Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FEB2F3155357AD513816B56BDFDE3BE148394840.cer
File:                     FEB2F3155357AD513816B56BDFDE3BE148394840.cer (raw, json)
Hash identifier:          U12hHkGavCokCqlFgZQD4J3HfbKY2yEfyBf6nhkT5Ws=
Subject key identifier:   FE:B2:F3:15:53:57:AD:51:38:16:B5:6B:DF:DE:3B:E1:48:39:48:40
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       2AE613CA2C933D8EFE6032E2EDCECA9E7ACAD9A3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/FEB2F3155357AD513816B56BDFDE3BE148394840.mft
caRepository:             rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 11:48:40 +0000
Certificate not after:    Fri 10 Apr 2026 11:53:40 +0000
Subordinate resources:    IP: 2a06:1281:9000::/36
Validation:               Failed, certificate revoked on Fri 11 Apr 2025 18:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e6:13:ca:2c:93:3d:8e:fe:60:32:e2:ed:ce:ca:9e:7a:ca:d9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Apr 11 11:48:40 2025 GMT
            Not After : Apr 10 11:53:40 2026 GMT
        Subject: CN=FEB2F3155357AD513816B56BDFDE3BE148394840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:51:38:1b:94:26:72:f2:cd:22:5e:b4:71:
                    39:de:06:27:ee:30:b8:64:ae:b5:54:ef:70:c5:9c:
                    3e:e6:aa:8c:30:86:85:fc:c3:cc:95:b7:b2:20:83:
                    82:3d:8a:5e:6d:c0:11:43:6e:b9:17:9e:cf:c1:f7:
                    a3:75:0a:4f:c0:26:2f:be:49:b9:f2:1f:16:84:bf:
                    3e:c5:78:4c:d8:05:6b:af:2d:ce:4a:a5:ef:e1:38:
                    a8:fa:9a:3b:ae:12:a7:66:60:cd:49:cd:00:9a:7e:
                    f6:01:3f:d0:69:43:0b:83:a0:59:6c:29:5e:22:68:
                    09:83:4b:25:54:4c:11:0a:ef:d0:44:a4:89:87:f2:
                    3b:61:92:bf:25:4e:e2:55:45:29:96:3c:fa:8b:49:
                    0d:df:38:d4:99:ec:e8:99:78:87:48:f7:e3:77:0c:
                    20:2d:e1:56:61:aa:72:b5:fe:0d:bc:ca:b0:e0:3a:
                    b4:5c:79:7c:39:c3:2b:7c:9c:ac:85:31:c4:5b:64:
                    60:53:ab:b1:05:86:4b:3a:8f:cd:e4:29:a6:f4:4c:
                    a2:ee:3e:cf:a0:cb:27:86:46:90:8a:ed:c0:6a:ef:
                    f8:52:63:85:d7:c3:bc:22:08:e4:d4:6d:8f:1a:4b:
                    b8:00:d6:07:c0:5a:bc:4e:35:a8:26:97:b8:94:83:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:B2:F3:15:53:57:AD:51:38:16:B5:6B:DF:DE:3B:E1:48:39:48:40
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/FEB2F3155357AD513816B56BDFDE3BE148394840.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:f6:86:a7:98:e2:cf:27:e9:e1:ed:cf:73:d7:3b:e2:44:
         27:ba:23:46:44:d5:5a:32:17:c0:b0:a3:3d:29:0d:ec:dc:2c:
         97:b9:d3:e0:2a:f0:42:ed:51:be:0e:eb:cc:cf:ce:c3:7a:c5:
         82:57:7e:60:0e:4c:03:2d:a4:e4:c0:1b:4a:ef:74:16:c0:48:
         e9:08:6a:80:b1:c4:47:d0:2e:1b:5f:37:a1:03:b4:be:55:5d:
         ec:a0:46:c8:9b:02:7d:92:62:c8:80:45:b7:4f:91:95:c9:bc:
         60:1d:d4:bb:02:d1:4d:9b:73:46:b5:03:05:1e:e4:93:e1:e1:
         b0:84:96:83:22:c4:e2:45:c9:28:2a:c4:5f:05:59:f0:ac:1b:
         6f:cd:14:32:20:e1:b4:82:ea:9d:26:c6:a2:44:7a:1a:65:eb:
         53:80:4d:4d:75:53:95:5a:29:9d:4a:12:21:1a:df:26:2e:9a:
         8b:81:3d:f3:3b:6d:af:ea:af:1d:fb:1c:c9:fb:94:e9:68:12:
         52:05:6d:b2:11:65:0d:eb:f5:d9:f7:85:d7:a0:eb:43:7d:6b:
         2f:f1:68:f2:d2:42:98:ce:42:91:de:22:f9:cb:f4:ec:0b:13:
         76:ad:35:ce:bf:3e:c4:71:4b:e0:08:c4:54:d1:59:a3:cb:fd:
         72:9b:d5:48
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgIUKuYTyiyTPY7+YDLi7c7KnnrK2aMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA0MTExMTQ4NDBaFw0yNjA0MTAxMTUzNDBaMDMxMTAvBgNV
BAMTKEZFQjJGMzE1NTM1N0FENTEzODE2QjU2QkRGREUzQkUxNDgzOTQ4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwlE4G5QmcvLNIl60cTneBifu
MLhkrrVU73DFnD7mqowwhoX8w8yVt7Igg4I9il5twBFDbrkXns/B96N1Ck/AJi++
SbnyHxaEvz7FeEzYBWuvLc5Kpe/hOKj6mjuuEqdmYM1JzQCafvYBP9BpQwuDoFls
KV4iaAmDSyVUTBEK79BEpImH8jthkr8lTuJVRSmWPPqLSQ3fONSZ7OiZeIdI9+N3
DCAt4VZhqnK1/g28yrDgOrRceXw5wyt8nKyFMcRbZGBTq7EFhks6j83kKab0TKLu
Ps+gyyeGRpCK7cBq7/hSY4XXw7wiCOTUbY8aS7gA1gfAWrxONagml7iUg3lTAgMB
AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+svMVU1etUTgW
tWvf3jvhSDlIQDAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5
ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy
OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC
NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw
VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y
eS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4MjBmNS8yLzCBgAYIKwYBBQUH
MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2
NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4MjBmNS8yL0ZFQjJGMzE1NTM1N0FENTEzODE2
QjU2QkRGREUzQkUxNDgzOTQ4NDAubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy
ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoGEoGQMA0G
CSqGSIb3DQEBCwUAA4IBAQBw4faGp5jizyfp4e3Pc9c74kQnuiNGRNVaMhfAsKM9
KQ3s3CyXudPgKvBC7VG+DuvMz87DesWCV35gDkwDLaTkwBtK73QWwEjpCGqAscRH
0C4bXzehA7S+VV3soEbImwJ9kmLIgEW3T5GVybxgHdS7AtFNm3NGtQMFHuST4eGw
hJaDIsTiRckoKsRfBVnwrBtvzRQyIOG0guqdJsaiRHoaZetTgE1NdVOVWimdShIh
Gt8mLpqLgT3zO22v6q8d+xzJ+5TpaBJSBW2yEWUN6/XZ94XXoOtDfWsv8Wjy0kKY
zkKR3iL5y/TsCxN2rTXOvz7EcUvgCMRU0Vmjy/1ym9VI
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:55:04 2025 by rpki-client