Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pm4Qt3l69HA1Fd-GTrIB9_KaXoY.cer
File: Pm4Qt3l69HA1Fd-GTrIB9_KaXoY.cer (raw, json)
Hash identifier: srDLj/GmR2WSB8no/5Z2QY6VJcSz8ToulRYEDiioy8o=
Subject key identifier: 3E:6E:10:B7:79:7A:F4:70:35:15:DF:86:4E:B2:01:F7:F2:9A:5E:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F029915C3DBABE7ADFC32DD7D4DB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/6f01bb-2834-4d70-ba47-6c273b22ae31/1/Pm4Qt3l69HA1Fd-GTrIB9_KaXoY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/6f01bb-2834-4d70-ba47-6c273b22ae31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.132.36.0/22
IP: 2a0d:a4c0::/29
Validation: Failed, certificate revoked on Mon 27 Nov 2023 09:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:02:99:15:c3:db:ab:e7:ad:fc:32:dd:7d:4d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e6e10b7797af4703515df864eb201f7f29a5e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:75:b4:be:85:05:10:91:05:81:ea:ac:a2:
18:57:29:20:af:85:60:21:73:d6:ef:a7:28:1f:ee:
16:62:36:b2:ea:f0:9b:6e:16:44:09:96:ae:6c:2e:
b2:61:21:51:12:05:f5:6c:1f:15:40:e4:3a:1e:dd:
cf:d3:34:fb:ed:43:f1:3a:e5:90:94:2e:d7:d2:99:
f3:23:d8:21:5a:fe:62:90:1e:03:47:67:e1:ac:1f:
8a:36:1d:2d:da:68:bd:37:73:93:a1:78:c3:a2:e6:
c7:44:0e:59:9c:e1:b2:4c:30:65:1a:35:da:2b:7d:
79:d3:0b:ab:aa:a0:58:93:f1:59:df:0e:9d:10:38:
7b:5b:d6:65:d8:17:47:60:d1:6b:64:6e:e2:96:79:
c5:18:5a:03:59:d3:46:cd:02:4e:a3:98:f0:64:b4:
76:aa:43:c0:34:d9:bd:10:f7:c6:50:5a:60:15:84:
20:4f:36:50:40:68:e9:88:51:69:44:10:3b:30:8a:
3d:be:e1:e9:b1:cc:29:99:6c:aa:34:d5:a5:38:8e:
4d:0c:bc:af:4c:2d:e8:03:cc:62:60:ec:93:f4:d9:
3a:9f:e5:89:03:ea:f9:a3:10:7a:a4:a4:26:5b:2d:
3c:ee:22:ff:a2:d4:80:94:b1:32:4e:97:7c:a0:1d:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6E:10:B7:79:7A:F4:70:35:15:DF:86:4E:B2:01:F7:F2:9A:5E:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6f01bb-2834-4d70-ba47-6c273b22ae31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6f01bb-2834-4d70-ba47-6c273b22ae31/1/Pm4Qt3l69HA1Fd-GTrIB9_KaXoY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.36.0/22
IPv6:
2a0d:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:32:9a:f7:7e:81:59:ba:50:fa:ed:10:53:72:a9:74:92:91:
3b:ab:fb:14:62:10:c9:a7:75:fb:9f:95:6d:47:67:d3:2c:e2:
4a:9b:2c:38:4f:d8:e9:ab:47:4a:fd:23:76:04:e0:b7:dc:ad:
0c:69:92:8a:1a:c7:3a:c7:3b:0c:6c:6a:e9:82:8d:7a:28:0e:
a9:cc:e5:b8:4e:8b:80:de:cb:f8:f8:f7:c5:55:38:c0:2a:1d:
d1:e5:5f:61:e7:f8:7e:a9:1e:88:f3:3b:a4:7b:e0:39:68:26:
19:63:a9:03:f3:84:54:79:fc:06:74:b0:6c:75:ad:2c:57:33:
f4:c4:53:4d:48:1a:95:f9:a9:8b:f0:42:65:f1:03:a1:90:83:
20:ff:d5:ad:bb:53:08:78:53:eb:48:7f:d6:51:16:9f:26:67:
4c:47:ec:3a:78:7b:0f:09:92:28:8b:0f:61:b3:70:98:65:37:
e0:f8:1d:25:fe:68:d8:b3:b0:f7:b4:91:c6:9a:11:65:79:c5:
b5:e2:cd:f3:d2:13:71:50:31:58:76:57:60:b8:f3:57:73:86:
67:21:ff:69:8d:2e:94:9e:2b:57:e5:61:dd:24:5b:26:52:cd:
b4:2f:d5:ec:a5:d9:ec:d0:9e:53:cb:9c:24:3d:3b:7f:a5:e3:
0e:b5:28:82
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVsPwKZFcPbq+et/DLdfU2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDczMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTZlMTBiNzc5N2FmNDcwMzUxNWRmODY0ZWIyMDFmN2YyOWE1ZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGV1tL6FBRCRBYHqrKIYVykgr4Vg
IXPW76coH+4WYjay6vCbbhZECZaubC6yYSFREgX1bB8VQOQ6Ht3P0zT77UPxOuWQ
lC7X0pnzI9ghWv5ikB4DR2fhrB+KNh0t2mi9N3OToXjDoubHRA5ZnOGyTDBlGjXa
K3150wurqqBYk/FZ3w6dEDh7W9Zl2BdHYNFrZG7ilnnFGFoDWdNGzQJOo5jwZLR2
qkPANNm9EPfGUFpgFYQgTzZQQGjpiFFpRBA7MIo9vuHpscwpmWyqNNWlOI5NDLyv
TC3oA8xiYOyT9Nk6n+WJA+r5oxB6pKQmWy087iL/otSAlLEyTpd8oB21JQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFD5uELd5evRwNRXfhk6yAffyml6GMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzZmMDFi
Yi0yODM0LTRkNzAtYmE0Ny02YzI3M2IyMmFlMzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNmYwMWJi
LTI4MzQtNGQ3MC1iYTQ3LTZjMjczYjIyYWUzMS8xL1BtNFF0M2w2OUhBMUZkLUdU
cklCOV9LYVhvWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCH4QkMA0EAgACMAcDBQMqDaTAMA0GCSqGSIb3
DQEBCwUAA4IBAQBOMpr3foFZulD67RBTcql0kpE7q/sUYhDJp3X7n5VtR2fTLOJK
myw4T9jpq0dK/SN2BOC33K0MaZKKGsc6xzsMbGrpgo16KA6pzOW4TouA3sv4+PfF
VTjAKh3R5V9h5/h+qR6I8zuke+A5aCYZY6kD84RUefwGdLBsda0sVzP0xFNNSBqV
+amL8EJl8QOhkIMg/9Wtu1MIeFPrSH/WURafJmdMR+w6eHsPCZIoiw9hs3CYZTfg
+B0l/mjYs7D3tJHGmhFlecW14s3z0hNxUDFYdldguPNXc4ZnIf9pjS6UnitX5WHd
JFsmUs20L9Xspdns0J5Ty5wkPTt/peMOtSiC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:00 2024 by rpki-client on console-ams.rpki-client.org