Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
File: D7D838DED871774D2E875C9CB99B810DC1B38301.cer (raw, json)
Hash identifier: 1AoEX3K5kOm5ZzFVz9DUW2y1vX3KyGCIGc8WiM4iSmA=
Subject key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 361E0AB5012A0A556EA5F98577E5574BCCE64029
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 21 Jun 2024 18:15:46 +0000
Certificate not after: Fri 20 Jun 2025 18:20:46 +0000
Subordinate resources: IP: 2a0a:6044:a500::/40
IP: 2a0a:6044:bb00::/40
Validation: Failed, certificate revoked on Fri 12 Jul 2024 11:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1e:0a:b5:01:2a:0a:55:6e:a5:f9:85:77:e5:57:4b:cc:e6:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jun 21 18:15:46 2024 GMT
Not After : Jun 20 18:20:46 2025 GMT
Subject: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:80:9e:f3:d9:f4:ba:0e:58:db:fe:e7:5c:
1e:35:97:31:08:d9:fa:d0:35:f5:e5:9e:96:be:59:
a2:81:59:13:0d:0b:6d:98:f8:68:3d:b7:d1:54:4d:
bc:48:80:9b:0b:93:e0:74:de:fb:5d:cb:a2:96:6f:
c0:74:b3:73:d3:c1:ac:8e:14:53:98:45:61:f5:1f:
01:0c:ec:be:ee:02:40:ec:3b:65:27:89:d8:87:65:
ea:1b:ba:74:88:79:d5:71:f1:8a:13:00:a8:37:62:
02:8f:8d:a1:9a:5d:d1:34:c1:df:98:04:2c:68:05:
29:57:a6:a3:db:36:ef:9f:4a:19:1d:8f:d7:58:d1:
fa:34:18:32:d8:3a:b7:15:59:7f:4c:40:f8:4b:d5:
68:01:3c:75:88:3e:f0:45:36:90:f0:ee:21:9a:77:
be:80:48:77:75:65:8e:14:e3:95:fb:19:80:eb:4b:
bd:02:90:b8:eb:55:c9:51:a2:a0:42:13:be:3c:c4:
62:17:59:51:a3:9d:68:54:74:22:ee:d2:9b:fe:86:
1c:21:f6:aa:c3:52:ab:37:35:69:7e:fd:3c:06:5c:
51:70:9d:96:3f:66:a1:af:ea:c0:1f:0f:16:19:2f:
2a:75:27:6d:09:a3:a8:4b:ce:63:1b:66:e7:52:ee:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a500::/40
2a0a:6044:bb00::/40
Signature Algorithm: sha256WithRSAEncryption
10:fa:8b:eb:a4:0f:e5:0a:1c:83:e4:e9:b7:3b:20:af:9e:73:
2e:3d:39:4b:82:5e:54:87:01:45:c7:6f:92:3a:e7:41:ab:75:
2b:5e:22:d2:a9:1c:5e:c5:5d:ed:e1:70:51:ab:01:c9:2e:a2:
31:07:0b:de:71:f6:a4:1a:2b:0b:4c:4b:98:22:8d:6f:fe:71:
a5:e0:ef:6e:86:61:f2:e5:13:e6:9f:8e:d4:d5:3e:78:81:ec:
6e:a9:a0:43:f9:f9:53:19:4b:cc:ce:90:65:62:be:a5:8f:35:
31:cf:a9:6a:fe:96:19:f9:87:1c:6f:70:62:bd:2a:6a:8b:33:
fe:07:da:1a:66:d5:52:75:f1:e5:4c:b5:ef:fc:2a:7b:eb:95:
fe:05:42:5c:a0:20:76:2d:a0:a9:d9:04:b8:b3:a7:cf:07:af:
42:4f:cc:7e:57:66:f2:f6:b9:96:6b:60:79:20:1d:68:03:17:
28:a9:2d:54:32:01:76:0b:a8:d2:d9:dd:8d:f9:56:83:a3:8f:
43:68:2e:2a:cc:a0:78:a7:6f:c6:ad:42:d3:62:19:18:36:9c:
4a:9d:17:a7:ff:4f:82:6d:da:48:15:b9:97:38:92:56:e8:6e:
1c:1e:40:4d:20:3b:e3:64:9e:81:a3:b9:90:ac:59:e0:57:70:
6a:c2:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 13:01:34 2024 by rpki-client on console-fra.rpki-client.org