Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rz4EB0K7ruYq8pUIpSmoWm94Uak.cer
File: Rz4EB0K7ruYq8pUIpSmoWm94Uak.cer (raw, json)
Hash identifier: 9ouw2BZz4uPIYSSv9GzNQP2CCc5OYdi9bAvUpAeLkk4=
Subject key identifier: 47:3E:04:07:42:BB:AE:E6:2A:F2:95:08:A5:29:A8:5A:6F:78:51:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188912F7EB16B92511331A494BFA0F9C636
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/Rz4EB0K7ruYq8pUIpSmoWm94Uak.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 Jun 2023 14:49:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 85.8.128.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:2f:7e:b1:6b:92:51:13:31:a4:94:bf:a0:f9:c6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 6 14:49:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=473e040742bbaee62af29508a529a85a6f7851a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:a0:94:2f:f2:c9:d7:f5:48:f0:58:72:b4:
03:a8:25:2a:a0:af:1b:6f:ef:5c:f0:a3:dc:62:e5:
98:4d:97:78:7a:dd:44:06:ed:b6:db:16:61:66:50:
58:bd:94:23:6f:bb:33:1a:68:c0:22:7f:71:0f:01:
d2:84:ec:6e:e9:d5:b1:8e:fd:69:65:f1:8a:93:ee:
37:4d:06:77:b3:7f:c5:0d:5e:f9:e9:1c:d5:51:fe:
2b:36:91:70:23:61:62:e3:07:dc:fa:dc:9a:be:07:
b0:c9:01:88:b6:bc:ae:e6:bf:cc:08:c5:02:10:13:
aa:e0:46:63:56:80:38:19:23:d9:39:fb:fd:71:65:
95:32:f1:a2:81:34:fd:36:72:29:06:79:35:a1:d3:
d1:86:cd:05:81:5a:74:0b:1f:3c:6b:f0:5b:15:e3:
db:6a:ad:8e:64:22:66:c5:f7:cf:e5:49:47:09:c7:
e3:f9:75:1a:a5:af:ee:4f:2c:db:60:71:70:80:e9:
86:c7:1a:b7:1b:bf:af:e5:78:a5:e5:8c:86:ce:7a:
e3:b0:6a:75:f1:51:56:c8:d0:88:9d:88:82:52:c6:
b2:0b:ae:2d:f5:f1:9b:4d:c7:c3:5e:fd:d1:47:12:
ea:2e:5e:ee:7d:4e:6e:32:1b:3e:fb:aa:a6:d5:ce:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3E:04:07:42:BB:AE:E6:2A:F2:95:08:A5:29:A8:5A:6F:78:51:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/Rz4EB0K7ruYq8pUIpSmoWm94Uak.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.128.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0f:24:99:4a:8e:55:19:31:71:27:1b:81:53:d4:57:fa:23:
49:05:c5:ec:7a:74:c3:1e:90:29:2f:f1:aa:9e:54:30:13:84:
ee:4b:4a:6e:53:ca:e8:d7:22:48:5e:7b:6d:e9:e9:d5:f9:3d:
4d:92:9d:f8:8b:b0:82:75:70:c6:af:4d:e8:d2:27:e5:67:65:
e3:22:d1:d2:63:09:bf:ed:f9:0f:bf:f5:63:c5:25:f4:97:61:
7e:f4:55:b7:1e:bd:25:fb:2f:32:9b:51:9a:a9:e9:92:3c:20:
d9:b3:b8:ff:eb:f8:da:63:54:86:15:11:e9:f6:42:67:4e:7f:
b6:db:2b:32:e4:ee:7f:af:70:af:9c:e3:a5:d9:00:fa:17:0f:
40:0f:07:30:21:da:55:ac:56:56:13:5c:4b:0e:7f:ec:1b:31:
06:f5:bf:0f:2f:27:7e:58:4c:ae:0e:e0:0e:54:a4:e4:dc:b3:
3a:c5:62:6c:e3:4c:e8:b3:00:f8:e5:2a:5a:8d:ad:08:d8:6f:
25:76:49:81:f5:54:4c:8b:bd:cb:b5:ca:6a:ca:bd:6d:a3:c2:
24:db:65:8a:dd:f9:18:73:6d:77:2c:14:91:00:08:4a:35:b4:
9a:95:0c:22:22:97:da:7e:ba:90:74:c0:c6:24:71:5d:4d:e0:
fb:5e:58:e6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYiRL36xa5JREzGklL+g+cY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjA2MTQ0OTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzNlMDQwNzQyYmJhZWU2MmFmMjk1MDhhNTI5YTg1YTZmNzg1MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGiglC/yydf1SPBYcrQDqCUqoK8b
b+9c8KPcYuWYTZd4et1EBu222xZhZlBYvZQjb7szGmjAIn9xDwHShOxu6dWxjv1p
ZfGKk+43TQZ3s3/FDV756RzVUf4rNpFwI2Fi4wfc+tyavgewyQGItryu5r/MCMUC
EBOq4EZjVoA4GSPZOfv9cWWVMvGigTT9NnIpBnk1odPRhs0FgVp0Cx88a/BbFePb
aq2OZCJmxffP5UlHCcfj+XUapa/uTyzbYHFwgOmGxxq3G7+v5Xil5YyGznrjsGp1
8VFWyNCInYiCUsayC64t9fGbTcfDXv3RRxLqLl7ufU5uMhs++6qm1c7bwwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEc+BAdCu67mKvKVCKUpqFpveFGpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzE0NzMx
Yi01MDhkLTRkMzQtOWU2MC1jZWNlYzRmMDVlODcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvMTQ3MzFi
LTUwOGQtNGQzNC05ZTYwLWNlY2VjNGYwNWU4Ny8xL1J6NEVCMEs3cnVZcThwVUlw
U21vV205NFVhay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAVQiAMA0GCSqGSIb3DQEBCwUAA4IBAQBkDySZ
So5VGTFxJxuBU9RX+iNJBcXsenTDHpApL/GqnlQwE4TuS0puU8ro1yJIXntt6enV
+T1Nkp34i7CCdXDGr03o0iflZ2XjItHSYwm/7fkPv/VjxSX0l2F+9FW3Hr0l+y8y
m1GaqemSPCDZs7j/6/jaY1SGFRHp9kJnTn+22ysy5O5/r3CvnOOl2QD6Fw9ADwcw
IdpVrFZWE1xLDn/sGzEG9b8PLyd+WEyuDuAOVKTk3LM6xWJs40zoswD45Spaja0I
2G8ldkmB9VRMi73Ltcpqyr1to8Ik22WK3fkYc213LBSRAAhKNbSalQwiIpfafrqQ
dMDGJHFdTeD7Xljm
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:50:19 2025 by rpki-client