Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/DCFAFAE49FF3CD4ACE29F77380149A75BC3C45A4.cer
File: DCFAFAE49FF3CD4ACE29F77380149A75BC3C45A4.cer (raw, json)
Hash identifier: 5MOt4Pf3LvoEEc25XaJ/hDWlWLVMqbKG5Anr/bqiCEk=
Subject key identifier: DC:FA:FA:E4:9F:F3:CD:4A:CE:29:F7:73:80:14:9A:75:BC:3C:45:A4
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 1CE025458B28F73B568E1BA5E55A0BC194B7D51D
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/427820d3-d6d0-4edd-8af0-3dedd9658084/0/DCFAFAE49FF3CD4ACE29F77380149A75BC3C45A4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/427820d3-d6d0-4edd-8af0-3dedd9658084/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 03 Mar 2024 04:04:01 +0000
Certificate not after: Sun 02 Mar 2025 04:09:01 +0000
Subordinate resources: IP: 2a07:54c7:6000::/36
Validation: Failed, certificate revoked on Sun 03 Mar 2024 20:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e0:25:45:8b:28:f7:3b:56:8e:1b:a5:e5:5a:0b:c1:94:b7:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Mar 3 04:04:01 2024 GMT
Not After : Mar 2 04:09:01 2025 GMT
Subject: CN=DCFAFAE49FF3CD4ACE29F77380149A75BC3C45A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:22:e4:95:f7:46:2f:47:e2:ba:25:9f:09:
10:d9:c6:1e:69:bb:d5:81:a6:4e:d8:ef:20:59:d1:
3e:12:34:c2:f4:1d:2b:4a:e4:fc:93:2c:c3:70:2c:
98:f7:29:2f:98:d2:d5:65:35:e1:6a:84:e4:7a:f2:
fb:b5:5e:9c:98:05:8c:12:fd:5d:06:96:99:6a:72:
c1:07:1f:8c:6a:0f:25:70:33:d7:1f:82:a7:dc:d1:
20:30:e8:10:84:19:34:0f:13:59:4a:a6:1d:d3:78:
e8:02:3a:90:8b:d3:68:e5:5c:3d:da:ad:d4:23:b6:
39:78:75:93:83:0f:7e:24:fc:5f:1f:bb:64:da:7a:
32:7b:f2:79:32:a9:a9:9c:97:b4:9c:26:1d:43:73:
f3:f0:0f:e4:d5:0a:58:64:4a:3f:63:e1:6d:c8:85:
c5:16:85:7f:0c:05:ef:34:15:5b:66:fb:6c:c7:74:
26:52:4d:f3:b4:18:86:26:fd:0c:54:ee:ab:16:93:
81:53:50:2a:19:9f:c6:d0:84:85:f8:fb:2c:4a:ac:
f7:78:22:17:e9:33:42:19:32:40:08:bd:61:48:73:
e4:db:03:dc:ab:12:d9:7c:a6:23:b6:8b:1d:3c:a0:
a5:9a:89:28:d7:18:4f:b2:6a:3d:11:f7:1a:9f:79:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DC:FA:FA:E4:9F:F3:CD:4A:CE:29:F7:73:80:14:9A:75:BC:3C:45:A4
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/427820d3-d6d0-4edd-8af0-3dedd9658084/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/427820d3-d6d0-4edd-8af0-3dedd9658084/0/DCFAFAE49FF3CD4ACE29F77380149A75BC3C45A4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c7:6000::/36
Signature Algorithm: sha256WithRSAEncryption
4f:5f:50:d7:52:3f:b1:88:81:65:9e:8a:29:89:5a:bd:83:a8:
d1:c8:a2:fe:53:45:5b:e0:c5:ef:c2:d4:1d:05:20:d1:ea:e7:
8e:0f:5b:05:f4:59:05:97:61:56:07:e6:19:d0:6a:c7:05:b5:
15:a5:1c:a0:66:bc:07:35:1c:e1:65:64:a2:e9:4d:b6:a7:0a:
06:f4:4f:ec:a2:67:a1:5e:00:c3:56:dc:97:f3:ec:9e:97:06:
23:9a:bb:24:bb:67:99:fd:0c:c2:e0:b2:ca:43:ad:5f:e5:d2:
36:20:f3:ac:60:a3:65:7a:58:2e:5f:27:fe:d0:da:9b:0e:24:
20:93:12:36:5d:c0:81:32:c5:df:81:25:e9:cf:8d:37:0f:a5:
21:60:54:0a:a0:3b:db:fe:e6:5a:51:f9:88:80:df:f0:da:96:
ef:d8:f9:8d:a9:fd:4e:54:ca:e0:31:d2:32:56:b5:e6:a0:5b:
a7:9a:a6:9d:f3:0b:52:5d:61:f3:7f:48:a3:18:4a:a6:01:d4:
cf:c4:e1:27:7a:5f:e4:33:69:4c:91:5d:c9:1a:ca:db:0f:10:
93:d0:c7:00:42:9c:b7:de:49:0a:bb:19:0d:e7:8b:6d:fc:e4:
df:80:88:dd:c7:b1:bb:be:a8:b3:c3:ad:d5:4f:b7:f2:95:06:
36:86:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 20:54:31 2024 by rpki-client on console-fra.rpki-client.org