Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ydsFeUeSyuTOPmpT6xfjnutWqSQ.cer
File: ydsFeUeSyuTOPmpT6xfjnutWqSQ.cer (raw, json)
Hash identifier: CxMSBzysUGF4TqEjjkGb1PErYKdpd8OCC5rM2YSKQ+g=
Subject key identifier: C9:DB:05:79:47:92:CA:E4:CE:3E:6A:53:EB:17:E3:9E:EB:56:A9:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708BAF22BB9FAB4DC953A0D2C3BD174E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/ydsFeUeSyuTOPmpT6xfjnutWqSQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.187.0/24
IP: 2a12:ed00::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 08:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:af:22:bb:9f:ab:4d:c9:53:a0:d2:c3:bd:17:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9db05794792cae4ce3e6a53eb17e39eeb56a924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:88:5d:50:a7:77:96:cc:c3:47:4d:79:df:
41:ae:f8:5e:b5:4c:57:40:a3:11:f9:30:58:5a:e3:
d3:67:b9:2d:7f:75:4e:f5:77:db:a0:cc:8e:a8:6f:
ab:84:2a:77:9e:03:b9:fe:ec:18:bd:8e:49:32:38:
6c:94:ec:7f:ce:c7:26:b4:dd:55:e0:04:52:86:00:
e9:61:48:3c:e3:cc:7c:9f:b1:6c:ae:23:c4:96:11:
b5:a3:56:af:be:9e:de:5b:2f:cb:14:84:3e:9a:4a:
6c:ff:e8:10:c1:f6:45:e8:7e:d3:ed:55:43:50:22:
f8:29:2d:e7:d8:a8:05:80:93:1f:09:15:41:8d:11:
89:7b:bc:31:7e:b8:45:12:fe:81:d0:de:50:e0:1a:
7c:2e:ef:5a:95:2d:10:a0:1d:96:36:54:02:4c:af:
a1:6e:32:b7:5a:ac:dd:fb:8c:b7:d9:67:8c:ab:0d:
c3:b5:b4:62:58:bc:5f:68:78:4d:05:50:5e:f1:14:
a0:7d:db:4d:45:98:22:f3:7f:61:ab:49:5c:62:38:
c4:c1:47:d6:73:c2:b7:b4:e1:f2:52:f7:2a:50:0c:
02:38:16:ab:67:4e:07:42:96:d5:72:e6:40:cf:02:
0f:e8:27:d5:42:b8:d4:d8:b5:3f:f5:7a:9f:dd:a4:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DB:05:79:47:92:CA:E4:CE:3E:6A:53:EB:17:E3:9E:EB:56:A9:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/ydsFeUeSyuTOPmpT6xfjnutWqSQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.187.0/24
IPv6:
2a12:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
14:21:bd:48:47:b7:64:31:bb:9b:84:2b:0b:8a:ad:ad:1b:95:
b9:75:49:5f:35:0b:db:db:b7:bf:79:49:4e:dd:c2:68:30:68:
4d:08:0b:7a:fc:df:9a:f5:14:4c:bb:0f:cd:e9:7d:44:2d:fb:
f7:be:3c:7a:50:af:69:fa:62:02:07:d4:14:6b:ff:0c:cd:13:
25:bc:f1:25:0d:08:69:78:fb:64:45:e9:4e:f0:fe:05:53:67:
be:e0:6b:13:ca:00:e6:81:70:69:30:99:27:36:1c:01:61:f9:
52:32:e3:f7:36:4b:83:8e:a3:b5:79:a2:b1:6f:51:f1:7f:a4:
a1:f0:5d:7f:68:21:aa:f2:e1:86:6e:89:0f:bd:4e:08:aa:bd:
2e:f3:2a:86:3a:0c:06:f2:bf:29:10:79:1e:9e:b0:cb:ab:3a:
cb:b0:6c:48:4d:ef:a8:a2:eb:7d:8b:17:0c:ae:6b:af:7c:4c:
c2:9f:be:6d:20:f1:9b:62:c7:f9:ca:b4:70:63:96:0a:da:9c:
65:39:ca:d2:32:f0:25:48:c4:c7:bb:37:05:4d:b7:43:a7:dc:
b1:0f:9d:79:61:71:ca:1c:68:3d:15:1a:1d:c0:5d:ba:bc:0f:
d5:04:cb:ac:06:40:ab:66:f7:2a:cc:29:10:43:bc:28:01:0c:
de:ae:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:10 2024 by rpki-client on console-fra.rpki-client.org