Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
File: 5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer (raw, json)
Hash identifier: ETKe/5nTbvMooRCnpYwSjEKAbBrDF9iRbICFJiLmcyE=
Subject key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 2E15EA21C9ACA7F73A89A8CB18E0E3F9E5B0B3
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 08 Jun 2024 09:02:57 +0000
Certificate not after: Sat 07 Jun 2025 09:07:57 +0000
Subordinate resources: IP: 2a0a:6044:ac70::/44
Validation: Failed, certificate revoked on Thu 20 Jun 2024 20:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:15:ea:21:c9:ac:a7:f7:3a:89:a8:cb:18:e0:e3:f9:e5:b0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jun 8 09:02:57 2024 GMT
Not After : Jun 7 09:07:57 2025 GMT
Subject: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:05:9c:17:ff:b1:87:86:16:bf:20:e2:0c:
c7:c7:c6:67:72:ca:4d:b0:0a:da:b6:fe:e6:fa:ae:
9d:7c:fb:db:41:a1:70:8b:ed:d0:43:e1:40:0f:73:
69:bd:64:2e:0c:bd:2d:7f:26:55:fa:37:98:a2:6d:
80:1c:6d:00:84:e0:f9:0c:13:d2:ca:a5:08:66:4c:
5c:b1:5c:f2:63:c5:60:1e:5c:ea:b7:15:43:1b:f4:
d0:44:cd:09:d1:4a:d0:ed:60:cb:71:c1:37:56:55:
5b:21:3b:4e:b7:a0:77:31:ee:e0:d0:c1:7c:ab:76:
e9:ce:f5:9e:ac:bc:ef:4e:f2:e2:82:85:36:0a:48:
24:8d:0e:88:89:8f:6f:bd:97:09:f3:d5:cf:a8:78:
43:66:7a:33:de:32:81:f7:1f:60:4e:6b:89:31:18:
11:dc:bd:12:6f:b0:1f:b4:83:c2:3d:49:66:22:cf:
95:96:60:3e:60:e9:84:6a:d3:d1:79:9a:73:87:34:
3d:41:f7:80:aa:47:2a:75:b3:8e:59:86:8d:d0:5c:
2a:96:db:cf:74:30:ee:54:ab:f5:b7:ba:ce:af:e9:
e2:cc:0a:18:5f:d4:23:bb:bb:7d:1a:51:1d:60:2a:
c8:ea:45:6a:95:28:84:d9:61:7f:b0:7d:50:71:d6:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac70::/44
Signature Algorithm: sha256WithRSAEncryption
23:69:3a:0c:52:7c:6a:5e:2a:87:53:a2:aa:52:bc:5a:18:a2:
30:2f:7a:8e:f6:bf:94:35:8d:66:92:9a:48:32:69:e8:3e:51:
81:e0:54:d0:46:d7:32:c1:28:09:dd:35:69:29:ed:97:8a:c4:
99:dc:87:d1:09:a8:6a:ce:fd:68:3b:09:0c:5f:e6:c0:1f:c2:
32:96:04:87:31:72:80:46:9b:3e:25:ef:4d:ae:17:fb:65:d7:
8e:eb:fc:82:57:fa:d2:cb:9c:79:47:63:b4:a5:f1:ad:c6:cd:
a2:b0:0a:18:69:89:86:e4:83:30:cb:e6:eb:ba:4a:84:76:3e:
2f:bc:20:67:44:5f:23:58:6d:15:55:29:dd:79:ba:e1:a3:c2:
08:dc:dc:9d:e6:d3:67:d7:19:d4:1d:4f:9a:a6:e9:da:fd:3a:
11:62:07:bc:c3:a6:8e:10:c9:f9:80:d4:84:a3:19:92:35:43:
87:88:bc:45:1d:b3:52:ff:09:27:c1:41:99:8a:fe:38:2e:e6:
43:65:a9:ff:a4:87:a6:13:03:7e:7b:4d:a3:90:b2:4d:78:78:
94:95:ca:0f:31:de:48:56:c2:8f:65:5c:c6:66:35:0d:df:31:
f5:dd:e1:89:f6:29:8c:b7:ce:66:71:a1:84:a9:f3:25:6d:b8:
f0:fb:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 00:49:47 2024 by rpki-client on console-ams.rpki-client.org