx/DVK2PTYIcy3qTAK
qMxipwDFbvX+BUB0+ednJCCmmQ66+U6x0Ss9HmONGzfX7T02sZtKggktpdRn5lCc
XHBahPy8ehNS+8Y/HMkgeEzdpbGkvoVjlqoa5LBxfVtNAw2MMdr1q4rRQQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMl8axg5F/JogNx5I4AqHQ5E17giMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2RlOWM0
ZS1iYjk3LTQ3Y2EtYTQ0OS01MTNkODQ2Y2Y3YWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZGU5YzRl
LWJiOTctNDdjYS1hNDQ5LTUxM2Q4NDZjZjdhYy8xL3lYeHJHRGtYOG1pQTNIa2pn
Q29kRGtUWHVDSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsHYjMA0EAgACMAcDBQMqEc2AMA0GCSqGSIb3
DQEBCwUAA4IBAQA4gvQyONFY9WvNb3h0XnTIKiVzEZQg7qVPaoJoDEymMMoOg3oq
Xi9cm2OSulOcBHwfHv4rV9MQhSdKmnSW4HfzceiROvckPHbhm1/fMYJX/JinzB7r
6O/OeZ8bC7n0nXSQvsifh+JuWXBqh4z0unUfFqRZpkdd1zPyTA6JGywhD2xlYtEp
xRCAqMtlzCtOdx+KDxMIHlMZmk6WrjyLVHNTgcpdx1p0swbrM+SQaUsXOXz5ZlUG
RF3buDmjNEwTfpoarjFkXTCoL4IMIpHVKHE95/Y2iZ8k6DXMVjbt0tBUxNB6G87F
DlgAvgreSi0O/99DwMKsJpfn8RIQGTLfAjf0
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:09 2024 by rpki-client on console-fra.rpki-client.org