Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8v3144jpBnLs_Si9ho4uHUClRTU.cer
File: 8v3144jpBnLs_Si9ho4uHUClRTU.cer (raw, json)
Hash identifier: FqXdIyqngdVKSqg9ey0isV7cWWUv6iPmo5tm3jCltLo=
Subject key identifier: F2:FD:F5:E3:88:E9:06:72:EC:FD:28:BD:86:8E:2E:1D:40:A5:45:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C9FFC2ABE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/7effeb-4f45-411a-ab66-cbe0c252b598/1/8v3144jpBnLs_Si9ho4uHUClRTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/7effeb-4f45-411a-ab66-cbe0c252b598/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:53:37 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.176.76.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672699001534 (0x9c9ffc2abe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:53:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2fdf5e388e90672ecfd28bd868e2e1d40a54535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:da:62:93:be:78:a9:64:36:63:3a:79:50:
4b:f4:b3:35:bd:11:95:4c:f8:a9:1a:de:a9:1b:f9:
eb:ad:cc:ae:0d:6a:77:db:5a:a3:e9:4c:ab:53:1c:
91:af:f4:ac:85:ad:0e:26:2f:80:30:a7:cc:58:9f:
01:ba:e5:cb:ce:0d:7b:d9:d0:48:96:a8:ea:ba:9e:
a9:ea:fe:a4:74:24:07:7f:c6:f8:ec:6d:2b:2e:f1:
47:55:ef:87:55:19:e1:73:60:09:15:ee:36:0c:eb:
4a:11:f2:68:2e:29:2d:41:97:ba:25:3b:d0:6c:f8:
1e:fb:bc:e5:8e:96:df:91:ba:b4:00:70:5d:1e:97:
e0:08:5c:c1:d1:74:2c:c7:7f:a8:0a:ea:fb:80:6d:
d5:f7:55:8e:27:ac:e3:25:e7:99:34:e9:71:4a:21:
1b:38:bc:2d:40:33:d3:d8:0e:8d:89:c9:5f:3a:11:
a5:90:1d:b0:76:b2:fa:90:93:6d:f1:a7:4d:de:5d:
da:f5:ca:ad:cd:d4:86:be:d9:c0:28:8a:1c:6e:b8:
ae:1b:57:a3:e4:13:2b:4c:f6:63:57:64:b0:54:cc:
95:8a:1e:3b:15:8b:57:3e:a6:62:a0:89:62:18:cc:
3d:e6:27:0f:09:fb:13:fc:69:96:98:d2:c7:41:a8:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FD:F5:E3:88:E9:06:72:EC:FD:28:BD:86:8E:2E:1D:40:A5:45:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7effeb-4f45-411a-ab66-cbe0c252b598/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7effeb-4f45-411a-ab66-cbe0c252b598/1/8v3144jpBnLs_Si9ho4uHUClRTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:0d:64:44:9b:51:23:08:26:d8:dc:98:c5:3a:1e:45:36:1e:
5b:03:fd:a6:a9:5e:6b:97:38:b4:4d:88:ac:91:6b:f0:04:3d:
75:51:16:b9:c2:4f:ba:be:5e:49:74:a2:bd:c0:91:4f:d5:28:
54:b6:1e:c6:50:b0:7f:87:8e:99:48:28:48:4d:50:b1:63:27:
cd:44:3f:75:f9:a7:ff:2b:d0:01:4b:9d:7f:f0:bf:49:78:71:
33:ed:7a:fc:85:b7:31:b9:c6:f7:3e:38:f9:99:ca:a6:b1:e4:
78:b3:82:67:c5:a3:6f:f4:62:90:c8:61:7e:77:be:ee:8e:48:
9f:a6:a6:1d:c1:af:95:40:84:57:d0:78:f5:e2:4b:42:a0:fa:
60:94:6d:69:3b:82:36:58:e7:93:46:9e:f5:02:24:10:bc:cc:
13:b2:bf:67:58:9b:7f:17:dc:c5:71:2f:c6:0a:0a:a9:da:e5:
36:5f:5c:5a:97:0e:b6:ce:64:9d:f1:cd:ac:67:ac:fc:2d:10:
b0:a6:32:45:46:e0:ec:47:03:bd:a9:ca:ec:03:f5:4c:13:ee:
35:25:82:45:0b:03:1c:80:d8:bf:e8:03:56:d2:91:01:9b:6e:
10:e9:c3:ff:ef:06:3d:89:e7:95:90:ba:cd:19:f2:83:ec:f7:
92:fa:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:52:54 2025 by rpki-client