Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer
File: kSQtl2m3WTScgBjJCHNuVN_8DLU.cer (raw, json)
Hash identifier: eYjvytau25sdzIzp3NvyZeriyrt4dND3dPjbIpDGciY=
Subject key identifier: 91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168F6E0ED204A51E51446917A8258ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.249.55.0/24
IP: 2a11:a400::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:f6:e0:ed:20:4a:51:e5:14:46:91:7a:82:58:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91242d9769b759349c8018c908736e54dffc0cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:be:f5:0f:95:fd:5e:66:3e:60:c9:f6:17:
31:6f:7d:37:22:32:14:32:a1:e3:0a:ba:d2:3e:bf:
04:2b:64:01:df:8f:ef:35:5a:38:34:1f:dd:3f:80:
28:1c:81:f6:db:2a:cf:b1:61:14:14:84:06:81:61:
13:c8:d2:18:4d:b1:46:9a:4f:11:87:44:df:80:1d:
29:16:43:e3:4e:10:10:0e:8b:ff:e8:0b:d9:b9:c5:
1a:bd:00:73:2a:61:b0:60:22:22:07:c9:27:5b:e3:
9b:42:f6:8d:fa:44:23:8f:01:8e:5f:a4:ae:bc:01:
7d:1d:ee:46:a2:7c:e6:a8:99:8e:3e:ab:ed:c3:ca:
31:b8:ea:1b:56:81:f2:94:8f:26:a0:59:c1:07:31:
eb:f4:d5:04:55:d4:c4:24:bf:33:b0:75:f5:d2:15:
04:cb:04:be:f5:63:1e:bb:07:c3:02:b2:1f:39:8e:
7c:e3:16:e5:37:0a:73:f1:f4:8f:46:98:65:8c:96:
70:51:2a:9e:44:21:98:38:b8:63:9c:c1:4e:2b:8c:
39:cf:35:96:7d:03:85:f1:75:1b:4a:10:49:1f:09:
8a:68:59:2c:3d:af:6d:b2:a1:19:ef:50:c8:f2:81:
5f:1c:15:6d:2b:ee:90:cc:76:dc:7a:30:26:f7:3a:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.55.0/24
IPv6:
2a11:a400::/29
Signature Algorithm: sha256WithRSAEncryption
91:2e:b9:98:6b:35:47:ed:87:e1:e8:9b:53:0d:44:6b:ec:de:
11:2e:c4:0d:c3:cb:b3:d3:30:d1:56:d1:9f:b1:64:11:3a:3f:
22:e4:33:de:b3:68:e9:61:fc:bc:22:80:1b:f7:34:b0:c0:2c:
7e:25:63:09:fb:45:23:2d:32:06:e8:4e:e4:d0:84:72:14:e8:
1f:17:cc:c3:6c:b0:c4:b9:0c:cd:67:fc:70:07:ed:eb:46:97:
21:87:7a:ee:5e:84:b8:7a:1c:2d:13:f7:12:42:f2:24:b3:12:
51:52:7a:d5:4d:c6:29:e4:16:98:4b:5a:e2:58:97:c9:ec:2c:
dc:a6:a7:4e:08:a2:3e:aa:5d:94:99:dc:c1:c6:7f:3a:6a:91:
10:65:60:14:31:d2:70:e6:03:f4:d4:3f:40:41:68:47:2e:08:
96:c9:78:47:f4:72:3e:80:3c:d0:79:92:e9:44:9a:63:7f:98:
64:d3:5d:52:63:ec:20:7e:1f:e9:37:31:ee:9d:5b:96:04:11:
96:c4:67:fb:d1:df:76:3e:2a:bd:22:5c:62:34:97:d1:dc:04:
f5:dc:25:11:16:87:4b:03:dc:9f:5e:79:b8:0d:95:6c:8b:ea:
90:0f:7a:ec:ec:2e:5d:d6:3c:96:5b:9d:4c:42:b6:b4:60:39:
1c:6c:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:29 2025 by rpki-client