Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1D6BBF0C15777B10AC07F6453F434FB28C37A99A.cer
File:                     1D6BBF0C15777B10AC07F6453F434FB28C37A99A.cer (raw, json)
Hash identifier:          O7HK8GhAW8NBl+8f/GKgwD3E7SBRghxROY1m1RF2Chs=
Subject key identifier:   1D:6B:BF:0C:15:77:7B:10:AC:07:F6:45:3F:43:4F:B2:8C:37:A9:9A
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       26A49D005B6FE083DAE26848CB6047AA2B6ED151
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/1/1D6BBF0C15777B10AC07F6453F434FB28C37A99A.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 30 Jul 2024 10:51:41 +0000
Certificate not after:    Tue 29 Jul 2025 10:56:41 +0000
Subordinate resources:    IP: 2a0a:6044:7e00::/40

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 12:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a4:9d:00:5b:6f:e0:83:da:e2:68:48:cb:60:47:aa:2b:6e:d1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jul 30 10:51:41 2024 GMT
            Not After : Jul 29 10:56:41 2025 GMT
        Subject: CN=1D6BBF0C15777B10AC07F6453F434FB28C37A99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:66:80:9e:a3:95:3e:e0:75:a4:7e:86:b1:
                    8b:b4:14:37:09:dc:6e:9e:ca:45:4b:c3:ec:cf:22:
                    3d:9b:95:30:7e:97:b8:66:3a:16:97:d4:ba:96:bd:
                    09:54:5c:17:3f:5d:97:ca:ec:37:d7:cc:e2:f0:df:
                    21:bb:bf:f1:c6:74:1f:bc:9b:9c:40:03:f6:6f:4b:
                    09:44:52:e5:b8:7f:19:67:ed:77:91:08:f3:f5:8f:
                    e9:16:5d:b5:d0:13:1b:d6:1c:32:6f:9a:4f:c0:f5:
                    c0:36:da:e4:61:80:e1:0c:c6:a4:6c:08:fb:3b:d9:
                    8e:5b:68:21:56:aa:13:3a:40:de:43:b1:c2:92:c8:
                    7f:e4:5e:a8:d7:6b:6c:89:50:e9:48:28:2d:c6:fd:
                    c8:ef:8c:47:f6:52:e3:0a:84:39:1b:13:b3:c2:ea:
                    74:5c:62:32:e7:e9:e4:89:ab:47:df:ff:e7:6a:31:
                    b0:d5:38:65:e0:e3:2a:98:ca:54:a0:46:0f:a6:5f:
                    af:7d:b3:e7:bc:33:89:96:c0:93:fd:ee:de:32:e0:
                    79:82:15:e2:e8:dc:71:14:22:f8:82:a9:07:b1:c3:
                    67:88:b5:6c:bf:e5:99:5d:aa:07:fc:bd:0f:3b:29:
                    67:d4:f8:88:7d:80:a0:fe:6f:69:66:dc:cb:82:81:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:6B:BF:0C:15:77:7B:10:AC:07:F6:45:3F:43:4F:B2:8C:37:A9:9A
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/1/1D6BBF0C15777B10AC07F6453F434FB28C37A99A.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:9d:51:91:19:95:5b:07:d8:ce:62:c5:82:f1:f7:1d:e0:
         30:5e:1e:8a:10:3a:1d:34:0d:61:df:81:4c:5c:53:13:9f:30:
         af:e6:e2:ae:1f:11:8e:a2:3f:38:d2:91:0c:ce:a1:0b:72:60:
         bb:5c:40:1c:6e:02:ae:4e:f9:c9:56:4e:c8:83:30:c8:62:f5:
         16:73:15:02:1f:57:c1:1b:e8:d5:38:75:f2:e1:33:de:b9:22:
         ca:da:13:1a:49:1f:3a:eb:b9:35:4d:b5:1e:c9:41:5b:78:ff:
         6c:8e:a0:f8:3b:a8:8e:42:d5:38:68:bf:9c:ef:38:11:a5:96:
         a6:ce:05:df:32:e7:3e:6d:c6:1c:f8:b5:6d:a2:97:fd:8f:b5:
         99:23:5a:83:54:8c:2f:a4:b5:57:69:a8:73:fd:2b:1c:9f:8b:
         83:ce:b6:c2:5f:92:7f:d2:28:07:ef:9d:1c:f5:67:a1:ae:fb:
         0e:db:7a:01:60:43:2f:7a:47:33:5b:22:20:82:71:12:1c:35:
         69:d0:54:2a:6a:50:bc:78:7a:f5:3a:b0:dd:36:af:d4:92:0e:
         ce:46:4b:6a:67:c4:dd:5a:76:34:2a:43:da:d5:ac:50:47:a1:
         18:93:11:a4:0c:d7:b7:c7:4c:c7:0c:29:c3:5f:c6:d7:4d:d8:
         99:89:27:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 13:49:46 2024 by rpki-client on console-fra.rpki-client.org