Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
File: F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer (raw, json)
Hash identifier: 5HspbVou9uFFLTKfLMgSVQdEVrVli0ZiHkEh8tdYsdE=
Subject key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 1C645332272E544177DBB5EFE853CF512AD94E99
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 19 Sep 2023 02:09:59 +0000
Certificate not after: Tue 17 Sep 2024 02:14:59 +0000
Subordinate resources: IP: 2a07:54c5::/32
Validation: Failed, certificate revoked on Thu 14 Mar 2024 12:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:64:53:32:27:2e:54:41:77:db:b5:ef:e8:53:cf:51:2a:d9:4e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Sep 19 02:09:59 2023 GMT
Not After : Sep 17 02:14:59 2024 GMT
Subject: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:47:e4:80:69:ef:2a:32:3d:ac:0a:1e:98:
86:8d:16:18:dd:02:c8:83:e8:c7:13:a9:b3:a0:69:
44:e0:f1:62:27:21:f3:d9:d1:db:96:f8:f1:08:03:
3e:89:d7:7d:91:7b:44:ff:18:13:eb:20:f6:86:af:
41:10:50:21:5a:73:e2:bb:ca:e5:e1:33:ea:5e:f4:
79:f7:13:97:70:82:11:2e:97:f7:39:60:04:89:da:
75:50:52:0a:9b:0d:a5:0c:15:2a:42:f8:64:22:37:
d6:99:af:fa:02:ea:bc:95:c0:e7:2f:c4:19:f8:8b:
de:91:51:ce:0c:96:1b:3e:3c:26:f0:0e:ba:a5:e8:
1f:d6:02:f9:32:a8:53:ac:f5:08:44:d1:08:6a:79:
7f:76:f1:1a:54:98:54:ce:d5:47:5c:15:8a:37:99:
f0:e3:e4:3a:f9:49:a1:8b:17:69:b4:69:91:e0:18:
6a:53:ab:ab:f2:b4:36:f5:ad:b2:fb:6d:3d:47:14:
e4:ca:7a:ff:5d:50:f2:af:7d:c2:c3:e6:8c:5b:30:
f9:7a:64:0e:e2:6e:06:69:21:b6:da:ed:e3:63:ab:
97:9b:29:fc:c0:11:d4:89:c4:32:10:11:96:fa:c9:
dc:3b:df:37:9f:cc:59:e5:6e:fc:16:75:dd:4d:80:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c5::/32
Signature Algorithm: sha256WithRSAEncryption
96:1a:f1:58:bd:b6:79:af:6e:be:c7:11:87:af:8b:c1:b4:3a:
db:7e:ed:d3:31:77:c3:95:b5:0a:f9:a8:0d:b4:7b:0c:6c:8a:
46:ee:58:ad:d5:7e:30:dd:e1:ac:79:c6:6f:2a:7d:35:07:b4:
65:e8:e6:99:0e:e9:f6:a0:66:81:39:74:52:dd:bd:e9:85:1a:
22:1d:17:5f:c0:0d:ea:21:15:de:1d:88:92:1e:cd:a9:ac:de:
f9:4d:6c:62:f7:d9:19:58:ec:24:42:66:1c:d0:74:5e:c7:b1:
6d:52:f9:c4:f2:99:44:ce:fa:da:81:12:01:a8:0d:84:cb:26:
59:6f:58:fa:78:10:d0:08:1b:d3:35:0a:57:01:40:e1:ed:79:
89:c0:bc:d4:2c:34:dd:9c:62:5e:f2:3c:f2:d2:07:68:f9:1b:
30:33:76:0f:88:66:64:79:94:43:00:2a:01:49:25:60:f8:50:
70:df:b4:5e:27:f6:97:b5:17:c5:60:e8:9c:52:81:d5:aa:e3:
d2:51:88:68:5c:f5:bc:03:79:5d:56:11:05:20:8b:53:48:5f:
6e:d3:e2:9b:1a:86:f3:33:6f:9b:d2:45:1e:0c:3f:0e:66:6b:
d1:6c:6e:26:dc:36:46:01:dd:11:0d:d4:05:ba:3c:51:b4:7d:
61:b2:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 17:54:47 2024 by rpki-client on console-ams.rpki-client.org