Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FbHRf4P-hCdFxM0j4fGh7LnNM5I.cer
File: FbHRf4P-hCdFxM0j4fGh7LnNM5I.cer (raw, json)
Hash identifier: jPhyUBBtC4c8DSLOz02cnC90Rmaf+JJCE+V/uKHSICM=
Subject key identifier: 15:B1:D1:7F:83:FE:84:27:45:C4:CD:23:E1:F1:A1:EC:B9:CD:33:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB527A84C5C04A2B3C42B26BBD91CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/FbHRf4P-hCdFxM0j4fGh7LnNM5I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 217.8.116.0/24
IP: 2a12:2a80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:52:7a:84:c5:c0:4a:2b:3c:42:b2:6b:bd:91:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15b1d17f83fe842745c4cd23e1f1a1ecb9cd3392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:2d:04:07:d0:12:89:f5:cf:e7:39:ae:46:
0e:33:c9:fb:2f:9a:ef:d3:96:7e:fd:2a:4a:00:39:
ca:f6:81:60:82:d6:d7:41:37:b7:0e:53:3b:66:be:
55:11:32:29:16:79:e0:a7:c7:72:45:0b:b1:f6:7d:
b4:6e:48:9e:43:0f:fa:9d:40:cb:10:f7:ed:41:64:
9b:26:ab:18:45:4b:b4:88:40:95:9f:28:13:f6:df:
be:89:b5:7f:68:83:57:ba:3e:a5:9b:d5:45:e5:df:
64:85:e3:ee:8a:30:b6:eb:bd:aa:ea:3e:a4:98:2d:
66:fa:32:8e:15:81:55:16:79:0a:d4:b3:ef:6c:4f:
54:4b:24:22:8a:d7:2b:89:c7:bc:5a:cb:44:ea:a5:
b1:13:c4:27:31:40:de:f7:a5:d5:c8:cf:18:3d:25:
dc:1e:2b:0a:b5:a8:65:21:fd:92:1c:5c:62:25:c2:
16:9c:7f:52:91:50:b3:8a:cf:f3:20:03:20:fe:ed:
b0:8f:7c:1d:6b:2f:86:b3:c8:00:ac:d7:31:b7:22:
38:68:c6:de:a8:c0:de:aa:b3:42:98:df:73:e5:10:
73:c9:17:2f:32:54:f4:db:c6:47:1c:ea:3e:30:35:
af:f0:6e:86:85:ee:10:03:0a:65:d8:9f:f6:8d:fa:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B1:D1:7F:83:FE:84:27:45:C4:CD:23:E1:F1:A1:EC:B9:CD:33:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/FbHRf4P-hCdFxM0j4fGh7LnNM5I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.116.0/24
IPv6:
2a12:2a80::/29
Signature Algorithm: sha256WithRSAEncryption
66:23:3c:bc:a8:6a:66:0f:73:ca:26:1d:24:cc:b1:b1:90:c2:
e3:24:ef:ec:fb:de:84:3b:1e:26:c8:75:22:53:46:37:48:61:
67:bd:aa:85:36:e8:f0:82:b5:50:39:09:67:72:85:c8:81:7c:
b2:f3:ea:63:9a:9e:4a:10:03:51:0f:1e:13:3a:ba:1c:6e:a3:
1d:a1:9b:0e:76:2b:c9:e4:8c:62:bb:96:a4:07:08:2f:b2:fb:
8a:70:93:54:8b:f6:d5:27:7f:e9:96:89:dc:3d:d4:fd:20:0f:
40:47:27:62:58:a7:e4:f8:e9:a6:4a:2e:80:30:84:78:e1:b4:
08:97:3e:99:08:e4:ab:3c:06:9f:e4:98:12:3f:f2:c8:98:6b:
ec:6f:aa:72:52:24:3d:9f:7c:ff:3a:e5:ca:2f:aa:38:bc:ca:
e5:7b:49:68:1e:77:d6:e9:40:19:7b:51:6b:64:38:b6:51:fe:
20:42:18:c9:72:63:61:3b:6d:2b:98:7c:a1:71:56:a0:8d:b5:
57:97:7c:19:24:3c:d9:9c:4d:ee:80:17:9b:87:65:2b:2b:de:
de:73:79:08:a7:b1:71:a6:08:da:3d:9e:c3:50:48:20:62:e5:
38:05:f8:29:62:e7:45:ed:be:0b:36:17:c9:2f:44:9c:75:54:
b2:0c:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:39:16 2025 by rpki-client