Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06f0l-YbkSjf_T71pUXJB-lFf_8.cer
File: 06f0l-YbkSjf_T71pUXJB-lFf_8.cer (raw, json)
Hash identifier: ezBqOC9Om1L67yupZFOHhDJn7UfMz6HKNYKe7P/9d40=
Subject key identifier: D3:A7:F4:97:E6:1B:91:28:DF:FD:3E:F5:A5:45:C9:07:E9:45:7F:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8FB617414
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/06f0l-YbkSjf_T71pUXJB-lFf_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:06:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.135.176.0/22
IP: 2a0e:9240::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725771973652 (0xa8fb617414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3a7f497e61b9128dffd3ef5a545c907e9457fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:c8:5e:2d:38:93:bf:d5:20:97:5f:3a:6e:
ea:a4:05:b4:5d:07:35:d1:b1:1a:f0:98:05:d6:ae:
88:c7:a2:29:50:60:12:cb:79:34:3d:52:c2:d8:0c:
9e:f1:02:62:83:82:41:d2:2c:30:b9:0e:47:f5:e8:
3e:a6:4f:98:d3:71:f7:4f:00:44:cb:1b:65:24:95:
65:c1:4b:76:e2:c6:2c:fe:e5:45:01:3e:ea:79:7a:
39:e3:ca:9f:24:35:e7:ba:32:db:7d:b6:7b:35:77:
33:e6:7f:91:78:7f:69:b5:84:04:8e:46:e4:01:01:
a1:c3:a9:c9:4a:f0:8f:65:ea:3c:ab:10:e8:20:35:
e1:4e:ae:b0:13:ad:41:7e:82:d8:6a:19:2d:6c:68:
37:52:b8:65:51:e7:43:17:26:6f:9a:cf:d4:0a:4c:
9b:28:e0:10:00:6b:d8:d5:81:45:6d:f5:f0:02:43:
42:bb:e6:86:69:a1:55:93:3f:30:03:b0:fc:b3:a9:
51:25:36:cd:52:1b:35:9a:8f:d6:fd:97:64:b7:ce:
ba:f9:db:4e:ae:c6:b8:ba:a9:ed:ad:6a:db:f7:b2:
3a:61:36:48:12:4e:6f:4e:62:07:6c:8d:1a:38:7a:
3d:74:ae:45:81:2e:8d:e8:a0:f1:88:ac:87:f6:9a:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:F4:97:E6:1B:91:28:DF:FD:3E:F5:A5:45:C9:07:E9:45:7F:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/06f0l-YbkSjf_T71pUXJB-lFf_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.176.0/22
IPv6:
2a0e:9240::/29
Signature Algorithm: sha256WithRSAEncryption
52:3b:5e:d1:a7:6a:be:84:41:47:51:22:e7:7d:75:09:2a:f7:
16:38:56:48:07:a6:85:a2:37:b3:cf:d0:62:09:b2:d7:88:9f:
3a:66:db:67:03:cf:2f:9e:03:2f:47:4d:ee:2e:d5:51:97:62:
fe:e7:91:68:d3:7a:52:14:2c:80:b0:75:5a:a0:81:5d:7f:e1:
d5:fc:d1:5d:be:24:d0:52:63:a7:47:72:a9:05:ac:ce:e4:87:
21:4e:76:90:cd:5e:e9:c5:ea:09:a9:ae:a2:cb:fc:e0:22:19:
c4:10:0b:3c:da:0d:aa:6d:e7:d5:47:ff:82:20:03:40:b7:41:
7e:7e:65:4f:46:2f:07:e3:37:86:19:b1:65:8b:a4:e8:aa:67:
b9:45:97:33:b7:1c:02:89:5d:77:2a:f2:52:97:a5:11:2b:33:
ca:07:a4:81:82:a3:fd:2f:10:db:b3:e0:08:29:07:5c:61:ce:
a8:09:a3:ef:ce:7e:8e:63:c1:43:69:8b:7d:86:be:a4:8f:2a:
83:e7:be:52:4d:da:09:4b:e9:13:09:4a:05:60:a4:19:2a:df:
fe:53:15:a0:34:1e:14:63:43:0f:84:40:33:d2:52:4d:03:5f:
86:11:cf:7f:cb:db:ce:3f:c7:66:53:ce:4b:74:9e:75:c7:dc:
01:3c:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 16:28:36 2025 by rpki-client