Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ykd5W6qP8cIZIA9WeU6sUGp9emE.cer
File: ykd5W6qP8cIZIA9WeU6sUGp9emE.cer (raw, json)
Hash identifier: iIVQVWHt14xZp1z3GGA2BYi0BW+UawhR2sE9ROLeEAw=
Subject key identifier: CA:47:79:5B:AA:8F:F1:C2:19:20:0F:56:79:4E:AC:50:6A:7D:7A:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01875FC16263C3771710A954CCE1872BAFA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/HYSP/15/CA47795BAA8FF1C219200F56794EAC506A7D7A61.mft
caRepository: rsync://rpki.co/repo/HYSP/15
Notify URL: https://rpki.co/rrdp/notification.xml
Certificate not before: Sat 08 Apr 2023 07:25:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 49867
Validation: Failed, certificate revoked on Sat 08 Apr 2023 09:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:c1:62:63:c3:77:17:10:a9:54:cc:e1:87:2b:af:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 07:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca47795baa8ff1c219200f56794eac506a7d7a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:5f:80:a3:28:e7:35:b2:d9:22:8b:a6:8b:
cb:50:c4:8c:fe:da:fd:5e:47:82:34:cb:e8:21:a2:
e7:20:0f:7c:ec:b5:37:7a:35:79:38:a4:71:f3:ae:
af:10:0f:f7:d8:4a:4a:22:6f:e8:4a:7d:c0:e4:a3:
6d:0b:d6:1b:18:0d:e4:4a:bf:c9:6d:15:61:ef:d2:
71:05:27:98:bf:da:17:a1:79:b0:5c:36:f0:72:9e:
be:86:e8:1c:00:5d:68:41:fe:39:9e:82:f8:75:2f:
d5:0a:62:39:7e:c8:78:f8:60:3e:f2:cf:61:34:f3:
4f:7a:de:88:7a:a9:cc:98:72:ea:6a:90:31:4a:f8:
b6:52:0f:bd:13:ef:d0:23:ee:19:78:cd:36:f8:f5:
3d:fd:39:9c:ff:c1:78:2e:19:8b:c5:5b:5f:3a:bc:
96:c6:11:5d:14:cb:d5:6e:de:36:2c:52:f5:a3:d2:
bb:c2:9f:e3:e0:1c:8c:b1:47:d4:cd:93:c7:d5:c6:
ee:4b:2a:92:34:17:f9:71:b1:b0:f9:89:10:c6:54:
f8:9f:e7:76:14:36:18:95:fb:80:9b:f7:47:56:b9:
e3:58:b8:ba:2d:7e:fc:08:8d:ae:d5:02:fd:10:65:
24:7a:db:b4:bb:df:0e:0d:7e:19:3e:4c:8b:db:7c:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:79:5B:AA:8F:F1:C2:19:20:0F:56:79:4E:AC:50:6A:7D:7A:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/HYSP/15
RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/15/CA47795BAA8FF1C219200F56794EAC506A7D7A61.mft
RPKI Notify - URI:https://rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49867
Signature Algorithm: sha256WithRSAEncryption
26:f1:60:ea:1b:9d:58:98:47:11:70:67:a7:40:4c:c6:20:ff:
64:ca:54:e5:bf:13:f4:b5:82:9e:c1:16:28:a3:31:a6:1e:2b:
52:16:81:c8:a1:76:3d:02:54:79:6f:1c:09:fd:83:7c:80:a1:
97:6f:bb:39:34:c8:81:bd:0a:ed:df:cc:93:45:8c:81:29:c0:
e8:5a:e1:54:07:42:42:35:fd:98:bb:48:9a:4a:4b:ec:9e:b2:
78:e0:37:f3:2a:18:b8:ea:7e:4a:21:d5:86:2c:95:7b:03:63:
91:85:cd:8e:a7:d1:7f:45:d4:33:4a:50:4a:89:b8:4b:74:42:
2c:d5:13:88:3f:f7:d6:23:37:9b:dd:ab:3f:34:c8:3b:a8:da:
c1:99:87:d5:8b:b3:81:a9:0e:43:e3:fc:2a:54:df:ed:36:41:
15:01:3e:89:54:dd:8e:37:50:74:9f:a6:b1:34:31:8d:81:cb:
3e:5e:dc:ea:9b:21:ad:62:d2:f8:b3:4e:7b:a5:b7:52:3a:32:
91:ba:2e:04:5f:11:6a:c5:d6:a0:9b:79:21:a2:59:0c:fe:38:
29:a4:90:f2:07:9f:cc:4f:93:d6:82:4c:4c:87:aa:39:f4:90:
c4:4c:a0:d1:15:94:21:3a:fb:39:af:b1:c5:bc:37:73:31:9e:
cd:24:79:c3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYdfwWJjw3cXEKlUzOGHK6+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNDA4MDcyNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTQ3Nzk1YmFhOGZmMWMyMTkyMDBmNTY3OTRlYWM1MDZhN2Q3YTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jtfgKMo5zWy2SKLpovLUMSM/tr9
XkeCNMvoIaLnIA987LU3ejV5OKRx866vEA/32EpKIm/oSn3A5KNtC9YbGA3kSr/J
bRVh79JxBSeYv9oXoXmwXDbwcp6+hugcAF1oQf45noL4dS/VCmI5fsh4+GA+8s9h
NPNPet6IeqnMmHLqapAxSvi2Ug+9E+/QI+4ZeM02+PU9/Tmc/8F4LhmLxVtfOryW
xhFdFMvVbt42LFL1o9K7wp/j4ByMsUfUzZPH1cbuSyqSNBf5cbGw+YkQxlT4n+d2
FDYYlfuAm/dHVrnjWLi6LX78CI2u1QL9EGUketu0u98ODX4ZPkyL23xEFwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFMpHeVuqj/HCGSAPVnlOrFBqfXphMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgcQGCCsGAQUFBwELBIG3MIG0MCgGCCsGAQUFBzAFhhxyc3lu
YzovL3Jwa2kuY28vcmVwby9IWVNQLzE1MFUGCCsGAQUFBzAKhklyc3luYzovL3Jw
a2kuY28vcmVwby9IWVNQLzE1L0NBNDc3OTVCQUE4RkYxQzIxOTIwMEY1Njc5NEVB
QzUwNkE3RDdBNjEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY28vcnJk
cC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDCyzANBgkqhkiG9w0BAQsFAAOCAQEAJvFg6hudWJhH
EXBnp0BMxiD/ZMpU5b8T9LWCnsEWKKMxph4rUhaByKF2PQJUeW8cCf2DfIChl2+7
OTTIgb0K7d/Mk0WMgSnA6FrhVAdCQjX9mLtImkpL7J6yeOA38yoYuOp+SiHVhiyV
ewNjkYXNjqfRf0XUM0pQSom4S3RCLNUTiD/31iM3m92rPzTIO6jawZmH1YuzgakO
Q+P8KlTf7TZBFQE+iVTdjjdQdJ+msTQxjYHLPl7c6pshrWLS+LNOe6W3Ujoykbou
BF8RasXWoJt5IaJZDP44KaSQ8gefzE+T1oJMTIeqOfSQxEyg0RWUITr7Oa+xxbw3
czGezSR5ww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:31 2024 by rpki-client on console-ams.rpki-client.org