Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pmndEhuLXetRKfP9uuunzj1jJco.cer
File: pmndEhuLXetRKfP9uuunzj1jJco.cer (raw, json)
Hash identifier: voPN+JGhtpgQwiZes/MgUtMhtjJxNAPyUvZgz0M8Rf8=
Subject key identifier: A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708AA06FD7EBCD3A2F407766C2F40511
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/pmndEhuLXetRKfP9uuunzj1jJco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:33:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.2.0/24
IP: 2a12:ae00::/29
Validation: Failed, certificate revoked on Fri 17 Nov 2023 07:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8a:a0:6f:d7:eb:cd:3a:2f:40:77:66:c2:f4:05:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:33:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a669dd121b8b5deb5129f3fdbaeba7ce3d6325ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:cc:f0:1b:21:37:b4:60:89:50:b4:d3:8c:
d7:84:10:1a:8f:00:6a:d9:f7:53:77:35:e8:40:a9:
ab:0e:5f:4e:02:b1:64:4c:d8:6c:6b:bc:49:45:03:
dd:50:d3:21:f3:ee:fa:dd:99:df:ce:10:ba:23:c9:
7d:76:34:92:73:f4:81:66:11:1b:10:89:ee:0e:e0:
e2:90:86:96:72:8e:b0:d9:95:18:cd:a8:f9:8d:61:
99:be:89:1c:0a:ef:df:50:59:ab:69:a6:7d:d5:6d:
59:85:7b:f9:b2:54:a7:8e:98:9f:87:73:d5:a2:5a:
f7:a7:3d:19:19:f4:91:8d:9d:13:be:43:1f:24:86:
8a:e4:e9:e3:12:9f:39:89:3e:f0:03:c4:88:1d:d0:
f4:5b:b2:0f:1e:fe:c2:41:99:87:d6:ac:db:a5:48:
92:f2:47:58:49:d1:b1:ce:1b:09:35:f3:a3:de:ca:
61:ca:02:0b:55:6e:5e:47:e4:55:26:90:ac:db:8c:
b5:ec:70:30:cf:6f:58:e8:c3:ab:65:0f:72:23:67:
86:40:cd:8e:34:81:fa:d1:46:4b:7b:0d:b4:b1:17:
a6:61:a6:00:b8:34:bf:47:5e:f7:c7:25:f3:70:e0:
29:aa:cc:de:bf:74:7e:a4:75:53:5e:26:be:27:3f:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/pmndEhuLXetRKfP9uuunzj1jJco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.2.0/24
IPv6:
2a12:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
64:16:95:ec:db:54:10:b0:b5:aa:15:71:7e:d3:f6:ab:11:29:
a8:60:a4:8f:46:02:d2:32:64:87:8f:fd:2c:28:b2:e6:6f:b2:
d9:3b:a6:a4:a4:66:92:ea:ac:f4:fc:1c:b8:ba:e6:f6:9d:4d:
41:98:c5:73:0e:48:fc:e8:37:a3:4f:ee:c4:6e:0a:99:28:53:
de:59:d9:02:68:e2:9d:05:28:8e:ab:78:17:ce:bf:9d:bf:1a:
f7:c7:2e:10:2a:db:73:60:7a:0a:cd:be:4f:ed:d2:ba:1c:83:
0e:3d:85:5d:90:7a:d3:eb:57:cf:bc:2b:75:53:9f:f5:a8:ba:
16:e2:42:87:14:6a:3f:89:c8:be:86:40:cf:44:37:c9:54:b7:
3e:38:d2:9a:38:c6:00:2f:f8:ea:9f:c5:31:dc:ee:8d:27:c1:
17:ec:a0:6a:1c:d3:9c:3b:8d:c9:df:13:04:11:01:7f:33:03:
86:b3:8d:9b:54:e3:77:71:2f:44:bb:d9:9f:07:a1:5c:a0:75:
b9:ef:f7:a9:e1:cc:a4:e5:38:75:db:5f:66:67:12:61:bd:c8:
a0:48:90:5b:02:0b:d6:4d:c2:45:97:af:49:1c:53:9d:da:3a:
94:42:32:44:a0:2c:0d:1f:96:84:c7:29:7f:fa:2f:9d:b6:8e:
eb:de:f2:06
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVwiqBv1+vNOi9Ad2bC9AURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzMzMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjY5ZGQxMjFiOGI1ZGViNTEyOWYzZmRiYWViYTdjZTNkNjMyNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyXM8BshN7RgiVC004zXhBAajwBq
2fdTdzXoQKmrDl9OArFkTNhsa7xJRQPdUNMh8+763ZnfzhC6I8l9djSSc/SBZhEb
EInuDuDikIaWco6w2ZUYzaj5jWGZvokcCu/fUFmraaZ91W1ZhXv5slSnjpifh3PV
olr3pz0ZGfSRjZ0TvkMfJIaK5OnjEp85iT7wA8SIHdD0W7IPHv7CQZmH1qzbpUiS
8kdYSdGxzhsJNfOj3sphygILVW5eR+RVJpCs24y17HAwz29Y6MOrZQ9yI2eGQM2O
NIH60UZLew20sRemYaYAuDS/R173xyXzcOApqszev3R+pHVTXia+Jz/YhQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFKZp3RIbi13rUSnz/brrp849YyXKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1Lzg0M2Y4
YS1kZmE0LTRiYjgtOWIwNy1kZmMxOTMwYmJmODQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvODQzZjhh
LWRmYTQtNGJiOC05YjA3LWRmYzE5MzBiYmY4NC8xL3BtbmRFaHVMWGV0UktmUDl1
dXVuemoxakpjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAPgMCMA0EAgACMAcDBQMqEq4AMA0GCSqGSIb3
DQEBCwUAA4IBAQBkFpXs21QQsLWqFXF+0/arESmoYKSPRgLSMmSHj/0sKLLmb7LZ
O6akpGaS6qz0/By4uub2nU1BmMVzDkj86DejT+7EbgqZKFPeWdkCaOKdBSiOq3gX
zr+dvxr3xy4QKttzYHoKzb5P7dK6HIMOPYVdkHrT61fPvCt1U5/1qLoW4kKHFGo/
ici+hkDPRDfJVLc+ONKaOMYAL/jqn8Ux3O6NJ8EX7KBqHNOcO43J3xMEEQF/MwOG
s42bVON3cS9Eu9mfB6FcoHW57/ep4cyk5Th1219mZxJhvcigSJBbAgvWTcJFl69J
HFOd2jqUQjJEoCwNH5aExyl/+i+dto7r3vIG
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:49 2024 by rpki-client on console-fra.rpki-client.org