Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.cer
File: DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.cer (raw, json)
Hash identifier: KjlXuJPX62NkW7hSddRYqNKK3gex/Y+bs9pCthoAnIQ=
Subject key identifier: DE:AC:9A:97:2D:6E:09:98:C9:8D:CF:45:67:A8:89:FE:2B:31:8C:2C
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 3D667784288F0650F64F376E1B2A92C4063FD155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Manifest: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.mft
caRepository: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Fri 11 Apr 2025 12:02:47 +0000
Certificate not after: Fri 10 Apr 2026 12:07:47 +0000
Subordinate resources: IP: 2a0b:4e07::/32
Validation: Failed, certificate revoked on Fri 11 Apr 2025 14:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:66:77:84:28:8f:06:50:f6:4f:37:6e:1b:2a:92:c4:06:3f:d1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Apr 11 12:02:47 2025 GMT
Not After : Apr 10 12:07:47 2026 GMT
Subject: CN=DEAC9A972D6E0998C98DCF4567A889FE2B318C2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:02:3f:df:b1:7e:3f:7a:b2:1c:4d:59:38:
c8:dd:db:e8:18:8b:6d:4e:a8:e7:18:69:14:d3:c7:
68:a3:09:74:45:02:1e:5d:af:17:62:c3:b4:85:35:
64:40:28:01:51:c0:49:65:df:f2:4b:25:44:05:58:
bf:42:91:dc:e7:10:77:4e:6f:bf:cd:5a:0a:89:4f:
00:d1:6a:f8:b8:92:f8:d9:0c:66:68:07:20:11:98:
12:05:03:ad:94:37:db:0d:7a:5a:d5:97:f0:38:c2:
15:4c:21:3a:2b:90:64:29:f0:95:25:4e:66:00:95:
3e:6e:9d:8e:8e:d9:78:2a:0e:48:99:5e:54:4f:a1:
36:b3:62:17:12:a1:63:6e:8b:d0:1b:af:58:4f:eb:
e4:d8:7a:71:3c:de:2f:5a:a5:99:02:6c:c3:5a:4d:
a6:d8:d1:98:e9:f7:37:94:c7:4a:1d:33:51:d4:98:
77:8d:0f:5c:43:53:c9:5f:c4:5f:9e:e8:89:b3:8e:
65:0f:bd:76:00:8c:da:cb:3d:79:e1:b3:eb:0d:3e:
64:a9:a0:c1:7a:3c:b0:ec:bf:3e:c1:93:6d:55:24:
4c:f4:a7:33:67:18:46:5c:55:5b:05:2f:2f:77:c9:
51:5c:a8:ec:3e:94:18:6c:2d:f3:54:21:02:df:80:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DE:AC:9A:97:2D:6E:09:98:C9:8D:CF:45:67:A8:89:FE:2B:31:8C:2C
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07::/32
Signature Algorithm: sha256WithRSAEncryption
57:e9:1f:9a:90:16:57:7d:98:bd:e1:4b:b9:c9:14:d8:28:d2:
a6:c2:0f:a2:30:cd:10:fb:83:b8:a1:44:ab:c6:a5:b2:8e:d6:
6f:65:b9:56:c4:45:db:94:3b:51:19:df:45:5c:c5:f2:d7:4d:
01:5c:07:2b:8a:ff:26:e3:7e:1c:93:b2:db:b1:21:64:60:e5:
8c:2d:16:a9:e5:ba:8b:c6:ab:51:b1:c1:b9:83:fe:f7:f0:13:
03:97:d0:d1:e7:bb:5d:a3:82:b4:54:d5:b1:d6:ff:fb:0d:85:
bf:67:68:e5:4f:c7:eb:52:bd:09:c4:da:ea:5c:2a:66:61:74:
5b:36:f5:20:96:f0:c3:ad:0e:de:54:52:b9:fd:06:31:76:bf:
ec:55:39:8d:69:d3:44:b2:e4:c8:1b:e9:7d:5f:9f:8d:1c:51:
1b:a1:8b:a6:16:d8:36:8b:42:06:c5:dc:e8:ed:6b:5c:69:56:
92:b9:66:e8:76:f7:dd:88:17:3f:79:7a:fa:ab:8e:01:33:43:
73:a0:4b:75:37:b8:65:2e:7f:ce:32:9c:3f:60:83:e7:8b:6c:
0f:aa:8b:ae:ae:e9:c1:3c:99:46:cd:95:75:0b:a0:c0:75:05:
1f:a2:f6:e9:e8:31:9a:02:59:16:7f:f4:ef:78:88:10:05:e4:
01:40:ac:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:25:16 2025 by rpki-client