Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YaSSUXQO-IW3jvzGJO8R975O9aM.cer
File: YaSSUXQO-IW3jvzGJO8R975O9aM.cer (raw, json)
Hash identifier: YXUYbhxjWqCe/aQit3qca3IswBOgBQ9ryF8HfI3elXU=
Subject key identifier: 61:A4:92:51:74:0E:F8:85:B7:8E:FC:C6:24:EF:11:F7:BE:4E:F5:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01921F652D64CDF98227A6458C84FD70ABC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a1c3d62e-84f0-44fd-b843-b3fc4a02804a/0/61A49251740EF885B78EFCC624EF11F7BE4EF5A3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a1c3d62e-84f0-44fd-b843-b3fc4a02804a/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 23 Sep 2024 14:59:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214223
Validation: Failed, certificate revoked on Mon 23 Sep 2024 15:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:65:2d:64:cd:f9:82:27:a6:45:8c:84:fd:70:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 14:59:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61a49251740ef885b78efcc624ef11f7be4ef5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1e:13:2e:0e:53:79:21:35:83:10:7b:90:54:
96:cb:3d:4b:e6:f3:c2:4f:39:a3:bf:a3:73:ab:5b:
c7:54:10:cc:95:fe:37:f4:49:55:5b:05:17:6d:fa:
6a:82:1f:c9:71:00:0d:96:32:8f:2e:e0:94:8a:03:
e7:8a:de:cc:75:8c:77:8e:c0:4a:6a:2c:ed:a6:8d:
5d:76:43:4f:05:5a:b1:b1:46:14:e7:0a:80:40:00:
94:07:c8:18:27:5d:5d:02:cf:e2:88:a6:61:4c:2b:
45:bb:83:c4:40:d2:e0:d7:59:f4:00:9e:21:ad:1e:
7f:e0:e0:78:7c:3e:08:86:d7:49:48:5c:07:0a:88:
a4:3d:d4:36:db:63:fd:43:9a:98:39:39:9f:14:ee:
15:ed:24:85:5c:5e:a8:03:67:ff:70:c5:13:e5:b1:
43:f9:ee:0c:e9:55:c7:c2:38:92:68:f4:14:15:61:
8f:12:93:64:5a:57:2b:75:88:6c:5f:ab:69:b1:2e:
28:85:9d:73:78:6c:65:b6:3f:1e:e9:e5:df:62:6d:
95:59:8b:72:c7:9c:70:31:59:18:55:4f:c2:05:44:
d6:e1:56:0b:f9:24:87:e8:a1:fd:bc:5c:cd:93:a6:
75:0e:e5:67:16:5d:61:85:5a:c6:9d:cd:84:9c:01:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:92:51:74:0E:F8:85:B7:8E:FC:C6:24:EF:11:F7:BE:4E:F5:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a1c3d62e-84f0-44fd-b843-b3fc4a02804a/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a1c3d62e-84f0-44fd-b843-b3fc4a02804a/0/61A49251740EF885B78EFCC624EF11F7BE4EF5A3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214223
Signature Algorithm: sha256WithRSAEncryption
4d:07:58:71:89:83:4e:d6:8d:bc:1d:68:c7:50:9d:85:ed:68:
1b:50:2d:3a:46:26:f3:95:eb:c9:d5:fd:81:51:01:08:6d:60:
fe:df:10:e9:1a:0b:bb:14:b3:df:ec:d2:00:32:58:a7:2e:ca:
99:f7:d2:25:77:5c:22:31:e5:8c:89:59:3e:f7:4b:01:14:19:
43:25:3d:2f:8e:08:b5:5b:1c:bf:56:d9:29:e0:6f:e1:84:94:
dc:63:03:2f:f5:10:a1:6f:89:46:ae:0e:ba:12:0a:67:13:7b:
f1:1c:6d:7a:89:d9:50:fd:0a:71:96:39:64:e6:3e:b6:82:8c:
4a:f7:40:68:fc:99:e7:78:78:05:c1:e2:ce:06:bd:6d:48:b1:
ed:44:b8:85:a5:f4:d9:cb:26:40:d7:41:99:f1:31:80:fe:59:
06:2d:98:cf:5b:1d:62:e8:15:99:39:bb:f3:db:a2:f3:7c:e6:
60:09:1d:e8:15:59:09:60:f9:17:6e:c4:a1:81:8c:c6:77:b8:
df:f6:2c:3d:5e:eb:ee:60:ef:a1:df:ad:aa:e8:d8:0b:f8:f5:
4b:35:ba:40:b8:1f:9e:f9:da:f3:ab:20:a7:39:e0:12:4e:27:
4a:04:27:b7:d3:7f:95:4b:4d:24:cb:68:3f:4a:c4:e1:ba:63:
0e:dd:6f:f9
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZIfZS1kzfmCJ6ZFjIT9cKvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTIzMTQ1OTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWE0OTI1MTc0MGVmODg1Yjc4ZWZjYzYyNGVmMTFmN2JlNGVmNWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh4TLg5TeSE1gxB7kFSWyz1L5vPC
Tzmjv6Nzq1vHVBDMlf439ElVWwUXbfpqgh/JcQANljKPLuCUigPnit7MdYx3jsBK
aiztpo1ddkNPBVqxsUYU5wqAQACUB8gYJ11dAs/iiKZhTCtFu4PEQNLg11n0AJ4h
rR5/4OB4fD4IhtdJSFwHCoikPdQ222P9Q5qYOTmfFO4V7SSFXF6oA2f/cMUT5bFD
+e4M6VXHwjiSaPQUFWGPEpNkWlcrdYhsX6tpsS4ohZ1zeGxltj8e6eXfYm2VWYty
x5xwMVkYVU/CBUTW4VYL+SSH6KH9vFzNk6Z1DuVnFl1hhVrGnc2EnAEsPQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFGGkklF0DviFt478xiTvEfe+TvWjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ExYzNk
NjJlLTg0ZjAtNDRmZC1iODQzLWIzZmM0YTAyODA0YS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTFj
M2Q2MmUtODRmMC00NGZkLWI4NDMtYjNmYzRhMDI4MDRhLzAvNjFBNDkyNTE3NDBF
Rjg4NUI3OEVGQ0M2MjRFRjExRjdCRTRFRjVBMy5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRM8w
DQYJKoZIhvcNAQELBQADggEBAE0HWHGJg07WjbwdaMdQnYXtaBtQLTpGJvOV68nV
/YFRAQhtYP7fEOkaC7sUs9/s0gAyWKcuypn30iV3XCIx5YyJWT73SwEUGUMlPS+O
CLVbHL9W2Sngb+GElNxjAy/1EKFviUauDroSCmcTe/EcbXqJ2VD9CnGWOWTmPraC
jEr3QGj8med4eAXB4s4GvW1Ise1EuIWl9NnLJkDXQZnxMYD+WQYtmM9bHWLoFZk5
u/PbovN85mAJHegVWQlg+RduxKGBjMZ3uN/2LD1e6+5g76Hfraro2Av49Us1ukC4
H5752vOrIKc54BJOJ0oEJ7fTf5VLTSTLaD9KxOG6Yw7db/k=
-----END CERTIFICATE-----
Generated at Mon May 12 02:16:09 2025 by rpki-client