Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ywvqERk8jNC3QK8td3Da5S5s4HY.cer
File: ywvqERk8jNC3QK8td3Da5S5s4HY.cer (raw, json)
Hash identifier: 1BPhYGedSHHQ3L9VvjyMw6eBwx9+FW5DwIc2zutd9pg=
Subject key identifier: CB:0B:EA:11:19:3C:8C:D0:B7:40:AF:2D:77:70:DA:E5:2E:6C:E0:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E066502F85FBEF62DC9EA800265454198
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/21fb547e-2a3d-46a0-a5f2-4edd0950c83c/0/CB0BEA11193C8CD0B740AF2D7770DAE52E6CE076.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/21fb547e-2a3d-46a0-a5f2-4edd0950c83c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 03 Mar 2024 22:17:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48752
AS: 202197
Validation: Failed, certificate revoked on Mon 01 Apr 2024 22:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:06:65:02:f8:5f:be:f6:2d:c9:ea:80:02:65:45:41:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 3 22:17:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb0bea11193c8cd0b740af2d7770dae52e6ce076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:5e:96:b2:22:7e:df:f8:a3:a9:6f:fe:2b:
e0:b2:0e:f4:a0:04:c7:82:6a:68:6e:49:e1:a9:be:
53:f4:23:63:d5:d2:95:38:6e:d7:be:24:a3:e7:8b:
be:09:fe:43:0e:5c:41:d7:67:90:95:59:ea:b5:2e:
e5:ca:6b:e6:9e:87:1c:d5:6e:2e:e5:74:db:ef:08:
b1:18:d0:ea:59:f6:b4:65:23:8f:e3:ce:97:02:f4:
c6:e5:97:33:91:b9:8d:28:18:ed:f7:6c:f8:fe:c8:
30:7b:64:84:43:ab:f6:86:02:e5:11:23:9b:91:a9:
05:9b:4c:0a:01:8b:3b:ec:d1:bf:f2:b4:04:8d:0a:
e7:97:06:3d:2a:97:14:00:60:bd:d3:b4:84:38:81:
9f:e2:a8:0f:ab:7c:03:72:f6:6b:d3:bb:40:f9:d0:
87:17:59:f2:e9:0d:91:28:57:36:2f:c8:79:b7:8d:
23:7c:a1:f5:6d:a7:4a:d6:d6:6a:ea:d3:b2:a5:21:
ec:b2:5d:e6:0c:7c:d6:a1:d3:79:f3:52:af:8c:96:
3b:fe:10:a3:05:b3:b0:de:6d:c4:e3:23:fd:85:9e:
4c:e5:72:ee:60:20:25:74:5b:1a:f5:f3:ac:af:f4:
01:9d:e5:90:7e:d2:21:f9:81:bf:e9:3e:b7:11:f5:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0B:EA:11:19:3C:8C:D0:B7:40:AF:2D:77:70:DA:E5:2E:6C:E0:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/21fb547e-2a3d-46a0-a5f2-4edd0950c83c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/21fb547e-2a3d-46a0-a5f2-4edd0950c83c/0/CB0BEA11193C8CD0B740AF2D7770DAE52E6CE076.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48752
202197
Signature Algorithm: sha256WithRSAEncryption
10:4e:a7:0d:3d:31:84:38:f9:67:83:1e:22:a3:0e:bd:01:56:
6f:b3:93:00:35:53:01:1e:a7:0e:7e:f6:4c:87:dd:10:db:7f:
0f:1f:9b:29:8c:e5:5c:38:a6:36:1a:bd:5c:f1:3a:46:58:ca:
92:c6:05:6b:e8:c4:e4:e9:b2:4b:ab:1a:51:83:67:fa:6e:4f:
64:3c:1f:0c:45:bc:94:88:cc:4b:0e:52:62:da:fa:b3:ab:c8:
13:ae:ef:05:f0:ab:c8:b5:be:70:29:38:ca:e5:b9:5a:05:1e:
6a:43:71:93:fb:b0:c5:41:bc:b4:1c:56:ae:16:42:03:a5:77:
3c:30:7b:d8:59:6b:78:60:c0:bb:51:4a:42:81:e7:ee:31:26:
3e:c5:a4:99:1e:63:26:9b:a6:37:98:71:5c:b3:cb:7e:bc:21:
1d:c3:f3:01:9f:09:f0:cf:0e:6d:ad:2a:72:71:10:4d:73:2b:
9b:e2:6e:bf:8f:74:2b:97:11:37:05:15:0e:96:4f:3e:46:ba:
e7:1c:4e:9b:7e:d5:15:27:d2:74:8e:06:fc:f4:38:87:fe:f2:
8d:4d:da:e2:c9:16:5e:4c:9c:1c:8f:c7:a4:a9:3f:2f:3c:cc:
25:3e:ad:19:ac:b8:ae:4b:9d:7c:03:22:7f:d9:8a:17:a8:50:
0d:0d:27:df
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAY4GZQL4X772LcnqgAJlRUGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzAzMjIxNzQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjBiZWExMTE5M2M4Y2QwYjc0MGFmMmQ3NzcwZGFlNTJlNmNlMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGRelrIift/4o6lv/ivgsg70oATH
gmpobknhqb5T9CNj1dKVOG7XviSj54u+Cf5DDlxB12eQlVnqtS7lymvmnocc1W4u
5XTb7wixGNDqWfa0ZSOP486XAvTG5ZczkbmNKBjt92z4/sgwe2SEQ6v2hgLlESOb
kakFm0wKAYs77NG/8rQEjQrnlwY9KpcUAGC907SEOIGf4qgPq3wDcvZr07tA+dCH
F1ny6Q2RKFc2L8h5t40jfKH1badK1tZq6tOypSHssl3mDHzWodN581KvjJY7/hCj
BbOw3m3E4yP9hZ5M5XLuYCAldFsa9fOsr/QBneWQftIh+YG/6T63EfUzCwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFMsL6hEZPIzQt0CvLXdw2uUubOB2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIxZmI1
NDdlLTJhM2QtNDZhMC1hNWYyLTRlZGQwOTUwYzgzYy8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjFm
YjU0N2UtMmEzZC00NmEwLWE1ZjItNGVkZDA5NTBjODNjLzAvQ0IwQkVBMTExOTND
OENEMEI3NDBBRjJENzc3MERBRTUyRTZDRTA3Ni5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAvnAC
AwMV1TANBgkqhkiG9w0BAQsFAAOCAQEAEE6nDT0xhDj5Z4MeIqMOvQFWb7OTADVT
AR6nDn72TIfdENt/Dx+bKYzlXDimNhq9XPE6RljKksYFa+jE5OmyS6saUYNn+m5P
ZDwfDEW8lIjMSw5SYtr6s6vIE67vBfCryLW+cCk4yuW5WgUeakNxk/uwxUG8tBxW
rhZCA6V3PDB72FlreGDAu1FKQoHn7jEmPsWkmR5jJpumN5hxXLPLfrwhHcPzAZ8J
8M8Oba0qcnEQTXMrm+Juv490K5cRNwUVDpZPPka65xxOm37VFSfSdI4G/PQ4h/7y
jU3a4skWXkycHI/HpKk/LzzMJT6tGay4rkudfAMif9mKF6hQDQ0n3w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:12 2024 by rpki-client on console-fra.rpki-client.org