Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/8538B213F628D165A230ECF32A6C5E947689C211.cer
File: 8538B213F628D165A230ECF32A6C5E947689C211.cer (raw, json)
Hash identifier: fVY+BruheHzkIXPpnm3zi34Ox9zEgBSxb/RLCpS63dw=
Subject key identifier: 85:38:B2:13:F6:28:D1:65:A2:30:EC:F3:2A:6C:5E:94:76:89:C2:11
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 2088137CC65DA29772457640F538130177E89721
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4b8b6036-532b-40c0-aff1-2ff24d8b3daf/1/8538B213F628D165A230ECF32A6C5E947689C211.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4b8b6036-532b-40c0-aff1-2ff24d8b3daf/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 25 May 2025 06:06:40 +0000
Certificate not after: Sun 24 May 2026 06:11:40 +0000
Subordinate resources: IP: 2a0a:6044:bc00::/40
Validation: Failed, certificate revoked on Sun 25 May 2025 06:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:88:13:7c:c6:5d:a2:97:72:45:76:40:f5:38:13:01:77:e8:97:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: May 25 06:06:40 2025 GMT
Not After : May 24 06:11:40 2026 GMT
Subject: CN=8538B213F628D165A230ECF32A6C5E947689C211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:b8:d6:f1:d1:c9:8d:2c:35:d5:7b:2b:48:
11:44:68:59:a3:69:af:17:28:d6:59:65:a8:29:1f:
e2:ce:ea:8a:74:19:ba:3c:b9:e0:75:b7:a9:3e:1c:
cb:3a:c0:a1:f6:d4:0a:89:b2:6c:78:04:57:b9:18:
ad:dd:ac:11:33:38:43:ad:ab:48:ce:85:ad:3f:e6:
c7:19:01:7a:f6:b9:47:99:44:a5:1e:c9:58:55:52:
46:fa:bf:c1:05:a7:e1:7d:23:a1:34:86:30:29:43:
8a:84:4b:90:4c:fe:ab:b0:67:84:06:aa:63:57:ac:
65:7f:db:cb:29:3a:24:d6:e5:26:d4:7f:5c:7e:f9:
dc:be:40:f4:7a:d6:9f:dc:a5:bd:ad:36:49:37:94:
cb:e2:6a:15:08:f1:e0:22:51:45:28:be:69:fe:75:
1f:4a:22:90:f5:db:01:d8:39:2a:86:72:28:31:7b:
38:f2:8f:20:76:2f:23:98:26:54:c7:a9:76:17:ed:
82:39:e9:79:e0:0e:55:1f:01:fa:cb:56:db:c2:e3:
ce:88:cd:93:c8:33:ce:ab:66:fd:22:be:da:c3:df:
5f:5e:58:fd:14:31:b6:65:36:9d:e0:a6:d7:f3:2d:
68:e4:ae:6f:a8:58:d8:ec:82:3c:6e:21:0b:bb:4a:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
85:38:B2:13:F6:28:D1:65:A2:30:EC:F3:2A:6C:5E:94:76:89:C2:11
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4b8b6036-532b-40c0-aff1-2ff24d8b3daf/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4b8b6036-532b-40c0-aff1-2ff24d8b3daf/1/8538B213F628D165A230ECF32A6C5E947689C211.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bc00::/40
Signature Algorithm: sha256WithRSAEncryption
17:64:a1:37:ba:35:b0:b5:c9:ce:0c:d5:11:14:1e:dc:d9:f9:
02:78:c7:60:52:20:77:b0:8c:e4:08:d9:54:ce:a4:64:2b:11:
77:85:67:0e:7f:22:ab:f1:8d:e7:be:ad:11:0f:c9:40:35:f9:
ea:44:92:10:c3:64:d0:ed:5c:89:f4:03:1e:84:05:0b:ef:74:
78:31:e8:8d:9d:c9:84:c8:31:3a:5d:09:9c:3d:5b:af:6e:d5:
a0:de:08:a2:64:57:6a:f3:27:0a:bd:93:4c:a3:0d:42:c8:5e:
4b:ec:ea:0a:ed:89:af:4f:01:27:5e:42:27:67:ce:37:22:7a:
89:66:58:2e:0e:ac:97:bf:d9:8a:14:c9:84:b2:d1:19:c9:f4:
46:38:ac:15:ae:35:2e:54:87:ee:c9:5f:13:bb:ba:f1:1e:b5:
03:55:48:1d:47:5f:37:13:16:90:f0:94:55:ed:67:8e:63:f1:
cf:dc:7b:93:44:e6:40:f4:73:17:b9:92:f3:2c:46:fc:49:21:
72:c9:b2:96:f2:f2:73:9d:1f:f6:12:dd:c4:0a:80:65:6b:1b:
db:05:81:ca:ef:2e:11:7b:5d:3c:3b:ad:2f:2b:e7:17:a7:46:
0b:e3:2f:fe:53:75:3f:9b:87:28:e2:f4:f9:d5:0e:05:1c:2f:
d4:e8:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:11:40 2025 by rpki-client