Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
File: E78C2AFCF0927B952709E9D02232AAF22369820A.cer (raw, json)
Hash identifier: eE59cYHdLMKm5l146yu3kqQo9AJKWUB6g0D9qKbFL3c=
Subject key identifier: E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 72A6B37DD03A93558149EA4B821440775F2886FE
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 04 Aug 2024 18:08:15 +0000
Certificate not after: Sun 03 Aug 2025 18:13:15 +0000
Subordinate resources: IP: 2a0a:6044:ac70::/44
Validation: Failed, certificate revoked on Thu 05 Sep 2024 19:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a6:b3:7d:d0:3a:93:55:81:49:ea:4b:82:14:40:77:5f:28:86:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 4 18:08:15 2024 GMT
Not After : Aug 3 18:13:15 2025 GMT
Subject: CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:c2:57:61:83:d5:70:ff:ad:93:5d:aa:22:
23:f8:26:51:a1:05:55:d0:21:61:f9:e2:74:ab:e7:
d6:f1:78:3a:02:3e:32:1b:82:2f:18:b1:40:e8:0e:
c2:1d:98:52:14:6b:bd:00:05:a0:9d:dd:1d:6c:06:
13:64:83:47:45:28:84:06:15:27:4e:c8:63:8f:c6:
88:ef:3f:a2:4b:4f:71:8c:df:5c:3e:91:9b:a2:6c:
19:87:05:75:c6:eb:67:19:cf:bf:5c:bf:f5:35:32:
3a:52:22:31:7d:11:9d:8b:10:2e:f4:b9:d8:9c:8b:
38:99:bc:4e:2f:84:4d:c3:de:b9:dd:52:39:7c:78:
24:94:67:00:10:c4:98:8a:5c:f8:92:e2:81:be:43:
c6:ec:ba:f8:68:93:0c:3a:a1:ab:11:a3:e0:45:78:
f8:3f:9e:75:f4:0e:b9:dc:37:70:25:ca:a6:c0:d2:
9f:d1:a4:79:7f:06:a8:8c:9e:ff:42:85:f2:1d:79:
5e:4e:1e:0f:87:7e:38:43:4a:77:5f:7c:65:59:f4:
28:00:07:43:af:74:bf:96:39:1a:b2:81:db:2f:f5:
b7:51:b6:54:3b:70:f3:69:d1:e1:28:57:3c:22:fb:
a3:ca:43:25:5c:e9:d0:74:a6:82:31:e0:bb:06:a1:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac70::/44
Signature Algorithm: sha256WithRSAEncryption
7b:71:ad:86:c2:27:b9:8c:4c:2b:9d:a8:ad:f0:41:48:ea:10:
67:d1:aa:eb:c4:a3:85:89:a2:15:22:38:52:d5:be:5b:8c:cb:
5b:b4:9b:1f:71:07:ce:00:26:a7:5d:b0:92:a8:21:cd:42:95:
2d:ae:b5:be:5f:bc:6f:1c:d2:56:52:b5:db:60:e3:16:db:1d:
c7:1a:1b:77:81:af:01:35:c3:a6:f2:4a:59:77:1e:26:85:aa:
f1:7f:f9:af:61:e3:34:55:e1:20:13:52:76:aa:dd:a2:6b:c1:
9a:03:06:95:4d:64:0f:df:24:0f:01:24:4b:19:7c:fa:0c:7b:
77:d5:06:d5:9f:d7:b8:c2:46:32:b3:c2:bb:ea:56:03:bf:c8:
4f:34:3e:75:9b:ce:f3:4a:3f:c7:a5:73:0e:8c:5d:58:40:fb:
20:0a:98:b9:05:f2:60:de:a7:c4:e8:82:ac:d1:2b:08:5e:25:
1a:80:13:70:58:21:6e:52:7e:f5:0b:40:f1:a1:a3:c9:6b:aa:
f7:a8:ef:78:e9:51:ba:ef:3f:04:6a:17:53:60:9b:90:ea:b3:
1d:c5:39:6d:aa:24:8a:72:00:1a:46:71:dc:0b:13:01:86:fe:
99:ba:8b:17:30:6d:e3:2d:00:97:92:78:65:22:12:a9:7c:6d:
02:88:bb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:23 2024 by rpki-client on console-ams.rpki-client.org