Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer
File: BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer (raw, json)
Hash identifier: 0q0cUfu9NwbTxzYvGcX/+lOKv6yQ+6bywzOSKRX12ns=
Subject key identifier: BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 13F0E5FAAF3BB90F050DD8B3DEF832647AE94B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 15 Feb 2025 07:05:49 +0000
Certificate not after: Sat 14 Feb 2026 07:10:49 +0000
Subordinate resources: IP: 2a14:7581:9fa0:: -- 2a14:7581:9fcf:ffff:ffff:ffff:ffff:ffff
Validation: Failed, certificate revoked on Fri 07 Mar 2025 06:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f0:e5:fa:af:3b:b9:0f:05:0d:d8:b3:de:f8:32:64:7a:e9:4b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 15 07:05:49 2025 GMT
Not After : Feb 14 07:10:49 2026 GMT
Subject: CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:e9:7a:01:60:7f:e4:18:fd:33:ee:00:c3:
b2:95:48:06:92:83:c2:b4:30:cc:ef:80:db:c6:9e:
01:77:78:23:6a:64:ec:ac:fb:bb:fd:fe:c8:23:89:
e0:c5:26:6b:c2:4a:41:f5:e4:f7:37:c2:2f:a2:31:
52:d9:3e:06:26:b7:e5:72:05:8a:95:00:d0:79:b3:
40:69:22:b4:f6:0d:00:1a:11:22:03:99:20:93:e2:
70:c1:b4:4e:29:a2:40:fe:00:16:89:9a:46:27:c1:
82:59:bd:e8:20:cb:c3:37:c3:34:2a:d7:eb:db:cc:
63:d9:74:10:37:68:8f:93:55:b9:2d:8f:c8:10:5b:
a5:c6:b7:15:4d:d9:9b:10:ae:14:de:f3:b9:dc:3f:
b4:e9:84:d0:d4:e0:1f:8d:ef:2e:91:44:c2:45:0b:
be:2b:58:9f:3a:22:11:05:8b:12:f5:e0:7f:d2:b5:
5d:69:84:b9:b1:a2:65:c6:ad:5f:ed:79:f2:fc:a9:
75:4b:f2:74:cf:7c:e2:29:e6:7b:50:0a:5e:59:ff:
dd:cb:1b:d0:ce:50:02:32:d6:72:f4:54:8b:56:fb:
29:c2:31:b0:8b:42:e1:84:31:68:bd:0c:f6:9a:92:
97:30:dc:d8:83:90:22:18:ab:86:ab:23:b9:d4:93:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9fa0::-2a14:7581:9fcf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:20:49:35:9b:cc:2f:15:b6:e7:3c:fa:cc:1c:7a:af:ca:ea:
94:67:1b:db:54:79:97:5b:ef:21:4c:ce:fd:d1:1e:43:f5:36:
63:e3:03:2e:57:d2:c7:64:d8:b1:39:ee:af:e8:57:a8:a1:2a:
4f:f8:72:c1:21:9d:92:81:4a:f6:f3:bf:f0:5b:f5:11:20:b0:
78:ba:c5:c4:58:1b:e5:06:e3:2f:06:bf:42:d7:6d:4c:b4:ff:
b3:e9:8d:dc:89:7c:da:9f:3d:82:5c:c4:70:db:bb:5d:e8:d1:
14:79:e1:b8:6c:de:36:6e:a1:c9:cc:7a:9a:2e:0f:03:a3:25:
58:fd:9c:99:f7:53:25:18:13:0f:a8:d0:f6:b5:bf:77:ee:bf:
db:d1:d9:5e:f0:7d:33:7c:a3:86:0a:4a:5d:84:09:58:dc:3d:
2b:10:bc:7f:a0:99:f6:66:2d:05:60:4b:9b:04:f6:1b:28:49:
06:51:93:27:a8:a3:80:ff:c1:19:25:f6:59:7f:29:59:72:a0:
36:e6:e4:6d:1e:85:6d:bf:67:cf:83:bc:ea:94:3e:ec:73:64:
45:ab:a4:81:ef:2e:30:c3:2d:8e:8f:e2:9a:f0:72:72:0a:e8:
a8:61:dd:0b:50:fd:7b:73:ff:e7:b6:49:7d:08:fa:ec:2a:b9:
2e:8f:04:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:40 2025 by rpki-client