Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5D3BF911E19D079EDDFB194ED158480130E355F0.cer
File: 5D3BF911E19D079EDDFB194ED158480130E355F0.cer (raw, json)
Hash identifier: LI9T+/cKLDJty9dX63oB14/T8zI3yHv+kqg9SmqwdCg=
Subject key identifier: 5D:3B:F9:11:E1:9D:07:9E:DD:FB:19:4E:D1:58:48:01:30:E3:55:F0
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 586B08BE0FCAE678BCA725F95E9077A4D7CD331B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/5D3BF911E19D079EDDFB194ED158480130E355F0.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 30 Aug 2024 12:07:57 +0000
Certificate not after: Fri 29 Aug 2025 12:12:57 +0000
Subordinate resources: IP: 2a0a:6044:c110::/44
Validation: Failed, certificate revoked on Sat 07 Sep 2024 19:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6b:08:be:0f:ca:e6:78:bc:a7:25:f9:5e:90:77:a4:d7:cd:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 30 12:07:57 2024 GMT
Not After : Aug 29 12:12:57 2025 GMT
Subject: CN=5D3BF911E19D079EDDFB194ED158480130E355F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:e2:84:7b:96:b0:a6:aa:91:31:64:9a:aa:
c8:9e:27:e2:65:fe:40:f4:e8:0a:8b:88:f7:f1:02:
bb:cc:12:41:c2:40:01:7a:a1:59:5f:69:67:d8:f1:
94:90:13:f3:4d:70:dd:79:87:98:2c:19:d1:0a:bb:
dc:8b:03:38:14:18:88:cb:b5:fc:74:a5:f9:de:74:
f0:68:a6:55:c2:f5:7c:de:cf:de:2b:35:6f:d3:6b:
ed:83:31:75:7a:14:43:d2:36:41:55:29:63:50:06:
f8:dc:d5:06:fd:ef:ec:bc:7e:b6:0b:ae:9d:e2:ab:
cf:e1:c7:94:48:59:d9:7b:42:5d:a8:25:91:4f:c3:
60:ba:ad:4f:5c:c7:58:69:29:12:fc:18:a8:e0:b8:
1a:9a:46:0a:09:0e:6a:87:a1:4b:33:b6:22:4b:64:
a4:6a:a6:9f:8b:64:aa:3a:a0:87:59:16:16:6a:57:
b5:25:2d:0d:0f:27:c3:6b:db:17:20:a2:50:70:a1:
29:87:a0:a0:af:49:41:93:38:d0:20:6d:0b:15:fa:
29:db:50:50:90:88:f7:06:bb:bf:de:73:9b:d4:a4:
92:84:c7:e7:09:dc:50:a5:42:c3:1e:41:28:c5:6e:
aa:2c:d9:e8:98:9b:fa:cf:43:2b:87:d5:cb:ef:87:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5D:3B:F9:11:E1:9D:07:9E:DD:FB:19:4E:D1:58:48:01:30:E3:55:F0
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/5D3BF911E19D079EDDFB194ED158480130E355F0.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:c110::/44
Signature Algorithm: sha256WithRSAEncryption
05:1a:4c:6f:a7:cb:20:43:87:67:4f:8d:78:ea:39:62:74:76:
ee:ad:42:74:61:0a:d7:90:95:34:8b:e1:e9:34:b3:d2:a7:39:
09:10:ad:ee:40:95:a4:91:b2:9d:ff:98:6b:8e:5f:e2:d2:02:
73:32:98:17:42:b0:bc:dd:1b:f6:fe:3f:63:7f:42:f3:96:c0:
a9:ec:76:6e:fd:72:a6:ff:d7:a7:8a:76:10:69:e0:1a:80:44:
87:bd:54:61:93:ad:93:23:de:1e:91:9b:d7:a8:57:29:af:e6:
31:61:8a:77:9a:12:f9:ad:38:cc:a3:65:b9:6c:b5:6b:22:14:
6c:13:00:51:59:e7:53:9d:ab:06:7a:67:37:35:f8:ba:0b:b0:
d0:e1:62:7d:c3:88:a1:3a:27:cb:ce:a6:16:f8:a3:76:7d:9c:
21:6e:ba:10:f4:de:79:92:af:6d:77:eb:15:c6:03:98:40:ce:
ef:ba:c8:4e:07:d9:66:9d:40:9c:22:59:57:b8:d7:af:40:8f:
cc:8d:0e:5a:3e:b6:bf:a7:c8:86:2a:3e:f2:5a:b4:d5:c8:b3:
f2:06:d2:26:30:95:5a:9c:c4:68:bb:f4:a6:5e:b1:3e:cc:ae:
8e:12:06:16:d6:8c:b5:16:ab:30:12:2b:10:39:60:8b:02:47:
81:5a:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:23:42 2024 by rpki-client on console-ams.rpki-client.org