Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_CshjCZDX_90oC8lGYz3DvnpqQE.cer
File: _CshjCZDX_90oC8lGYz3DvnpqQE.cer (raw, json)
Hash identifier: Zaj0FD+OU+/WY3duSoQCt1rGdrkkHt3tVRcwBlxm8hg=
Subject key identifier: FC:2B:21:8C:26:43:5F:FF:74:A0:2F:25:19:8C:F7:0E:F9:E9:A9:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFD76B468114E1715B6B8AE2FF32B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/_CshjCZDX_90oC8lGYz3DvnpqQE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.243.184.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:d7:6b:46:81:14:e1:71:5b:6b:8a:e2:ff:32:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc2b218c26435fff74a02f25198cf70ef9e9a901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:ea:7b:87:29:65:f3:73:d4:e9:b9:41:32:
3a:30:97:42:94:66:d5:e4:a6:89:93:c7:d3:45:1a:
21:14:b4:3d:6d:81:46:d8:2a:a2:dd:80:b2:3d:14:
da:87:3e:f2:bd:18:2c:2d:c6:60:ee:f3:37:a1:0d:
e3:ab:47:78:55:cd:aa:c6:2c:ef:ad:e0:58:2f:4a:
16:93:4b:46:58:77:6f:75:26:f2:b1:ab:10:88:70:
56:45:a3:84:0d:5e:35:85:fa:7e:b5:c0:51:63:36:
ea:21:d3:8f:33:94:fd:18:15:7e:1e:b2:b5:5d:b7:
03:94:90:99:fe:c8:7f:c9:91:77:f6:a5:8f:7b:5a:
87:59:39:4c:6c:8a:34:5b:b5:f3:85:73:0e:46:a6:
68:f2:df:82:c7:83:38:9c:49:8a:ba:a8:35:74:99:
4f:4c:e5:27:32:7a:a8:62:83:20:17:66:b9:d4:c4:
68:97:fc:80:e6:2b:68:bd:f4:a9:d3:43:0c:42:f3:
03:4a:27:2e:c9:df:ac:75:96:ea:b3:a0:6d:1c:8e:
1b:88:a2:c6:86:e8:d1:6b:e5:a6:75:47:b6:83:6c:
71:26:32:e6:f8:8d:da:34:99:44:86:91:b4:7c:69:
b6:ec:b7:80:bf:0a:44:2a:30:54:f3:f4:73:aa:91:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:21:8C:26:43:5F:FF:74:A0:2F:25:19:8C:F7:0E:F9:E9:A9:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/_CshjCZDX_90oC8lGYz3DvnpqQE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.184.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6e:f4:6b:6c:97:4e:e2:22:f0:99:75:da:4f:bb:cf:7e:0c:
7f:f1:8d:c3:99:c9:f8:0c:44:40:f7:1b:7a:8d:6b:8e:89:9c:
83:c3:85:40:b3:e3:24:82:73:94:ec:00:88:88:ea:9a:94:58:
2f:dc:ff:35:8c:73:32:9b:a6:9d:22:9d:4b:8a:95:bc:c8:eb:
90:09:32:5b:b2:ac:50:32:97:7b:b0:c3:07:ca:8c:ff:15:b3:
d0:38:58:13:c5:83:c4:c8:c5:59:31:9e:2b:54:62:1f:c8:d8:
6e:a7:12:8e:de:93:a6:20:d9:c4:9d:2a:7a:97:a1:a4:1b:f9:
b5:fe:77:91:81:04:29:ee:8b:61:a2:5e:54:82:d4:87:7f:ad:
cd:31:c0:f8:c2:97:29:c6:70:0e:a4:be:02:c2:03:7f:95:aa:
1f:fc:24:a8:43:3c:16:11:6c:32:61:6e:33:75:60:00:42:b0:
6f:af:25:f5:cb:9a:45:72:26:45:04:0a:2e:f8:78:b3:68:ba:
af:78:f1:4a:8c:d9:64:cb:e9:c0:3f:39:74:a7:c8:cf:b3:54:
f0:ec:56:25:d4:7f:e2:74:a6:73:d4:e3:14:08:51:60:97:ea:
4e:cf:5b:d4:17:f0:dc:27:88:34:ae:c8:31:af:1e:5c:18:4b:
8e:c8:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 16:16:24 2025 by rpki-client