Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A0B10D090810F4B4ABCACA33BCF74B38CD214FD0.cer
File:                     A0B10D090810F4B4ABCACA33BCF74B38CD214FD0.cer (raw, json)
Hash identifier:          yB2yu0hUkyAy8646Ej2cPH/CuO94iv7islytP5/9NGg=
Subject key identifier:   A0:B1:0D:09:08:10:F4:B4:AB:CA:CA:33:BC:F7:4B:38:CD:21:4F:D0
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       2E16F1A57781BD8D192977A8730232AB617E8128
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/A0B10D090810F4B4ABCACA33BCF74B38CD214FD0.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 19 Sep 2023 14:38:31 +0000
Certificate not after:    Tue 17 Sep 2024 14:43:31 +0000
Subordinate resources:    IP: 2a07:54c0:ffee::/48

Validation:               Failed, certificate revoked on Sun 25 Feb 2024 02:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:16:f1:a5:77:81:bd:8d:19:29:77:a8:73:02:32:ab:61:7e:81:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Sep 19 14:38:31 2023 GMT
            Not After : Sep 17 14:43:31 2024 GMT
        Subject: CN=A0B10D090810F4B4ABCACA33BCF74B38CD214FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:47:4b:a3:22:58:54:7c:95:ed:14:34:7b:
                    6a:5b:d2:f2:d5:6c:22:3c:06:07:fd:16:a0:b6:8d:
                    27:7e:39:62:80:1f:b1:80:e2:58:c8:77:b2:1c:59:
                    89:a8:ca:38:b2:9e:65:8e:a1:07:78:29:b3:62:48:
                    dc:e7:2f:27:99:ca:50:ef:d3:cd:83:92:00:0e:05:
                    c3:35:58:3e:40:61:4b:ff:04:00:ff:30:7b:88:98:
                    37:7f:d4:58:d1:8f:f8:7f:69:74:5a:45:0e:9a:2e:
                    6a:3f:af:ad:9b:ac:64:a7:df:1a:2e:f0:fa:dc:7d:
                    76:63:30:2d:1f:31:5d:75:b6:7a:43:9b:da:04:97:
                    92:31:43:b2:b0:11:4b:84:db:b7:c3:e1:03:e5:d2:
                    ea:12:7c:5b:a5:d1:ba:35:7e:7b:0f:8b:8a:39:7a:
                    46:42:e3:a3:c4:93:3c:f7:65:e1:33:7a:5c:1f:d3:
                    d7:6f:68:5d:dd:e3:4a:01:05:b1:bb:b3:b7:5c:47:
                    e1:01:c5:38:ab:66:87:7d:70:f7:c9:65:69:f4:f3:
                    f4:a8:a6:46:8b:02:6f:00:04:d2:79:8e:d4:0f:53:
                    8a:49:96:a3:97:8f:de:0c:ab:7a:41:02:17:bb:ba:
                    45:94:6f:06:18:0c:ce:f7:e4:7e:90:98:84:09:5e:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:B1:0D:09:08:10:F4:B4:AB:CA:CA:33:BC:F7:4B:38:CD:21:4F:D0
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/A0B10D090810F4B4ABCACA33BCF74B38CD214FD0.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:f7:76:2c:53:54:48:7f:70:72:d0:e0:43:8d:17:3e:45:e2:
         21:9c:ce:ea:93:c0:57:d3:3a:56:36:75:c6:c6:30:a4:77:8e:
         67:62:71:62:23:7c:8c:d9:bb:04:a5:6c:5f:cb:6f:9c:09:19:
         bb:96:6b:15:9a:b9:75:e8:89:d9:03:38:23:d1:fa:d4:49:97:
         34:b8:68:ef:e5:3e:f3:46:7d:ff:6f:fd:a1:e3:84:83:27:f4:
         29:66:21:75:47:fa:17:3a:25:89:b3:44:11:61:80:66:aa:e6:
         a7:f6:ed:0d:a7:60:83:cc:61:6e:98:e7:8a:59:1f:3d:06:6e:
         30:d6:14:d7:7a:4b:39:ed:84:67:4b:cf:80:6b:da:0b:bc:4d:
         4a:83:0f:23:84:e2:74:a3:3a:1c:01:ec:25:e3:04:83:bc:3f:
         71:ab:a0:54:d4:fe:e0:11:be:12:df:31:b6:11:e1:a3:f8:e6:
         da:e8:74:31:88:49:ee:b9:a8:b7:66:2a:c0:05:eb:6c:84:f4:
         a9:ba:f9:2e:3d:33:95:8b:de:b7:ef:6f:af:c8:6b:5e:2b:66:
         2a:02:69:4f:9a:3e:c2:ad:7c:d7:66:8d:0e:c1:e8:b9:a4:16:
         95:6d:18:74:a9:94:17:40:cc:a1:76:ea:9c:f4:51:19:a6:4c:
         e3:c3:bf:85
-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgIULhbxpXeBvY0ZKXeocwIyq2F+gSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw
RTFFMkY4RTAeFw0yMzA5MTkxNDM4MzFaFw0yNDA5MTcxNDQzMzFaMDMxMTAvBgNV
BAMTKEEwQjEwRDA5MDgxMEY0QjRBQkNBQ0EzM0JDRjc0QjM4Q0QyMTRGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5UdLoyJYVHyV7RQ0e2pb0vLV
bCI8Bgf9FqC2jSd+OWKAH7GA4ljId7IcWYmoyjiynmWOoQd4KbNiSNznLyeZylDv
082DkgAOBcM1WD5AYUv/BAD/MHuImDd/1FjRj/h/aXRaRQ6aLmo/r62brGSn3xou
8PrcfXZjMC0fMV11tnpDm9oEl5IxQ7KwEUuE27fD4QPl0uoSfFul0bo1fnsPi4o5
ekZC46PEkzz3ZeEzelwf09dvaF3d40oBBbG7s7dcR+EBxTirZod9cPfJZWn08/So
pkaLAm8ABNJ5jtQPU4pJlqOXj94Mq3pBAhe7ukWUbwYYDM735H6QmIQJXsazAgMB
AAGjggL4MIIC9DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgsQ0JCBD0tKvK
yjO890s4zSFP0DAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD
QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3
N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw
VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y
eS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8yLzCBgAYIKwYBBQUH
MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFk
ZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8yL0EwQjEwRDA5MDgxMEY0QjRBQkNB
Q0EzM0JDRjc0QjM4Q0QyMTRGRDAubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy
ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN
BgkqhkiG9w0BAQsFAAOCAQEAovd2LFNUSH9wctDgQ40XPkXiIZzO6pPAV9M6VjZ1
xsYwpHeOZ2JxYiN8jNm7BKVsX8tvnAkZu5ZrFZq5deiJ2QM4I9H61EmXNLho7+U+
80Z9/2/9oeOEgyf0KWYhdUf6FzolibNEEWGAZqrmp/btDadgg8xhbpjnilkfPQZu
MNYU13pLOe2EZ0vPgGvaC7xNSoMPI4TidKM6HAHsJeMEg7w/caugVNT+4BG+Et8x
thHho/jm2uh0MYhJ7rmot2YqwAXrbIT0qbr5Lj0zlYvet+9vr8hrXitmKgJpT5o+
wq1812aNDsHouaQWlW0YdKmUF0DMoXbqnPRRGaZM48O/hQ==
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:54 2024 by rpki-client on console.sobornost.net