Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/545C6A5736C41820C43C221A4B622EF9C3675652.cer
File: 545C6A5736C41820C43C221A4B622EF9C3675652.cer (raw, json)
Hash identifier: 2hvuc1q1UftFPSHuh2H80KnR1wI1iH6DXWeuxn7sGGE=
Subject key identifier: 54:5C:6A:57:36:C4:18:20:C4:3C:22:1A:4B:62:2E:F9:C3:67:56:52
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 10BC5E767A279A40CDAD293DDEED2A188627D279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/545C6A5736C41820C43C221A4B622EF9C3675652.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 27 Feb 2025 04:39:18 +0000
Certificate not after: Thu 26 Feb 2026 04:44:18 +0000
Subordinate resources: IP: 2a14:7584:3000::/36
Validation: Failed, certificate revoked on Fri 28 Mar 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bc:5e:76:7a:27:9a:40:cd:ad:29:3d:de:ed:2a:18:86:27:d2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 27 04:39:18 2025 GMT
Not After : Feb 26 04:44:18 2026 GMT
Subject: CN=545C6A5736C41820C43C221A4B622EF9C3675652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:a3:a5:5d:0e:3e:c3:00:96:75:18:dc:3d:
65:81:97:f3:74:a2:41:cf:67:7b:e4:30:37:73:30:
6c:f5:dc:f8:a1:fa:c6:6c:87:4a:44:3a:09:19:f9:
4a:14:a1:27:61:e6:16:cd:36:1e:eb:97:49:aa:c9:
4a:18:6e:0d:9e:87:c1:d0:87:5d:d5:e5:62:63:fe:
34:1c:84:62:a9:cf:a0:0f:5c:d4:60:69:ac:1d:c1:
c0:d1:f9:3b:c0:28:5d:39:99:47:51:28:e6:7c:5a:
93:62:ee:04:02:12:a7:0e:77:4d:21:0f:59:a6:0b:
33:4f:29:3c:9f:c5:42:8b:4d:a5:59:76:82:8e:6a:
09:a8:42:68:1e:ba:53:54:95:f3:c0:03:97:5e:b3:
38:7a:74:52:22:05:dc:96:5e:d1:03:79:d7:28:68:
99:d7:ed:96:b7:5b:73:0e:d0:7d:a5:7f:a3:66:81:
08:97:fb:be:61:da:f5:79:30:e8:7c:e3:ad:f0:59:
17:40:55:01:19:d1:3d:ef:a2:35:b0:c8:b2:b4:fb:
16:93:4c:3a:1f:14:a2:e0:8d:c8:8e:a3:07:18:e7:
e0:80:9c:81:4b:24:8f:79:ac:02:76:41:6a:64:17:
3f:e0:85:a0:17:01:29:4d:73:c6:af:32:b3:b1:26:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
54:5C:6A:57:36:C4:18:20:C4:3C:22:1A:4B:62:2E:F9:C3:67:56:52
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/545C6A5736C41820C43C221A4B622EF9C3675652.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:3000::/36
Signature Algorithm: sha256WithRSAEncryption
90:72:53:cf:4b:c9:99:53:22:4f:b6:66:25:1e:3a:1d:4a:fb:
ba:88:15:e0:f8:94:25:cc:36:48:24:80:3a:91:8e:1d:cd:ad:
9c:2d:1a:95:c0:59:46:13:8a:2e:2f:39:0a:70:25:55:27:5d:
b4:ca:b8:4f:e7:5d:36:88:c9:26:b9:d1:c7:6f:73:47:ec:88:
a8:c0:78:21:7e:42:a4:79:3f:4c:3b:2a:d0:25:af:f1:9c:a6:
58:0c:d1:f0:15:e3:c5:0d:7a:34:09:ca:6d:1d:19:91:fd:8a:
f3:85:78:89:60:ca:e3:ab:68:7d:b1:6b:96:7a:02:5f:55:55:
7e:66:eb:ac:f1:66:17:b4:2f:6c:9d:3c:88:8c:0b:59:db:15:
c1:d3:95:8e:bb:fd:2c:51:0a:ce:7d:56:17:8d:5d:98:1a:31:
86:d0:64:e7:6b:c9:14:54:33:e1:27:5f:76:99:b0:18:1d:6c:
e1:1c:9d:e4:96:2b:3a:83:f6:f8:b4:f0:38:a5:64:b4:9f:45:
dd:76:92:69:75:af:04:c9:5b:b9:67:0a:eb:57:62:be:16:7d:
20:ab:cc:47:44:cb:58:11:1c:4d:e2:08:7f:77:32:5a:9d:5b:
8c:26:17:3d:e9:48:05:be:1d:5f:8b:37:0d:b1:26:db:ab:18:
20:28:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:58 2025 by rpki-client