Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
File: cntIdqLREFjC5qd5_OrF8ECDtMI.cer (raw, json)
Hash identifier: j3djAxMy7t5WpooKEHoCku16Upq8YIouZhmAnGJ+s5I=
Subject key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01892FE286D6B5997A0E596C26C56ED72295
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Jul 2023 10:25:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.172.179.0/24
IP: 5.182.116.0/22
IP: 31.40.201.0 -- 31.40.203.255
IP: 45.129.196.0/22
IP: 91.188.236.0/22
IP: 213.232.116.0/22
IP: 2a06:1300::/29
IP: 2a09:a500::/29
IP: 2a0a:c0c0::/29
IP: 2a0d:cdc0::/29
IP: 2a0e:eec0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:e2:86:d6:b5:99:7a:0e:59:6c:26:c5:6e:d7:22:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 10:25:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:33:40:63:0d:eb:3e:7a:a6:02:61:2b:6f:
b5:44:05:03:44:82:7d:33:98:c1:0d:32:00:02:a6:
0c:43:a6:c1:b2:a0:00:68:6d:8d:2c:a4:aa:43:a2:
9d:29:15:fa:88:d9:66:34:85:69:88:91:d2:a4:e8:
e7:2c:25:13:69:ff:94:12:80:3f:1b:27:21:be:d5:
08:6b:1b:58:13:73:14:17:06:ef:bb:d1:34:d0:ed:
50:7c:b5:d0:d9:37:a1:da:d6:c3:18:4f:c8:63:01:
27:a8:16:49:37:13:77:c3:8e:c9:b0:c0:55:28:25:
52:6b:59:90:87:62:7d:0c:42:85:db:0a:76:f1:48:
72:10:eb:32:b4:06:12:1f:ea:5e:f2:14:19:2d:64:
55:9a:0b:4b:b8:f4:58:7a:1c:ce:13:4e:66:2b:29:
6e:2e:90:ed:72:94:e6:60:17:52:02:f1:a3:2a:6f:
b4:22:12:e2:23:58:b0:31:6f:38:0f:49:52:87:e2:
c4:03:98:c3:7f:99:69:e2:64:9a:32:5e:3d:1e:28:
41:f8:f2:51:a8:31:f7:81:ab:1e:98:f7:0d:68:13:
c6:11:fd:04:c0:d3:a2:62:42:69:b9:5b:7c:47:c9:
2f:c7:39:30:2f:da:4e:a0:59:45:ae:1c:f1:dc:ef:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.179.0/24
5.182.116.0/22
31.40.201.0-31.40.203.255
45.129.196.0/22
91.188.236.0/22
213.232.116.0/22
IPv6:
2a06:1300::/29
2a09:a500::/29
2a0a:c0c0::/29
2a0d:cdc0::/29
2a0e:eec0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:eb:55:58:ae:df:21:2d:38:6e:e2:ce:c6:cc:8f:a8:7a:0c:
3d:30:00:51:69:ac:25:1b:51:9f:ae:ba:b2:de:82:05:c6:3c:
23:1d:4b:36:8a:15:3f:a4:7d:33:08:eb:97:0d:a3:e0:97:62:
81:5e:7a:55:01:0a:8e:1c:ce:34:44:6a:dc:3b:9a:99:44:1a:
b6:98:67:47:e8:44:44:93:07:e8:38:26:91:fe:b9:5f:cd:7a:
90:f9:84:0d:9d:23:58:61:01:d7:ce:03:99:15:5a:be:0f:fb:
28:bd:6c:43:3c:76:91:8e:86:5e:88:32:21:bd:f9:23:3c:14:
f3:79:2b:6e:bb:3b:84:cb:69:c9:5d:fe:3d:63:e4:58:d6:37:
54:6e:ea:2c:07:aa:d1:6a:63:7b:61:51:2f:1e:d6:9c:59:a7:
2a:44:dd:f6:0f:7a:a1:7a:7b:5f:23:78:18:09:1b:6c:b3:bf:
2c:10:6e:c4:7e:c2:93:9e:4c:30:d5:0e:0d:e8:c4:50:6b:1c:
b2:50:31:04:55:de:3c:db:d1:be:a5:41:f4:3a:ff:0c:ae:eb:
44:6b:31:6a:c6:b0:39:05:b2:f1:3b:c2:05:e2:1f:dc:a3:cc:
bd:3e:03:26:dd:a9:dd:84:b4:a3:15:b8:a1:8e:dc:97:c4:20:
39:5e:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:18:14 2025 by rpki-client