Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RIAe65so5z_1jw3Up4jwW6Z7Z6o.cer
File: RIAe65so5z_1jw3Up4jwW6Z7Z6o.cer (raw, json)
Hash identifier: pXj0liLoFqNikaI/0vVNaDu+FlJ6lKSOqtMKceODW4A=
Subject key identifier: 44:80:1E:EB:9B:28:E7:3F:F5:8F:0D:D4:A7:88:F0:5B:A6:7B:67:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFFB26D11FA335C5588CE587317A6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/012fb6-91df-4c03-9a4c-b3835de7f1e9/1/RIAe65so5z_1jw3Up4jwW6Z7Z6o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/012fb6-91df-4c03-9a4c-b3835de7f1e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 58054
IP: 176.113.160.0/22
IP: 176.113.168.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:fb:26:d1:1f:a3:35:c5:58:8c:e5:87:31:7a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44801eeb9b28e73ff58f0dd4a788f05ba67b67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:28:4b:d3:f9:37:95:ac:45:d6:46:63:73:
fc:35:11:d1:f7:1b:f6:8c:37:48:af:33:88:50:e2:
a2:66:32:00:0f:d3:d4:c1:a9:fa:1c:4a:4e:bd:33:
ca:b9:59:d0:4c:a2:2f:26:76:2d:33:3c:6c:a8:f5:
21:ba:d6:38:78:13:53:d7:f5:81:af:7f:ce:f6:f2:
b3:5f:ca:1e:b0:e9:fb:fd:58:51:08:4f:86:26:e8:
5b:d1:49:8a:88:11:cc:94:43:17:13:92:e6:6f:d5:
94:89:6c:ee:63:b7:3a:50:76:b4:6c:35:f2:41:60:
64:03:71:f5:7f:ac:4b:e7:bf:c4:1f:c3:e6:53:8d:
ae:ec:ee:88:49:46:c7:f3:9d:e6:0f:81:00:8a:43:
de:a2:78:53:be:83:75:cc:2c:fe:da:46:1f:c9:ed:
8f:05:3a:d9:ac:09:77:a0:65:49:45:f2:e5:61:86:
8e:75:94:bd:89:11:d2:66:72:97:8b:e6:e4:f7:93:
79:af:9c:bf:fb:36:20:3f:a7:25:82:d4:0a:ed:81:
ac:44:c9:56:83:04:20:30:c9:e2:63:32:48:f6:73:
4e:dd:f1:df:82:bf:6d:9c:5c:e4:2d:70:15:f2:9f:
cb:d2:d2:0c:32:05:ac:2e:02:8d:06:0d:00:30:51:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:80:1E:EB:9B:28:E7:3F:F5:8F:0D:D4:A7:88:F0:5B:A6:7B:67:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/012fb6-91df-4c03-9a4c-b3835de7f1e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/012fb6-91df-4c03-9a4c-b3835de7f1e9/1/RIAe65so5z_1jw3Up4jwW6Z7Z6o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.160.0/22
176.113.168.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58054
Signature Algorithm: sha256WithRSAEncryption
37:ef:34:68:2f:4a:e7:71:c3:1a:53:31:04:c1:12:1a:96:3d:
38:46:42:0b:5d:d6:10:cb:d5:14:19:6b:f8:84:f6:5c:b5:ee:
ee:e7:bb:5f:65:ba:f8:02:31:e3:84:b7:96:44:11:09:b4:f8:
e0:d6:aa:ef:e2:8b:1e:c1:ba:8b:6d:1b:0c:12:dc:dd:d7:3d:
e2:5a:43:f4:e7:f2:64:71:d9:85:ff:76:7e:88:35:70:8b:36:
a2:64:cb:8b:9a:2d:63:11:63:6e:52:b0:f8:5b:4f:b0:09:ec:
71:42:f7:e6:d6:2b:7f:15:90:07:b6:f8:73:23:65:c3:f9:b9:
64:e1:a6:b7:b0:b7:52:32:4c:45:04:84:61:ec:ca:39:d9:dc:
56:92:05:3f:bb:80:7a:f4:d9:b4:4d:7e:5a:9f:a7:a8:5b:52:
29:fa:49:8d:44:4f:c8:87:ee:10:fa:01:c6:36:7e:34:c2:68:
c1:2f:cb:7a:cf:e1:e3:6b:72:c3:05:82:0a:78:02:71:2f:b2:
c5:37:73:cd:8a:20:de:27:1b:d3:9a:2f:eb:fb:a2:35:a3:78:
28:19:d7:aa:66:16:d0:dc:e9:74:01:f1:52:59:69:f9:05:b5:
24:cb:bf:32:e3:35:e9:71:02:0a:b1:57:14:80:9a:85:f4:e4:
99:77:89:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:26:51 2025 by rpki-client