Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer
File: 341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer (raw, json)
Hash identifier: 2qQ+UzEt2/w8jEnbam3Tb5dQZ5d7RizMSxX/n4pCLQ4=
Subject key identifier: 34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 064ABCF3C269EA5E23CC6810CEB3B69032A3E528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 14 Jun 2024 02:13:41 +0000
Certificate not after: Fri 13 Jun 2025 02:18:41 +0000
Subordinate resources: IP: 2a0f:85c1:331::/48
Validation: Failed, certificate revoked on Wed 26 Jun 2024 01:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:4a:bc:f3:c2:69:ea:5e:23:cc:68:10:ce:b3:b6:90:32:a3:e5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jun 14 02:13:41 2024 GMT
Not After : Jun 13 02:18:41 2025 GMT
Subject: CN=341DD247820B7D2AD4F085FF7F5988ADF10F4AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:1f:fd:ac:31:77:d6:1c:fc:ce:43:9e:90:
ba:7a:de:13:25:c3:1f:72:4d:97:1c:fc:6a:f3:89:
19:9d:9a:0b:64:50:01:03:39:f5:5b:23:8d:0d:79:
b3:ec:bf:7f:7d:96:c2:99:6e:f8:ea:b1:ac:4b:50:
13:2a:c6:27:61:de:f2:d4:a9:32:e1:fe:db:95:72:
b0:d5:5f:24:8b:fb:e9:c7:28:09:5b:8f:fe:8a:e3:
20:82:77:92:59:a5:ad:f5:a3:b0:34:7f:dd:4e:64:
93:fe:9b:ef:d2:72:30:c9:69:37:7f:e2:24:93:cf:
01:34:a0:b8:0d:bc:26:f0:70:ac:e9:34:79:20:c0:
22:b1:7f:39:c4:03:e0:31:de:e6:25:5a:3d:a8:04:
f0:87:55:67:08:cf:39:33:b2:2e:cb:d6:5a:b5:88:
8e:37:0b:35:21:ac:27:e4:ee:57:ba:e0:41:0b:9a:
ae:73:66:0e:af:a4:c7:d5:73:80:2e:9c:ee:87:6f:
76:60:2d:65:01:3a:f3:6f:65:f8:50:c6:6f:e7:6b:
51:b4:41:87:3b:8a:69:ed:2d:de:e6:2e:8c:44:64:
81:14:cf:25:08:d4:d8:66:32:c8:bc:fd:3f:31:bd:
a3:3f:05:1d:7b:8b:0e:1b:5d:82:4a:20:c3:84:2a:
4a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:331::/48
Signature Algorithm: sha256WithRSAEncryption
3f:5b:08:21:a1:36:8a:9b:44:85:ba:cb:d5:48:0b:8c:43:ce:
a2:97:5b:71:f6:78:52:db:b5:82:94:4a:6d:3c:94:b7:16:ba:
38:e6:97:a2:5d:b4:70:5b:4b:eb:47:91:cf:8d:2f:58:fe:fc:
6b:3c:1a:8c:8d:ad:67:ac:11:ca:8f:53:06:86:08:2c:7d:d5:
b1:d3:fb:e2:59:26:ce:00:b6:46:03:f1:1c:3f:c9:08:6f:79:
12:14:d2:d1:3f:d1:a0:b7:57:2d:e9:a6:57:36:02:1a:5c:6b:
06:8c:02:b4:73:7b:39:88:f0:21:0c:92:a8:f6:ee:81:38:d6:
48:24:1b:8d:3c:23:67:3c:2a:e0:b9:d1:d2:9b:06:b0:c2:41:
51:67:14:7d:60:02:7a:7f:94:e0:65:b9:27:5a:4e:06:68:e2:
04:4d:1d:7d:69:d2:0b:2b:84:1d:0f:58:b8:c3:4d:a9:a2:7d:
45:d7:6d:13:b3:b3:6e:10:71:ca:69:57:49:bd:83:ff:72:b9:
b1:a1:7a:e6:ea:74:32:26:3c:9a:75:56:df:b5:1e:ae:17:82:
0a:0a:c1:ea:17:7d:05:82:6d:c8:fd:28:9c:ee:89:fb:c2:a3:
cc:cd:b9:d6:3d:ac:4c:32:df:f5:2c:89:b9:fb:d2:4f:13:a9:
c2:f3:20:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:33:00 2024 by rpki-client on console-ams.rpki-client.org