Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
File: 1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer (raw, json)
Hash identifier: HhLhmFaDlvxPFOTrYYSA0A+XJWmW+VzbG8ebZJbiE7g=
Subject key identifier: F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FA92FE7B701EA25255BA15823AB507
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:35:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 201963
IP: 185.250.40.0/22
IP: 2a02:d800::/29
IP: 2a04:de00::/29
IP: 2a0b:fb80::/29
IP: 2a0e:2f40::/29
IP: 2a0e:3cc0::/29
IP: 2a0e:7140::/29
IP: 2a0e:b180::/29
IP: 2a0e:e480::/29
IP: 2a0e:fcc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:92:fe:7b:70:1e:a2:52:55:ba:15:82:3a:b5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f998035895f95549c2cdaac3f005446cbdd11c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:b1:bc:7f:06:87:9a:e2:a1:78:2f:aa:39:
64:84:ea:fe:54:ae:40:aa:2d:3b:5b:29:c7:3b:d3:
81:8c:79:d0:e0:ce:ce:38:03:8f:d9:be:e1:0e:c4:
21:df:56:67:f3:26:97:fc:80:69:27:d1:94:40:d7:
40:3f:cd:23:2d:7d:e9:ce:80:4c:12:b1:2f:bf:fc:
1f:90:03:27:52:db:1e:c6:a9:fb:9c:d7:b3:09:95:
dd:44:e6:82:c0:b7:11:e1:12:9b:04:2c:ef:33:0a:
5c:76:8a:72:d7:23:3f:2c:9c:3a:d6:63:07:06:76:
4a:39:b9:bc:4d:f2:cf:a1:65:45:fa:2a:e4:46:d4:
16:23:0b:a6:77:63:6c:7e:7b:e6:a6:11:e8:be:80:
06:f8:7f:ea:d9:4a:73:5c:6c:92:f2:88:cd:9b:47:
64:e9:5e:ea:20:b5:b1:58:08:89:d6:a3:9f:12:5d:
a2:dc:9d:a3:10:98:9a:cf:f0:c3:5f:4b:ff:e0:23:
e9:dd:3a:78:12:e6:aa:06:83:76:aa:db:55:cf:c3:
13:2d:17:da:6d:1c:3c:df:e6:50:9e:95:81:13:c8:
fb:10:d6:b6:20:07:2d:b5:a8:77:b8:4b:a9:b2:2b:
51:8b:6a:51:7c:b4:77:45:6e:f4:31:2e:46:f3:29:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.40.0/22
IPv6:
2a02:d800::/29
2a04:de00::/29
2a0b:fb80::/29
2a0e:2f40::/29
2a0e:3cc0::/29
2a0e:7140::/29
2a0e:b180::/29
2a0e:e480::/29
2a0e:fcc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201963
Signature Algorithm: sha256WithRSAEncryption
7c:2e:37:8e:43:65:0b:54:b4:bc:e6:a8:2f:a0:2a:8f:b0:a9:
0a:f2:f3:2e:bd:8b:85:c2:08:f4:d9:56:24:10:19:76:f1:48:
84:ce:7d:02:9a:42:d6:75:e6:44:20:9d:3f:a1:c5:40:23:7a:
b8:a1:f4:f3:72:d4:6d:56:91:cd:0b:c9:64:00:9d:d5:64:fe:
8d:35:84:45:a8:68:49:c4:cf:58:33:ea:3a:31:67:5c:12:49:
ae:2b:e3:17:df:96:ca:9a:e4:ef:54:9b:04:26:24:b7:8b:92:
d3:b8:45:0e:ca:1b:49:53:f9:46:9a:fe:bb:64:78:de:71:f2:
ca:3c:30:5a:76:f9:1f:63:80:8c:aa:c0:5d:f1:3c:22:ba:19:
03:d1:30:a2:5b:0d:38:d1:8e:97:e4:31:51:60:9b:cd:e2:b4:
73:f6:85:8f:72:a8:aa:cb:8c:7c:26:53:5c:eb:e1:90:82:27:
af:1b:1d:c8:1b:49:70:59:3f:cf:9e:0c:b9:da:33:ca:c1:ab:
c8:75:42:dd:74:42:fd:c2:3c:27:0b:f5:3f:8f:0c:7d:9f:dd:
10:d1:38:48:ac:88:59:e2:ff:00:68:72:e6:c1:dc:41:da:26:
4d:4c:18:fe:0d:7e:39:8c:f8:9e:45:ac:43:01:fe:4e:17:45:
0d:16:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:14 2025 by rpki-client