Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6618F445AB9AF086BA560C01CCA4A1E2581111CE.cer
File: 6618F445AB9AF086BA560C01CCA4A1E2581111CE.cer (raw, json)
Hash identifier: ewEG9K/L1GeNlrkb7uKIWJGM5EUet6ScmBXVxSsLIHc=
Subject key identifier: 66:18:F4:45:AB:9A:F0:86:BA:56:0C:01:CC:A4:A1:E2:58:11:11:CE
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 1A2CDA10896851DA54EE3D3FDA5722519682A49F
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/6618F445AB9AF086BA560C01CCA4A1E2581111CE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 18 Mar 2024 17:45:15 +0000
Certificate not after: Mon 17 Mar 2025 17:50:15 +0000
Subordinate resources: IP: 2a0a:6044:a300::/40
Validation: Failed, certificate revoked on Thu 18 Apr 2024 23:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2c:da:10:89:68:51:da:54:ee:3d:3f:da:57:22:51:96:82:a4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Mar 18 17:45:15 2024 GMT
Not After : Mar 17 17:50:15 2025 GMT
Subject: CN=6618F445AB9AF086BA560C01CCA4A1E2581111CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:32:f9:e6:7d:c5:83:b4:0e:1a:5a:30:96:
fd:72:b2:7d:a7:75:de:8b:f2:2f:dd:9f:11:3a:50:
01:9e:c2:93:cc:35:d7:9f:ab:5a:d3:e3:c6:61:4e:
fa:15:99:b7:91:8b:b4:b0:6c:12:23:da:6c:82:71:
dd:da:87:22:69:2f:5a:4f:91:12:56:f9:49:c3:fd:
de:08:3f:a5:61:8e:48:4e:22:29:97:08:53:53:b3:
ff:b3:a0:12:44:8a:3e:4c:4a:bb:43:21:88:83:64:
6c:48:16:d1:92:88:2f:f6:71:24:8f:8d:c0:49:25:
b2:f3:e1:32:43:e6:79:38:c5:57:d8:98:b6:2d:54:
5f:a9:3e:51:ca:93:8a:b2:c1:56:b5:65:7b:df:84:
ea:ef:9d:33:74:64:61:06:e4:f3:ac:55:d6:93:3d:
58:95:30:19:eb:82:a2:23:d7:2d:3e:e0:9b:33:ad:
2c:03:7f:d1:b4:94:a7:47:7c:54:39:8f:a1:0d:71:
b3:f7:b6:76:8e:4c:e3:c3:e3:a0:3b:6b:66:3a:01:
37:b1:7c:21:27:14:c7:af:a3:a6:59:31:e0:8f:a0:
e0:8b:ba:6b:25:d9:4a:8d:0b:dd:0a:1d:a0:41:ee:
4e:9f:e9:05:38:89:95:c7:83:36:86:46:f2:e3:08:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
66:18:F4:45:AB:9A:F0:86:BA:56:0C:01:CC:A4:A1:E2:58:11:11:CE
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/6618F445AB9AF086BA560C01CCA4A1E2581111CE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a300::/40
Signature Algorithm: sha256WithRSAEncryption
44:01:00:ea:94:44:d3:38:d3:23:b7:98:1e:14:10:5a:0f:4c:
42:f8:02:61:3d:0e:7c:31:0c:a1:f8:05:47:5c:cc:e9:2a:49:
9f:2a:02:ba:11:f7:24:37:3a:8a:67:3e:0e:03:a0:26:a2:24:
fc:fd:5a:e6:35:f7:73:4d:99:94:dc:1e:23:b1:af:a6:25:31:
4e:8d:75:0b:f8:93:9c:33:0d:7a:1a:52:4f:27:5a:1b:4b:89:
21:ef:78:fd:ed:ae:6e:21:28:31:56:67:a7:bf:63:77:50:ec:
fa:d6:15:8c:92:b2:7a:bd:a9:8d:dc:ef:12:f8:d1:08:bd:af:
31:25:30:fa:15:08:f1:89:e1:81:d6:b7:5a:31:67:cc:82:33:
36:5f:10:6b:88:b0:9e:eb:05:a8:71:86:01:a9:5e:67:27:a2:
74:95:9c:5c:02:ef:17:d9:f0:8f:45:cc:fb:1d:a2:09:ce:7e:
f5:58:6a:3b:8c:df:97:aa:6f:80:05:d2:29:0c:a0:a9:4f:8b:
16:be:b7:7b:bf:c3:cc:b2:a5:4a:78:cb:59:65:69:1d:20:ea:
42:ac:64:1b:a8:50:00:1f:54:9f:d8:7c:99:dd:ee:e4:78:d9:
ef:78:65:1d:c3:cc:34:01:b8:e3:3f:72:4c:ff:a9:7d:1f:43:
31:6b:7b:c8
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgIUGizaEIloUdpU7j0/2lciUZaCpJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDAzMTgxNzQ1MTVaFw0yNTAzMTcxNzUwMTVaMDMxMTAvBgNV
BAMTKDY2MThGNDQ1QUI5QUYwODZCQTU2MEMwMUNDQTRBMUUyNTgxMTExQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46TL55n3Fg7QOGlowlv1ysn2n
dd6L8i/dnxE6UAGewpPMNdefq1rT48ZhTvoVmbeRi7SwbBIj2myCcd3ahyJpL1pP
kRJW+UnD/d4IP6VhjkhOIimXCFNTs/+zoBJEij5MSrtDIYiDZGxIFtGSiC/2cSSP
jcBJJbLz4TJD5nk4xVfYmLYtVF+pPlHKk4qywVa1ZXvfhOrvnTN0ZGEG5POsVdaT
PViVMBnrgqIj1y0+4JszrSwDf9G0lKdHfFQ5j6ENcbP3tnaOTOPD46A7a2Y6ATex
fCEnFMevo6ZZMeCPoOCLumsl2UqNC90KHaBB7k6f6QU4iZXHgzaGRvLjCAIHAgMB
AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmGPRFq5rwhrpW
DAHMpKHiWBERzjAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0
MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE
NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4Lzcv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUtYmFkNy1iNDI4MThjZjUwZTgv
Ny82NjE4RjQ0NUFCOUFGMDg2QkE1NjBDMDFDQ0E0QTFFMjU4MTExMUNFLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEozANBgkqhkiG9w0BAQsFAAOCAQEARAEA
6pRE0zjTI7eYHhQQWg9MQvgCYT0OfDEMofgFR1zM6SpJnyoCuhH3JDc6imc+DgOg
JqIk/P1a5jX3c02ZlNweI7GvpiUxTo11C/iTnDMNehpSTydaG0uJIe94/e2ubiEo
MVZnp79jd1Ds+tYVjJKyer2pjdzvEvjRCL2vMSUw+hUI8Ynhgda3WjFnzIIzNl8Q
a4iwnusFqHGGAaleZyeidJWcXALvF9nwj0XM+x2iCc5+9VhqO4zfl6pvgAXSKQyg
qU+LFr63e7/DzLKlSnjLWWVpHSDqQqxkG6hQAB9Un9h8md3u5HjZ73hlHcPMNAG4
4z9yTP+pfR9DMWt7yA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:58 2024 by rpki-client on console-ams.rpki-client.org