Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ygH-gvH8Sre_gTruyR4KScFyiIw.cer
File: ygH-gvH8Sre_gTruyR4KScFyiIw.cer (raw, json)
Hash identifier: rZdVZ7GzKhfWjfQBEmiEZmK3DL/1Vj1w+ORP0hTXNLU=
Subject key identifier: CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493608F2DAC8B89B008710847DB4DCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ygH-gvH8Sre_gTruyR4KScFyiIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.161.78.0/24
IP: 2a12:4c80::/29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 09:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:60:8f:2d:ac:8b:89:b0:08:71:08:47:db:4d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca01fe82f1fc4ab7bf813aeec91e0a49c172888c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:a5:1a:78:a6:3a:68:8f:b6:89:d5:fc:c4:
f3:f3:58:4e:c7:3d:a7:5f:c8:8b:50:82:8b:3a:c6:
5f:d4:9f:c9:fc:75:88:1c:4e:61:47:c0:0c:0b:26:
9d:1a:fe:23:2d:a2:68:16:3b:54:e9:07:67:b5:2c:
df:58:13:ff:02:80:4c:f3:67:7f:c4:fc:e9:26:32:
b5:39:a4:cb:8a:4e:e6:b4:72:bd:a7:21:10:ab:62:
17:a2:97:92:7e:0b:7a:1c:ef:ac:d2:9d:b7:08:8f:
20:fb:34:f2:57:f1:89:66:05:c3:94:16:c0:1a:dc:
1b:69:2d:b1:5a:93:c7:6b:79:1f:d2:28:93:c1:68:
07:49:11:04:bf:dc:26:37:36:18:c4:42:7b:82:0d:
5a:c4:76:2e:d5:77:3d:09:dd:2e:82:dc:7c:d5:08:
a8:5a:48:61:29:1d:ed:2b:f2:e6:82:ea:1d:cb:f5:
70:03:f0:f7:f5:8c:18:64:32:13:e8:69:e1:00:65:
ea:d1:f4:16:67:2a:75:98:56:89:62:15:05:fb:e6:
5e:3c:2f:1c:ca:c1:7a:95:26:9d:a4:af:ba:25:80:
cd:30:02:6e:a5:ed:cc:1a:e3:70:5b:38:ec:fb:51:
a4:18:3a:4b:c0:0b:6d:99:f7:fc:91:2c:00:1b:72:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ygH-gvH8Sre_gTruyR4KScFyiIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.78.0/24
IPv6:
2a12:4c80::/29
Signature Algorithm: sha256WithRSAEncryption
6a:72:66:2a:df:6f:c9:85:9a:63:e9:be:db:82:4b:5d:fb:3d:
09:e2:78:81:50:89:05:63:c5:db:a5:bb:6b:b7:11:48:e2:37:
ad:f0:c6:7e:2e:bc:12:78:c4:97:82:70:17:ab:17:64:78:88:
3a:07:9f:28:56:81:d8:5d:9a:8b:9a:36:1b:3c:e4:36:37:ad:
6d:ff:b1:b8:bb:7b:fc:38:39:15:e1:64:68:42:ac:c1:a8:73:
3f:40:f0:3b:52:7c:56:4d:a5:19:bc:81:43:3b:3f:2b:4f:e1:
26:2e:07:3d:18:b5:e4:02:3a:51:4b:94:e3:6e:2a:26:e8:42:
81:0b:1c:34:d5:42:0f:7e:38:50:01:71:99:54:ed:3b:48:d6:
5c:a6:59:f2:16:75:da:72:86:13:9e:4a:75:ad:3c:b6:e9:76:
23:52:d4:a3:c1:14:43:5d:cd:e4:d1:37:cd:90:69:a1:75:e9:
a8:e2:f2:ce:84:5d:08:b4:51:40:f7:68:a7:fc:a3:41:ff:a1:
4d:21:7f:84:89:99:a0:f1:50:46:56:da:ce:4f:b6:ea:e3:e9:
19:87:cb:4c:e7:22:34:d3:8d:c6:c7:e1:26:82:9a:df:98:d8:
c1:9d:c1:eb:70:ff:5a:86:f1:fe:54:28:ec:81:65:06:36:c2:
d9:30:3e:3f
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzEk2CPLayLibAIcQhH203NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTAxZmU4MmYxZmM0YWI3YmY4MTNhZWVjOTFlMGE0OWMxNzI4ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mmlGnimOmiPtonV/MTz81hOxz2n
X8iLUIKLOsZf1J/J/HWIHE5hR8AMCyadGv4jLaJoFjtU6QdntSzfWBP/AoBM82d/
xPzpJjK1OaTLik7mtHK9pyEQq2IXopeSfgt6HO+s0p23CI8g+zTyV/GJZgXDlBbA
GtwbaS2xWpPHa3kf0iiTwWgHSREEv9wmNzYYxEJ7gg1axHYu1Xc9Cd0ugtx81Qio
WkhhKR3tK/Lmguody/VwA/D39YwYZDIT6GnhAGXq0fQWZyp1mFaJYhUF++ZePC8c
ysF6lSadpK+6JYDNMAJupe3MGuNwWzjs+1GkGDpLwAttmff8kSwAG3LGBwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMoB/oLx/Eq3v4E67skeCknBcoiMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzY3Mjdj
YS0yYzU5LTQzNjYtYjdiYy05N2UzODYyMTY1MzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvNjcyN2Nh
LTJjNTktNDM2Ni1iN2JjLTk3ZTM4NjIxNjUzNS8xL3lnSC1ndkg4U3JlX2dUcnV5
UjRLU2NGeWlJdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuaFOMA0EAgACMAcDBQMqEkyAMA0GCSqGSIb3
DQEBCwUAA4IBAQBqcmYq32/JhZpj6b7bgktd+z0J4niBUIkFY8XbpbtrtxFI4jet
8MZ+LrwSeMSXgnAXqxdkeIg6B58oVoHYXZqLmjYbPOQ2N61t/7G4u3v8ODkV4WRo
QqzBqHM/QPA7UnxWTaUZvIFDOz8rT+EmLgc9GLXkAjpRS5Tjbiom6EKBCxw01UIP
fjhQAXGZVO07SNZcplnyFnXacoYTnkp1rTy26XYjUtSjwRRDXc3k0TfNkGmhdemo
4vLOhF0ItFFA92in/KNB/6FNIX+EiZmg8VBGVtrOT7bq4+kZh8tM5yI0043Gx+Em
gprfmNjBncHrcP9ahvH+VCjsgWUGNsLZMD4/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:10 2024 by rpki-client on console-fra.rpki-client.org