Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7m-Hk7Blsi9dvGU8evHeVtpLah8.cer
File: 7m-Hk7Blsi9dvGU8evHeVtpLah8.cer (raw, json)
Hash identifier: xWlJxo+TDswP49wX2CYk7yZkWaZ6JRdGakTLCedLm18=
Subject key identifier: EE:6F:87:93:B0:65:B2:2F:5D:BC:65:3C:7A:F1:DE:56:DA:4B:6A:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01834187D7A02DF55F7288E43F8B5EC4A710
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/7m-Hk7Blsi9dvGU8evHeVtpLah8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Sep 2022 14:22:45 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a01:6580::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:87:d7:a0:2d:f5:5f:72:88:e4:3f:8b:5e:c4:a7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 14:22:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee6f8793b065b22f5dbc653c7af1de56da4b6a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:cd:a1:8e:47:20:31:23:df:98:57:1a:65:
96:ca:b6:36:46:1b:46:59:cb:a9:3d:ef:18:7d:ca:
62:29:c0:8b:73:b1:cc:eb:3d:36:a6:db:ab:36:4d:
55:bb:fa:76:c2:70:43:46:85:2d:4e:a4:7f:1a:59:
c8:27:fa:ad:b4:a2:43:3f:0a:84:99:e8:1b:78:4c:
b3:f1:b1:1c:ce:15:80:22:6c:d6:09:17:7b:b1:b1:
e8:65:0b:ff:ff:56:fe:4f:66:72:8a:7c:17:a9:04:
63:47:7b:e7:09:56:e8:e3:6c:f0:54:fb:7b:54:40:
2a:00:fe:70:40:0f:33:9f:be:36:9e:9f:ab:87:60:
45:a0:49:8c:56:87:34:8c:65:1b:ee:9c:c0:ef:fc:
9e:3e:e9:3e:c5:d0:27:e9:6a:f8:eb:f8:75:11:01:
e7:46:e2:52:1d:5e:f0:a1:97:c7:89:c2:c8:81:60:
36:d5:55:6d:1f:f4:65:40:46:4a:b4:50:a3:67:47:
d9:25:dd:12:ff:90:92:35:99:4f:e1:3d:b2:82:be:
ca:59:2a:19:64:b9:ff:98:2c:ae:7e:0b:6e:8d:41:
19:63:df:97:52:61:3e:d2:d7:37:c4:25:52:0f:fe:
c2:a9:b4:7a:fe:91:cc:3c:c2:77:ad:0c:78:23:9e:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:87:93:B0:65:B2:2F:5D:BC:65:3C:7A:F1:DE:56:DA:4B:6A:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/7m-Hk7Blsi9dvGU8evHeVtpLah8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6580::/32
Signature Algorithm: sha256WithRSAEncryption
86:05:44:8a:52:8e:6e:72:3c:09:5d:9f:5a:be:11:a4:0b:b2:
6f:1f:de:7b:b7:6a:ae:cc:66:cc:de:1b:60:08:a1:e6:06:4c:
99:ee:dc:13:0f:7a:81:49:4c:be:33:0a:81:e4:a3:47:b7:ee:
21:3c:dd:fd:79:99:0d:01:8e:dd:f3:ed:0f:44:88:05:76:48:
af:8c:36:b2:2b:c1:15:73:c1:18:b1:55:e4:67:b0:32:4b:9d:
0d:ee:ed:97:36:f9:4e:0f:88:df:1d:21:51:fc:05:f7:52:57:
9b:a9:37:19:f7:b7:6f:fd:7e:37:9a:e9:03:56:c9:bf:c1:bc:
76:4b:50:cb:58:6b:03:6c:3a:1d:35:6b:80:fb:62:b9:48:95:
e4:2c:ed:a0:83:5e:7d:ae:21:9b:f2:63:4d:92:36:ca:ed:53:
40:9a:3b:07:dc:d0:45:57:4d:b4:be:08:8a:c7:0e:21:75:dc:
b7:55:0b:4d:e9:0d:2b:73:3e:5f:00:40:cd:33:c4:af:4c:53:
e4:4e:f2:03:b3:9d:92:65:2e:e7:5a:24:c7:ad:5b:1d:59:94:
fd:bf:32:05:90:e8:26:6b:36:ea:5d:85:2e:5c:41:44:67:8d:
b3:b1:8f:b8:ca:72:13:04:d8:53:c6:44:3e:51:03:b2:3f:69:
37:ae:c7:c1
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYNBh9egLfVfcojkP4texKcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIwOTE1MTQyMjQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTZmODc5M2IwNjViMjJmNWRiYzY1M2M3YWYxZGU1NmRhNGI2YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVnNoY5HIDEj35hXGmWWyrY2RhtG
WcupPe8YfcpiKcCLc7HM6z02pturNk1Vu/p2wnBDRoUtTqR/GlnIJ/qttKJDPwqE
megbeEyz8bEczhWAImzWCRd7sbHoZQv//1b+T2ZyinwXqQRjR3vnCVbo42zwVPt7
VEAqAP5wQA8zn742np+rh2BFoEmMVoc0jGUb7pzA7/yePuk+xdAn6Wr46/h1EQHn
RuJSHV7woZfHicLIgWA21VVtH/RlQEZKtFCjZ0fZJd0S/5CSNZlP4T2ygr7KWSoZ
ZLn/mCyufgtujUEZY9+XUmE+0tc3xCVSD/7CqbR6/pHMPMJ3rQx4I57lgQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFO5vh5OwZbIvXbxlPHrx3lbaS2ofMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2M0ZjIz
NS0xNGE2LTQ3NDYtOWE3Ni0wYjQyYjRmMjk5NDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvYzRmMjM1
LTE0YTYtNDc0Ni05YTc2LTBiNDJiNGYyOTk0MC8xLzdtLUhrN0Jsc2k5ZHZHVThl
dkhlVnRwTGFoOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAKgFlgDANBgkqhkiG9w0BAQsFAAOCAQEAhgVE
ilKObnI8CV2fWr4RpAuybx/ee7dqrsxmzN4bYAih5gZMme7cEw96gUlMvjMKgeSj
R7fuITzd/XmZDQGO3fPtD0SIBXZIr4w2sivBFXPBGLFV5GewMkudDe7tlzb5Tg+I
3x0hUfwF91JXm6k3Gfe3b/1+N5rpA1bJv8G8dktQy1hrA2w6HTVrgPtiuUiV5Czt
oINefa4hm/JjTZI2yu1TQJo7B9zQRVdNtL4IiscOIXXct1ULTekNK3M+XwBAzTPE
r0xT5E7yA7OdkmUu51okx61bHVmU/b8yBZDoJms26l2FLlxBRGeNs7GPuMpyEwTY
U8ZEPlEDsj9pN67HwQ==
-----END CERTIFICATE-----
Generated at Wed Mar 12 17:23:26 2025 by rpki-client