Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A0B10D090810F4B4ABCACA33BCF74B38CD214FD0.cer
File: A0B10D090810F4B4ABCACA33BCF74B38CD214FD0.cer (raw, json)
Hash identifier: 2+YTpYfCJPdPy9OPzO+mvqTiEbSi+71nowVxvDGyscE=
Subject key identifier: A0:B1:0D:09:08:10:F4:B4:AB:CA:CA:33:BC:F7:4B:38:CD:21:4F:D0
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 3FBF40ECF779F7A6A492085ACC074BA799DDBF7C
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/A0B10D090810F4B4ABCACA33BCF74B38CD214FD0.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Sun 25 Feb 2024 02:48:36 +0000
Certificate not after: Sun 23 Feb 2025 02:53:36 +0000
Subordinate resources: IP: 2a07:54c0:ffee::/48
Validation: Failed, certificate revoked on Mon 26 Feb 2024 12:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bf:40:ec:f7:79:f7:a6:a4:92:08:5a:cc:07:4b:a7:99:dd:bf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Feb 25 02:48:36 2024 GMT
Not After : Feb 23 02:53:36 2025 GMT
Subject: CN=A0B10D090810F4B4ABCACA33BCF74B38CD214FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:47:4b:a3:22:58:54:7c:95:ed:14:34:7b:
6a:5b:d2:f2:d5:6c:22:3c:06:07:fd:16:a0:b6:8d:
27:7e:39:62:80:1f:b1:80:e2:58:c8:77:b2:1c:59:
89:a8:ca:38:b2:9e:65:8e:a1:07:78:29:b3:62:48:
dc:e7:2f:27:99:ca:50:ef:d3:cd:83:92:00:0e:05:
c3:35:58:3e:40:61:4b:ff:04:00:ff:30:7b:88:98:
37:7f:d4:58:d1:8f:f8:7f:69:74:5a:45:0e:9a:2e:
6a:3f:af:ad:9b:ac:64:a7:df:1a:2e:f0:fa:dc:7d:
76:63:30:2d:1f:31:5d:75:b6:7a:43:9b:da:04:97:
92:31:43:b2:b0:11:4b:84:db:b7:c3:e1:03:e5:d2:
ea:12:7c:5b:a5:d1:ba:35:7e:7b:0f:8b:8a:39:7a:
46:42:e3:a3:c4:93:3c:f7:65:e1:33:7a:5c:1f:d3:
d7:6f:68:5d:dd:e3:4a:01:05:b1:bb:b3:b7:5c:47:
e1:01:c5:38:ab:66:87:7d:70:f7:c9:65:69:f4:f3:
f4:a8:a6:46:8b:02:6f:00:04:d2:79:8e:d4:0f:53:
8a:49:96:a3:97:8f:de:0c:ab:7a:41:02:17:bb:ba:
45:94:6f:06:18:0c:ce:f7:e4:7e:90:98:84:09:5e:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A0:B1:0D:09:08:10:F4:B4:AB:CA:CA:33:BC:F7:4B:38:CD:21:4F:D0
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/A0B10D090810F4B4ABCACA33BCF74B38CD214FD0.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
a5:b3:ed:36:df:f8:e1:b6:bf:44:49:ba:90:11:e1:c7:e2:7a:
51:b3:75:4c:2f:e5:14:45:37:ab:b3:a7:36:68:82:0e:db:df:
9f:ac:39:5d:d3:d7:d3:10:1c:4c:81:51:eb:23:8b:d4:aa:6b:
44:12:73:cd:c1:cc:97:94:96:6e:4a:f5:57:38:fc:f6:f9:08:
dc:01:64:ea:03:6c:8b:b8:6c:79:fb:b6:7e:fa:00:b6:89:dc:
8f:a0:ce:5a:f3:8b:fe:b3:86:6d:ed:f7:3b:c0:a2:05:b0:04:
09:20:93:fd:e2:3d:1e:6c:8c:17:01:d8:90:16:2b:b4:e4:2c:
70:bb:56:98:80:c2:3f:5d:27:02:bf:27:88:2f:f8:a3:94:a2:
2c:a9:11:66:24:31:1f:2d:35:09:07:1a:44:64:22:16:08:2e:
be:b5:3d:e2:75:d7:db:95:47:5d:b6:d7:e8:95:8f:90:89:12:
f4:47:94:9a:fa:07:a6:9b:42:63:9e:0b:d3:54:31:8d:be:ca:
08:04:ac:91:a4:55:e6:4c:6b:9c:57:d2:ee:f0:90:50:ba:b9:
b2:92:71:4a:3a:41:ba:36:06:2c:e1:a3:01:ef:f9:6c:fb:b7:
7e:7c:a9:ef:3c:26:af:14:23:f8:a2:4a:c8:fd:5e:82:12:28:
44:85:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 17:17:12 2024 by rpki-client on console-ams.rpki-client.org