Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
File: 8FD9D2B5888D68B05130C2B204FF94681A764D41.cer (raw, json)
Hash identifier: p1rPydwiSQ3mr7VTfHzKFuzmZ2YWLrXnCgdzKsXRQu0=
Subject key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 7606ECF45D24E3808252993DEBB393721F078002
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 08 Sep 2024 20:59:22 +0000
Certificate not after: Sun 07 Sep 2025 21:04:22 +0000
Subordinate resources: IP: 2a09:54c6:d000::/36
IP: 2a0a:6044:ac70::/44
Validation: Failed, certificate revoked on Mon 30 Sep 2024 11:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:06:ec:f4:5d:24:e3:80:82:52:99:3d:eb:b3:93:72:1f:07:80:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Sep 8 20:59:22 2024 GMT
Not After : Sep 7 21:04:22 2025 GMT
Subject: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:38:f3:74:f6:65:de:60:d0:19:7c:73:2f:
5b:20:fb:d1:d4:e5:5a:74:e8:39:06:bf:29:68:69:
3f:f7:fa:dc:ae:5c:dd:75:9e:5e:7c:80:14:ac:d0:
68:66:0c:9c:0b:97:c5:d4:47:17:4e:a4:60:fb:e0:
d6:ed:da:6f:d0:8f:69:44:c0:3e:ca:0a:49:75:ce:
6f:f5:42:62:49:1c:7a:39:05:35:2e:8a:b7:db:d2:
fc:92:e5:d8:a2:b3:77:5c:5b:9b:04:fc:36:45:9c:
79:e8:22:95:90:31:36:b6:ee:b2:08:ad:b5:75:d1:
df:0b:4f:c7:4c:13:e9:26:31:7a:c8:6d:56:0a:21:
54:19:97:92:32:d0:5b:8a:83:d6:79:c9:26:40:2a:
e5:81:3c:19:be:b9:7e:d7:13:8a:83:6d:3d:33:80:
de:e6:23:ff:b8:10:b5:fc:67:74:2b:bc:be:e2:6f:
8d:88:c4:67:f8:08:24:53:02:10:2c:59:d7:44:f6:
00:9a:e9:f4:82:d1:d0:e0:1f:a9:ab:28:f9:56:85:
e5:fb:5d:a9:00:d1:7b:b3:a4:b9:3a:54:c5:47:02:
db:b5:b0:27:31:99:8d:69:44:81:0f:52:eb:91:12:
84:9b:33:54:3c:a3:c8:09:3a:a9:3d:f8:b0:e1:e6:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:d000::/36
2a0a:6044:ac70::/44
Signature Algorithm: sha256WithRSAEncryption
93:45:26:69:1e:b3:d8:a4:36:2b:c5:09:de:dc:7c:6a:e0:d2:
f7:66:0c:89:18:e6:a4:0d:88:5c:ee:98:d1:6e:73:aa:81:77:
42:b4:6c:61:eb:0d:96:a0:6a:a2:7e:e9:1b:81:06:b3:a1:cf:
b7:80:f0:bb:40:5a:d2:23:ee:a3:3f:10:70:fd:72:71:48:ec:
f1:32:3c:7a:12:08:be:d4:e4:1d:55:7a:a5:5e:e5:1a:59:b8:
66:1a:24:8e:29:c6:3e:83:69:48:94:cc:68:15:74:35:c8:f4:
e1:d8:28:b1:87:8c:16:85:d1:9c:5b:1d:32:18:80:75:30:7c:
5f:57:2d:ac:4c:67:30:19:c1:ec:ca:54:67:b8:d6:61:27:02:
bb:80:df:17:b1:db:6c:57:14:e2:df:8f:e3:3f:73:bf:d3:29:
48:5a:79:3b:96:23:00:70:6f:fb:8e:ab:cc:f6:67:88:75:24:
30:64:76:a9:c7:c4:0a:0d:77:22:5d:09:72:cf:62:21:1e:c9:
e2:bd:3e:a5:9d:c0:23:1a:6d:b8:01:66:c5:2e:cf:01:65:f6:
59:c4:2e:86:8f:5a:91:87:85:70:22:09:be:bd:84:22:fe:fb:
48:2f:a7:84:00:f7:54:80:e6:f0:91:d4:69:b4:c9:46:13:f5:
68:ce:52:d4
-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgIUdgbs9F0k44CCUpk967OTch8HgAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA5MDgyMDU5MjJaFw0yNTA5MDcyMTA0MjJaMDMxMTAvBgNV
BAMTKDhGRDlEMkI1ODg4RDY4QjA1MTMwQzJCMjA0RkY5NDY4MUE3NjRENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OzjzdPZl3mDQGXxzL1sg+9HU
5Vp06DkGvyloaT/3+tyuXN11nl58gBSs0GhmDJwLl8XURxdOpGD74Nbt2m/Qj2lE
wD7KCkl1zm/1QmJJHHo5BTUuirfb0vyS5diis3dcW5sE/DZFnHnoIpWQMTa27rII
rbV10d8LT8dME+kmMXrIbVYKIVQZl5Iy0FuKg9Z5ySZAKuWBPBm+uX7XE4qDbT0z
gN7mI/+4ELX8Z3QrvL7ib42IxGf4CCRTAhAsWddE9gCa6fSC0dDgH6mrKPlWheX7
XakA0XuzpLk6VMVHAtu1sCcxmY1pRIEPUuuREoSbM1Q8o8gJOqk9+LDh5upLAgMB
AAGjggMcMIIDGDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSP2dK1iI1osFEw
wrIE/5RoGnZNQTAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0
MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE
NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZDg2OWIzM2ItNTEyMi00YWI4LWJiNTktOTgwMjJkNjM5MWEwLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9kODY5YjMzYi01MTIyLTRhYjgtYmI1OS05ODAyMmQ2MzkxYTAv
MS84RkQ5RDJCNTg4OEQ2OEIwNTEzMEMyQjIwNEZGOTQ2ODFBNzY0RDQxLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH
AQcBAf8EGzAZMBcEAgACMBEDBgQqCVTG0AMHBCoKYESscDANBgkqhkiG9w0BAQsF
AAOCAQEAk0UmaR6z2KQ2K8UJ3tx8auDS92YMiRjmpA2IXO6Y0W5zqoF3QrRsYesN
lqBqon7pG4EGs6HPt4Dwu0Ba0iPuoz8QcP1ycUjs8TI8ehIIvtTkHVV6pV7lGlm4
ZhokjinGPoNpSJTMaBV0Ncj04dgosYeMFoXRnFsdMhiAdTB8X1ctrExnMBnB7MpU
Z7jWYScCu4DfF7HbbFcU4t+P4z9zv9MpSFp5O5YjAHBv+46rzPZniHUkMGR2qcfE
Cg13Il0Jcs9iIR7J4r0+pZ3AIxptuAFmxS7PAWX2WcQuho9akYeFcCIJvr2EIv77
SC+nhAD3VIDm8JHUabTJRhP1aM5S1A==
Generated at Mon Sep 30 15:37:24 2024 by rpki-client on console-fra.rpki-client.org