Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mwcMB6KSYYGGOFzCBOyV-2SvXRk.cer
File: mwcMB6KSYYGGOFzCBOyV-2SvXRk.cer (raw, json)
Hash identifier: cvVHxy1ozYq4mZIgIwDzj0fFSJJRR0vX4S/noDdQ0es=
Subject key identifier: 9B:07:0C:07:A2:92:61:81:86:38:5C:C2:04:EC:95:FB:64:AF:5D:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFAEE777FEA3D8AD1CF2EA70AC81D7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/mwcMB6KSYYGGOFzCBOyV-2SvXRk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.195.0/24
IP: 2a11:d840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:ee:77:7f:ea:3d:8a:d1:cf:2e:a7:0a:c8:1d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b070c07a292618186385cc204ec95fb64af5d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:35:d2:93:43:d8:21:54:f7:19:66:df:75:
59:36:08:cd:6b:06:d5:0f:f8:28:72:64:bc:e2:bc:
df:3c:35:4c:49:b1:79:9a:a1:e2:56:89:dc:af:b1:
17:f0:e6:43:4c:cb:73:73:24:2e:c3:3e:cc:58:b4:
ee:26:dc:8a:3c:51:c4:1d:1b:7a:ae:a5:a7:1d:36:
fd:5e:89:96:cf:e5:86:71:7e:b1:d3:e2:55:cb:3f:
1f:89:de:21:22:6b:5b:15:c8:97:df:5b:e0:0c:fb:
32:3e:31:94:d5:78:6d:d3:06:9e:99:96:d7:c4:49:
d8:a2:8b:b3:29:86:92:82:9c:2e:df:ba:57:5a:1d:
19:17:67:11:5a:b0:fd:e5:10:54:f5:92:80:83:32:
ca:7d:3a:34:c1:37:23:cf:44:d1:cf:78:eb:33:e1:
4c:a6:39:0b:77:da:af:aa:f0:27:dd:fa:41:52:78:
5a:60:90:32:76:16:6c:a1:4c:9a:5e:d7:11:08:90:
35:00:50:6e:ad:8c:b7:34:36:c0:d0:82:5d:a3:b4:
22:c9:77:e4:4a:5a:28:53:e6:5d:21:ae:0d:9a:f3:
e7:3c:a5:ff:e5:56:46:be:76:56:6e:52:ec:ae:3f:
62:23:35:35:d6:2a:86:61:97:9a:07:32:8f:34:41:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:07:0C:07:A2:92:61:81:86:38:5C:C2:04:EC:95:FB:64:AF:5D:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/mwcMB6KSYYGGOFzCBOyV-2SvXRk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.195.0/24
IPv6:
2a11:d840::/29
Signature Algorithm: sha256WithRSAEncryption
81:a1:fe:53:57:95:66:cc:e0:bb:b9:fa:7e:45:10:3e:c7:05:
b0:cf:c7:62:3c:8a:a9:a4:fc:42:1b:e7:91:73:0e:e7:41:a7:
a6:1e:86:96:b7:f0:c7:41:94:41:b0:e0:27:b9:3f:1e:3e:2b:
8f:ff:02:a1:2f:38:0c:9c:ce:2a:e3:ae:0f:1b:51:2e:61:a4:
4d:aa:1c:f8:bf:d7:3e:46:e0:8b:af:63:9b:52:8f:fe:c1:55:
30:b4:ab:88:a7:ed:2f:e0:3d:4a:6d:cd:58:a7:0f:75:3b:1f:
4d:ca:a6:bd:36:94:fd:4b:83:ba:43:1d:42:5b:b4:90:28:5f:
e8:7e:86:b7:57:c0:39:5e:5c:5e:72:8a:65:a6:2b:34:6c:fb:
0e:24:b4:cb:0c:aa:37:cf:b8:50:e5:65:2c:9c:b2:29:b6:7f:
6b:9c:8b:65:23:ba:8d:36:2a:75:97:85:db:de:ac:ea:7f:26:
80:fa:32:8e:51:2e:47:96:76:33:7e:ad:8e:3f:df:e5:6c:ff:
30:fe:0a:48:b0:d2:05:47:54:f4:b2:2f:75:1f:db:93:ae:2e:
b7:bb:d8:91:ff:8d:ea:a3:04:20:ff:5d:f5:49:00:4f:26:09:
73:ba:0e:b7:77:11:1d:a1:72:85:55:f7:36:ce:2f:35:bd:97:
37:d5:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 16:52:40 2025 by rpki-client