Certificate

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
File:                     01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer (raw, json)
Hash identifier:          sRmakb1I/ASnWUiKG2nYVZt8wIRT2BxiY01lTHW8N2Y=
Subject key identifier:   01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       13449F187113B9A9EDDAFB81C625440ED8AE1514
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 03 Jul 2025 04:46:46 +0000
Certificate not after:    Thu 02 Jul 2026 04:51:46 +0000
Subordinate resources:    IP: 192.67.35.0/24
Validation:               Failed, certificate revoked on Thu 03 Jul 2025 08:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:44:9f:18:71:13:b9:a9:ed:da:fb:81:c6:25:44:0e:d8:ae:15:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jul  3 04:46:46 2025 GMT
            Not After : Jul  2 04:51:46 2026 GMT
        Subject: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:77:d7:b3:65:c3:6e:90:05:61:1d:1f:3f:
                    57:bd:2c:71:fa:3d:ed:c6:19:90:af:01:c3:9c:85:
                    8b:79:16:7a:6b:32:38:a8:38:04:4c:0d:df:8b:7c:
                    56:0d:b8:d2:b7:6d:f8:03:78:32:0d:21:cf:8a:49:
                    2a:6a:e6:a5:46:7e:90:6d:58:38:d0:c3:35:11:51:
                    52:83:e2:3a:6f:5f:c1:4d:d4:40:15:86:6d:25:ca:
                    f5:08:68:13:06:5d:38:3e:c4:d8:c2:c3:43:fa:42:
                    0b:1b:a1:21:85:56:5a:2e:8a:6e:c9:92:de:75:2a:
                    ee:5e:15:5b:c9:3e:70:c1:f3:c5:db:db:0f:04:f1:
                    2f:a8:8f:18:3b:bd:ef:47:67:30:f7:dc:df:d5:50:
                    bb:3a:5b:96:52:71:63:71:e2:33:06:de:18:89:ea:
                    a0:4a:98:94:49:22:62:00:fb:26:43:6a:a5:57:03:
                    84:2d:8f:02:5a:31:ff:a6:f8:92:93:c1:ba:77:50:
                    46:87:ee:74:a7:23:c7:7f:6a:54:ea:ba:8b:ed:9d:
                    3b:5f:fb:68:bf:7c:5c:bf:c2:c3:a9:47:4c:c0:75:
                    13:53:50:f9:5d:18:c7:a0:52:c4:c2:59:6b:dd:50:
                    77:c0:23:63:91:64:e8:d6:0f:08:7d:28:3f:d2:a6:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:28:cb:24:6e:5d:d9:37:83:7e:8e:5a:78:05:f1:3f:a8:ed:
         6f:62:be:86:03:48:32:81:43:a9:a4:8a:55:ec:c9:a0:1a:5b:
         fe:6c:3d:aa:3a:a4:b9:26:68:ab:4e:92:63:86:08:03:60:3c:
         0f:b0:e7:51:51:fc:08:0b:15:2d:1b:54:22:b2:cc:54:a0:10:
         3d:ed:98:d6:98:c9:bd:e1:de:aa:b6:af:cc:b1:fc:94:ed:c2:
         19:a7:1d:17:ae:dc:9b:90:ff:d3:63:49:16:99:d6:c6:a9:7e:
         07:18:2c:6a:bc:99:78:03:85:c3:16:1e:54:da:f1:7a:f9:a8:
         8a:ac:0d:4a:50:41:4b:8f:6f:57:86:96:c8:2f:c8:df:f2:0a:
         66:3f:4f:f6:b1:a6:d0:ba:21:0e:f0:cd:77:2b:4b:b5:9f:2c:
         f7:d0:c4:6c:72:d3:66:d8:d4:9a:b3:06:4e:7f:88:5f:95:d4:
         d1:7c:3e:9d:7a:4a:26:17:64:71:d6:16:77:50:38:a5:1a:48:
         78:00:6f:02:8a:99:e3:45:c1:83:64:01:e2:ad:85:55:74:40:
         09:4f:fb:7b:d5:2f:4d:54:7c:85:93:06:f8:f1:6e:5b:6b:00:
         dd:81:48:90:7f:c5:f8:0b:9b:29:28:1c:50:a6:a3:51:dd:34:
         e5:81:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:01 2025 by rpki-client