Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer
File: 2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer (raw, json)
Hash identifier: ApasHCnK4O94pKxUVeRmj/iAtV0o1qYiV4Rk7M5fe3U=
Subject key identifier: 26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 0D9774A0E9317C4171A014C5395CBD4C2B415CD4
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 30 Jan 2024 06:07:53 +0000
Certificate not after: Tue 28 Jan 2025 06:12:53 +0000
Subordinate resources: IP: 2a05:dfc1:91b9::/48
Validation: Failed, certificate revoked on Thu 24 Oct 2024 21:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:97:74:a0:e9:31:7c:41:71:a0:14:c5:39:5c:bd:4c:2b:41:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Jan 30 06:07:53 2024 GMT
Not After : Jan 28 06:12:53 2025 GMT
Subject: CN=2699D31EA71B96E1A99C35B1F5626ACC517EE2E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:44:0e:83:12:6e:29:fc:3e:76:cd:8f:ed:
30:dc:f1:3f:ab:ce:a5:46:55:af:a9:95:ba:00:ca:
1c:2f:cf:02:ac:36:34:83:30:2d:81:d2:36:8e:e3:
2a:77:ff:d3:6f:d8:84:8b:79:2b:21:03:68:ea:38:
a3:a9:dd:38:60:d2:d7:96:4f:34:9c:c2:00:8b:df:
56:f6:84:ee:58:02:80:c3:49:80:65:08:9f:7b:08:
e5:82:a1:3f:25:0a:c4:fc:fd:f5:25:fe:39:0f:1c:
6d:76:b9:6c:11:a4:bf:c5:31:16:e5:2f:f9:cc:d1:
e4:d5:c5:86:93:7c:2c:fc:89:e5:ee:bd:92:b9:2a:
a5:e8:2e:04:83:b0:50:c1:30:2f:03:ec:8e:e4:e8:
dc:33:31:d2:4c:f9:a2:bd:5e:22:9e:ca:27:be:ca:
97:39:bf:f1:3c:79:6a:c7:83:28:84:b9:d1:a8:bf:
a3:b4:59:54:c6:77:71:94:a4:02:60:7e:bf:99:aa:
50:74:cc:b2:65:60:67:dc:cd:42:7c:16:63:b2:e4:
96:5a:2a:5b:89:5d:f2:28:e8:64:6d:63:c5:d4:be:
64:d5:ab:20:fc:dc:80:ea:37:7c:cc:33:90:56:4a:
12:73:33:96:5e:ea:5c:2b:cd:42:35:5a:8e:b4:aa:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:91b9::/48
Signature Algorithm: sha256WithRSAEncryption
25:be:19:89:d6:b3:d6:07:62:a7:d5:8b:24:65:63:c7:44:0e:
0d:21:46:02:af:e1:41:4b:bc:4c:fe:2c:64:d5:1a:9a:44:c8:
c5:0f:a5:48:e8:c2:90:df:0f:7c:76:69:e8:c2:6d:10:c4:b2:
a2:90:11:d7:57:11:85:45:13:d5:9c:d0:17:14:bd:dc:53:fe:
b1:e2:35:80:7b:cc:e9:19:46:8f:9c:b6:85:2f:d3:40:03:92:
65:ad:3c:24:bb:b8:3c:36:dd:75:12:5e:e4:7b:44:d5:e4:8b:
3b:f3:1a:23:a7:83:5e:af:de:fc:4e:5b:2b:b2:29:97:3b:92:
48:3f:0f:6a:af:e3:f1:d9:71:cd:fc:d0:ac:57:55:cf:e5:3f:
80:46:39:c6:05:cc:f8:27:50:23:78:9a:a5:e8:a1:52:f8:e8:
f4:a4:92:fe:e8:81:28:dd:19:2a:0d:04:10:42:f0:db:d2:79:
9d:c4:8c:bf:37:3c:ea:60:b1:54:f7:ea:76:f5:35:66:22:3c:
27:87:72:03:f7:04:10:67:a0:77:0b:3b:8f:a6:74:c5:8f:50:
49:6c:dd:df:75:b8:31:f6:80:c5:dc:a7:b0:c0:39:f2:51:a0:
4e:ad:8f:78:2b:16:93:90:16:92:89:18:61:07:14:ce:aa:e1:
f8:e0:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:48:13 2024 by rpki-client on console-ams.rpki-client.org