Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PfmAFzKUktYiKfSkwd14K4fyewE.cer
File: PfmAFzKUktYiKfSkwd14K4fyewE.cer (raw, json)
Hash identifier: YU8lwB+z+qDr327/ppPWhPihRg1+TNUY2fRLNY23o8s=
Subject key identifier: 3D:F9:80:17:32:94:92:D6:22:29:F4:A4:C1:DD:78:2B:87:F2:7B:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C70DC6D41F43F803FCA15532030BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/3DF98017329492D62229F4A4C1DD782B87F27B01.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.140.246.0/24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 14:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:70:dc:6d:41:f4:3f:80:3f:ca:15:53:20:30:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3df98017329492d62229f4a4c1dd782b87f27b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:16:92:e2:7c:55:33:3d:76:2a:24:51:74:
57:07:7c:1b:74:eb:98:0f:55:a3:ef:1d:19:ee:57:
48:34:6d:fa:0b:12:36:0c:5b:69:a7:7b:39:23:d8:
80:3c:7a:cf:50:cc:fb:67:bc:76:eb:2b:92:02:2a:
81:fe:7f:ee:4b:9a:73:42:a4:a1:b9:70:56:13:88:
d0:f4:95:19:cf:2e:b9:ef:2f:b5:da:8c:66:68:23:
a3:f5:0d:0d:c9:81:8f:07:f5:61:e9:3f:a5:38:ac:
01:b0:cb:d0:44:bf:5d:ac:04:c8:da:75:d5:aa:b4:
1b:d6:09:5d:c5:01:f3:eb:75:19:9e:e1:76:35:51:
f8:74:0d:d7:17:49:23:6e:37:da:9e:2d:45:d3:59:
24:c2:2b:0a:65:5b:d1:e4:3a:96:f1:8b:62:4b:53:
87:d8:92:3e:33:c7:c5:bf:b3:d9:6f:ac:f5:f2:8c:
59:76:58:95:18:de:5c:60:1d:17:f1:c0:5d:41:5d:
90:88:73:b1:96:7d:c1:18:3c:e7:ba:f8:37:1e:6a:
26:9b:8e:ad:90:00:8c:7c:3e:1a:3f:cf:1d:c8:2d:
7e:92:fd:7d:82:68:6b:c6:96:41:5b:ef:ac:41:b1:
1e:e1:bf:76:31:c6:08:09:63:db:a7:71:52:e7:5c:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F9:80:17:32:94:92:D6:22:29:F4:A4:C1:DD:78:2B:87:F2:7B:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/3DF98017329492D62229F4A4C1DD782B87F27B01.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a9:8d:96:86:f4:7a:ea:92:38:f3:0b:c1:f7:4d:ff:d6:82:
e2:80:a8:8a:40:a6:c3:ea:2b:3d:98:a7:d0:1d:39:0b:67:95:
fb:3d:cb:37:81:ca:a7:46:ac:86:b2:fb:03:ce:f4:ee:74:90:
9d:5f:0a:bf:a4:30:c0:65:48:0c:4b:95:b8:b7:0e:d2:f2:c3:
c9:d1:83:e5:f8:9c:dd:31:ef:65:13:87:0e:68:9c:15:0c:fa:
21:46:ea:36:88:61:b2:87:f7:6f:d6:f8:a3:0b:8e:10:52:e1:
45:88:ce:30:8a:57:89:9e:6b:35:ea:24:40:57:9f:f5:04:12:
c6:d8:2c:cb:15:f7:58:fd:cb:bb:a3:dc:96:27:8a:d9:20:d2:
03:46:ad:42:f1:b3:c1:75:58:00:b6:a1:25:b9:3d:4e:65:0e:
07:b7:b2:27:9f:69:20:5d:30:32:29:cc:d4:ba:4f:4f:5d:f0:
e3:87:7b:5f:8e:d7:ed:d7:0f:15:37:d3:42:92:d4:2b:55:26:
12:2b:9b:5d:5d:ae:8c:f1:b1:75:1e:78:0a:7e:18:56:5a:dc:
19:43:f3:b4:70:5c:53:d9:be:47:3d:fb:b1:d1:7c:68:48:a6:
41:2f:eb:5f:49:9e:92:74:d6:0c:d2:5e:0d:16:b5:57:15:1d:
cb:8d:d9:79
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYciLHDcbUH0P4A/yhVTIDC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzI3MDgyNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGY5ODAxNzMyOTQ5MmQ2MjIyOWY0YTRjMWRkNzgyYjg3ZjI3YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sMWkuJ8VTM9diokUXRXB3wbdOuY
D1Wj7x0Z7ldING36CxI2DFtpp3s5I9iAPHrPUMz7Z7x26yuSAiqB/n/uS5pzQqSh
uXBWE4jQ9JUZzy657y+12oxmaCOj9Q0NyYGPB/Vh6T+lOKwBsMvQRL9drATI2nXV
qrQb1gldxQHz63UZnuF2NVH4dA3XF0kjbjfani1F01kkwisKZVvR5DqW8YtiS1OH
2JI+M8fFv7PZb6z18oxZdliVGN5cYB0X8cBdQV2QiHOxln3BGDznuvg3Hmomm46t
kACMfD4aP88dyC1+kv19gmhrxpZBW++sQbEe4b92McYICWPbp3FS51x44wIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFD35gBcylJLWIin0pMHdeCuH8nsBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFDBggrBgEFBQcBCwSCATUwggExMGAGCCsGAQUFBzAFhlRy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcw
OGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBiOTlhZi8yMTAwgY4GCCsGAQUFBzAK
hoGBcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9m
ZTM3MDhhMC02N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5YWYvMjEwLzNERjk4MDE3
MzI5NDkyRDYyMjI5RjRBNEMxREQ3ODJCODdGMjdCMDEubWZ0MDwGCCsGAQUFBzAN
hjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54
bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAljPYwDQYJKoZIhvcNAQELBQADggEBAHqpjZaG9HrqkjjzC8H3Tf/WguKA
qIpApsPqKz2Yp9AdOQtnlfs9yzeByqdGrIay+wPO9O50kJ1fCr+kMMBlSAxLlbi3
DtLyw8nRg+X4nN0x72UThw5onBUM+iFG6jaIYbKH92/W+KMLjhBS4UWIzjCKV4me
azXqJEBXn/UEEsbYLMsV91j9y7uj3JYnitkg0gNGrULxs8F1WAC2oSW5PU5lDge3
siefaSBdMDIpzNS6T09d8OOHe1+O1+3XDxU300KS1CtVJhIrm11drozxsXUeeAp+
GFZa3BlD87RwXFPZvkc9+7HRfGhIpkEv619JnpJ01gzSXg0WtVcVHcuN2Xk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:59 2024 by rpki-client on console-ams.rpki-client.org