Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PxOVxR3tOrDXiaipPhq3Yl3OUv0.cer
File: PxOVxR3tOrDXiaipPhq3Yl3OUv0.cer (raw, json)
Hash identifier: oFCkkoay1+j3hyh5GzHPGx9fsdtMpLXZmYY6uHALQB8=
Subject key identifier: 3F:13:95:C5:1D:ED:3A:B0:D7:89:A8:A9:3E:1A:B7:62:5D:CE:52:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 752B87ECEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123881/0/3F1395C51DED3AB0D789A8A93E1AB7625DCE52FD.mft
caRepository: rsync://nostromo.heficed.net/repo/1123881/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:06 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 213074
IP: 45.137.116.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503241501932 (0x752b87ecec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:06 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=3f1395c51ded3ab0d789a8a93e1ab7625dce52fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:cf:b0:fb:df:02:40:2e:ea:d0:72:15:d5:
c8:53:d0:b2:5d:d9:26:e2:e6:c7:91:10:11:1b:e6:
19:ab:ae:a4:b7:81:94:7c:cd:b9:c8:6c:9e:5c:07:
9a:70:4e:b4:7b:90:77:14:ee:1c:a6:db:cc:1f:1a:
09:41:42:a0:dc:d8:0f:07:c3:24:ff:5d:e2:39:c1:
20:37:34:b2:bc:d6:7d:96:ee:d5:03:d4:f3:08:a0:
53:ba:dd:de:ec:e9:ac:a9:30:27:88:f6:e5:a8:f0:
85:84:51:44:58:cb:e7:1e:69:b2:67:53:1f:1c:73:
1f:21:1d:c8:c1:9f:fd:ef:e4:72:6f:fb:60:b1:87:
04:40:9e:b8:1d:41:ce:6c:ec:82:77:1e:3b:45:57:
67:66:5f:df:92:c4:58:87:57:0d:e4:5e:ba:ff:65:
14:7a:18:d9:68:3a:42:07:63:be:19:d0:a8:7f:3b:
66:5f:d8:3e:3d:bf:98:30:b8:4e:24:56:7e:6e:a7:
df:14:50:69:ab:f2:cb:bb:50:c4:ba:63:ff:3d:83:
1b:66:a9:ec:52:81:b6:db:77:37:0b:e3:dc:5d:83:
38:fc:84:93:08:34:12:df:a0:b2:fa:6c:3e:b8:ad:
6d:93:69:61:75:3f:de:57:f0:5c:7e:f9:16:46:85:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:95:C5:1D:ED:3A:B0:D7:89:A8:A9:3E:1A:B7:62:5D:CE:52:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123881/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123881/0/3F1395C51DED3AB0D789A8A93E1AB7625DCE52FD.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.116.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213074
Signature Algorithm: sha256WithRSAEncryption
76:2e:00:fc:a2:04:21:dc:31:3b:aa:bb:6f:8f:91:8b:3b:c7:
b9:77:39:54:b0:32:de:b4:02:4b:57:ca:79:51:1e:ad:ad:5b:
5d:91:1e:61:21:86:9e:6a:fe:6c:1d:97:b5:87:16:c9:ff:a4:
05:fd:3e:cb:0a:82:6d:e2:61:4f:c7:68:ec:99:40:1b:87:ff:
94:f0:29:e7:16:74:93:85:2f:67:2b:ae:ca:d9:0a:39:f1:87:
a0:4f:50:85:90:ed:e2:1d:1a:a8:38:45:4b:4c:4e:81:0f:31:
a3:73:93:b9:ac:43:e6:c4:74:d8:97:e7:09:4e:d8:f9:0d:1b:
d3:66:36:ce:d3:e8:b6:45:92:49:b3:51:6f:39:60:38:ea:29:
01:8e:f6:46:a1:42:19:38:28:4f:12:d0:d5:7d:5e:31:16:fa:
30:59:5b:1e:3f:55:84:4f:de:85:1f:33:88:9b:b4:db:8d:15:
06:f4:fb:45:ba:97:29:fa:9f:4c:a5:5f:53:da:0f:e7:28:20:
ec:02:7c:d2:de:84:97:04:d8:43:2d:6f:00:09:83:bf:76:83:
0a:3e:61:9e:0d:92:e9:7c:bb:a6:69:6b:01:e2:16:41:23:5f:
b6:bd:47:73:e1:6a:55:03:4d:f9:06:04:f4:f7:e5:e1:34:85:
ca:b4:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:20:43 2025 by rpki-client