Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ynuu65BQLckxajUSFYbsObcgo9w.cer
File: ynuu65BQLckxajUSFYbsObcgo9w.cer (raw, json)
Hash identifier: s4VzeqdIYURJl8glbYow+5Cdu4dgzGKyaTzI0wA9oxk=
Subject key identifier: CA:7B:AE:EB:90:50:2D:C9:31:6A:35:12:15:86:EC:39:B7:20:A3:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF5354FB5DF306F02BE5294E446609C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/3e651d-10e8-46b6-8a9b-330570dfdcfd/1/ynuu65BQLckxajUSFYbsObcgo9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/3e651d-10e8-46b6-8a9b-330570dfdcfd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.247.169.0/24
IP: 2a11:c440::/29
Validation: Failed, certificate revoked on Fri 27 Oct 2023 11:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:35:4f:b5:df:30:6f:02:be:52:94:e4:46:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca7baeeb90502dc9316a35121586ec39b720a3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:95:09:84:1d:c1:26:62:c7:9d:69:b6:9c:
bd:ed:1e:32:14:7f:c1:8a:65:ba:76:ee:16:ed:11:
72:5f:76:6e:75:7f:a7:49:ba:43:fe:00:06:11:51:
01:f3:34:7d:c1:81:38:a8:86:60:5a:db:cf:e3:98:
16:e8:ee:6a:26:db:fc:fd:51:a8:04:d1:01:22:e9:
08:ed:7a:30:4a:ad:0d:b1:1a:43:63:60:81:b7:f2:
b4:bb:c2:d8:0e:1b:c0:6b:79:8d:dc:d9:b4:59:18:
11:74:b3:02:9d:1c:fb:82:d0:91:36:ad:15:6c:20:
94:ff:63:e9:45:34:64:93:70:b7:3b:e3:29:b2:95:
a3:f6:3e:7b:ed:68:ee:ab:ec:aa:cd:2a:3a:0a:c6:
37:00:aa:c4:37:e5:3d:36:2f:f5:ad:ff:0c:fa:eb:
8f:d7:4d:63:5d:9f:a6:b0:a8:c6:39:97:70:aa:d9:
72:dd:04:e7:59:2b:1f:bf:2c:81:76:79:5a:7a:10:
56:5e:0a:01:45:eb:9d:ef:08:76:60:5b:7a:f6:1b:
22:6e:41:60:cd:14:bc:52:22:30:02:ab:06:c0:b0:
b1:63:f7:3d:09:26:a4:30:d9:0b:da:9a:09:7b:7d:
be:7f:bf:8d:eb:e4:98:c3:44:40:f5:4e:99:70:33:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:AE:EB:90:50:2D:C9:31:6A:35:12:15:86:EC:39:B7:20:A3:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3e651d-10e8-46b6-8a9b-330570dfdcfd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3e651d-10e8-46b6-8a9b-330570dfdcfd/1/ynuu65BQLckxajUSFYbsObcgo9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.169.0/24
IPv6:
2a11:c440::/29
Signature Algorithm: sha256WithRSAEncryption
28:0d:be:4c:50:a7:a7:f8:e1:24:f3:20:f7:67:85:23:dd:c6:
2b:64:a9:66:f7:27:7b:83:1a:e5:c4:af:bc:ca:26:02:bd:49:
d1:2f:7a:6d:53:5f:bc:a7:61:5f:27:5b:f5:09:f9:0b:cc:ea:
06:c1:74:a1:83:80:54:38:d5:c7:ec:44:43:ec:4b:87:c8:79:
84:57:d2:3f:59:b7:fe:91:5e:b9:98:3c:8a:8e:b6:33:90:3d:
d6:8f:4f:ec:19:4f:c8:61:35:25:31:6d:19:0a:ac:ce:20:ac:
d4:f9:09:b9:63:12:c2:a3:8f:b7:bf:12:a7:fa:ee:e6:e7:4e:
72:e4:5f:7d:24:8d:13:c6:56:4e:4f:fb:cc:35:f1:c8:80:0d:
49:74:cb:9f:73:91:00:41:9b:65:c5:c2:35:a9:55:28:9c:ea:
a0:4e:78:52:0f:4d:4a:16:25:0c:16:27:e9:8b:5e:2d:f7:25:
ac:93:95:da:9f:ef:6f:7d:1f:c6:ec:79:89:49:6a:95:e4:91:
ab:01:03:c8:3a:70:fd:fd:bd:14:1e:13:e6:a5:47:f8:fc:56:
de:f0:06:a1:9e:d1:d5:69:aa:9a:3a:04:38:0c:1e:83:31:e5:
1f:ce:c1:9b:f3:c2:87:e0:46:5b:d5:22:90:77:c3:c5:8c:1a:
89:70:e4:63
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVq9TVPtd8wbwK+UpTkRmCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTdiYWVlYjkwNTAyZGM5MzE2YTM1MTIxNTg2ZWMzOWI3MjBhM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnheVCYQdwSZix51ptpy97R4yFH/B
imW6du4W7RFyX3ZudX+nSbpD/gAGEVEB8zR9wYE4qIZgWtvP45gW6O5qJtv8/VGo
BNEBIukI7XowSq0NsRpDY2CBt/K0u8LYDhvAa3mN3Nm0WRgRdLMCnRz7gtCRNq0V
bCCU/2PpRTRkk3C3O+MpspWj9j577Wjuq+yqzSo6CsY3AKrEN+U9Ni/1rf8M+uuP
101jXZ+msKjGOZdwqtly3QTnWSsfvyyBdnlaehBWXgoBReud7wh2YFt69hsibkFg
zRS8UiIwAqsGwLCxY/c9CSakMNkL2poJe32+f7+N6+SYw0RA9U6ZcDNqOQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMp7ruuQUC3JMWo1EhWG7Dm3IKPcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzNlNjUx
ZC0xMGU4LTQ2YjYtOGE5Yi0zMzA1NzBkZmRjZmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvM2U2NTFk
LTEwZTgtNDZiNi04YTliLTMzMDU3MGRmZGNmZC8xL3ludXU2NUJRTGNreGFqVVNG
WWJzT2JjZ285dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW/epMA0EAgACMAcDBQMqEcRAMA0GCSqGSIb3
DQEBCwUAA4IBAQAoDb5MUKen+OEk8yD3Z4Uj3cYrZKlm9yd7gxrlxK+8yiYCvUnR
L3ptU1+8p2FfJ1v1CfkLzOoGwXShg4BUONXH7ERD7EuHyHmEV9I/Wbf+kV65mDyK
jrYzkD3Wj0/sGU/IYTUlMW0ZCqzOIKzU+Qm5YxLCo4+3vxKn+u7m505y5F99JI0T
xlZOT/vMNfHIgA1JdMufc5EAQZtlxcI1qVUonOqgTnhSD01KFiUMFifpi14t9yWs
k5Xan+9vfR/G7HmJSWqV5JGrAQPIOnD9/b0UHhPmpUf4/Fbe8AahntHVaaqaOgQ4
DB6DMeUfzsGb88KH4EZb1SKQd8PFjBqJcORj
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:11 2024 by rpki-client on console-fra.rpki-client.org