Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sUayiVGiEWPcllG1TCOTb8ys9Hs.cer
File: sUayiVGiEWPcllG1TCOTb8ys9Hs.cer (raw, json)
Hash identifier: PFAvc3E/MsaUxbHTSRdWmrRR9knKZE6lby1Jkzty9pY=
Subject key identifier: B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A96F924B1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/sUayiVGiEWPcllG1TCOTb8ys9Hs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:57:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 31027
AS: 34932
AS: 35589
IP: 5.56.144.0/20
IP: 5.179.80.0/20
IP: 37.49.128.0/20
IP: 62.116.192.0/19
IP: 77.233.224.0/19
IP: 82.192.160.0/19
IP: 83.136.88.0/21
IP: 83.151.128.0/18
IP: 87.116.0.0/18
IP: 89.221.160.0/20
IP: 92.62.192.0/20
IP: 93.176.64.0/18
IP: 130.185.128.0/20
IP: 185.20.240.0/22
IP: 185.67.128.0/22
IP: 193.105.149.0/24
IP: 195.140.132.0/22
IP: 217.116.208.0/20
IP: 217.195.176.0/20
IP: 2a02:188::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727721331485 (0xa96f924b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b146b28951a21163dc9651b54c23936fccacf47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:cf:9b:a4:1f:dd:03:e9:5f:ec:e9:34:01:
a1:39:55:94:55:d6:a0:1b:d7:40:25:a1:79:0f:c8:
19:93:07:29:55:6b:11:70:86:cd:7b:e2:d3:cd:c2:
0c:e6:9a:eb:42:f7:85:b5:68:cc:37:80:45:02:19:
d6:57:9e:83:8e:e1:64:af:32:54:39:8a:15:a2:12:
16:a1:04:8d:8d:64:b6:bd:e2:9d:78:72:39:d5:9a:
35:45:43:8e:96:48:0b:0c:5c:b4:67:e0:8d:6f:0a:
e6:e9:84:45:7a:d3:ab:ca:6f:ec:d8:56:17:b8:05:
2b:77:75:4c:08:a9:75:52:fa:8c:51:b3:7d:6d:85:
68:17:aa:9a:b4:fd:bf:f8:23:64:4e:ea:a5:cd:f5:
8c:a1:7d:5a:f9:06:54:93:9d:1e:d3:f1:d1:1e:3c:
1e:bd:92:71:0d:47:d5:70:90:90:63:96:f0:ff:fc:
00:9d:3e:3c:4c:91:16:d6:95:d9:88:07:90:3c:ed:
fb:04:bd:79:82:39:f9:c9:82:d0:31:8c:fc:85:71:
1a:2d:8b:29:78:e8:a5:71:56:08:60:d7:bf:4a:96:
67:2e:7e:3a:2d:a9:42:9b:f8:5a:1a:cb:fe:4c:a0:
36:65:70:38:eb:44:af:4d:70:94:7e:19:72:93:79:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/sUayiVGiEWPcllG1TCOTb8ys9Hs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.144.0/20
5.179.80.0/20
37.49.128.0/20
62.116.192.0/19
77.233.224.0/19
82.192.160.0/19
83.136.88.0/21
83.151.128.0/18
87.116.0.0/18
89.221.160.0/20
92.62.192.0/20
93.176.64.0/18
130.185.128.0/20
185.20.240.0/22
185.67.128.0/22
193.105.149.0/24
195.140.132.0/22
217.116.208.0/20
217.195.176.0/20
IPv6:
2a02:188::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31027
34932
35589
Signature Algorithm: sha256WithRSAEncryption
9e:c2:85:8f:54:8d:82:af:2b:a2:e6:ed:bb:bb:93:03:79:56:
7e:70:48:e2:fc:03:8c:6e:cc:85:21:f8:f0:1c:ae:e5:9d:ef:
43:dd:f4:c2:14:31:72:ff:81:48:a3:f7:ba:c8:7b:c5:aa:88:
96:44:34:12:8b:76:8f:63:2b:ba:39:17:19:32:69:9d:eb:d7:
b8:15:df:d2:8f:90:15:24:93:6b:51:39:9a:03:4f:6a:48:2d:
02:57:c0:f6:18:90:e7:3f:06:e8:d9:c4:40:ca:a6:9e:ff:e8:
23:db:d4:b3:d6:89:5e:94:c9:73:92:f0:f9:6a:48:39:1e:d2:
34:ed:0a:00:57:1c:8a:fe:3a:cc:d5:92:6f:40:ae:1c:32:49:
0a:68:4d:ab:d7:c8:7a:bc:e4:1a:46:4b:33:92:4d:67:90:78:
0a:d9:7f:5c:38:ba:21:e0:48:d3:88:87:af:db:66:0d:dc:78:
7d:21:93:5e:a7:72:fa:5f:dc:1b:c2:7b:fe:38:63:74:28:f0:
19:5a:72:fb:16:8a:02:a8:e9:ce:9e:0f:34:30:e8:89:7e:60:
26:b7:82:76:bf:50:19:b8:05:32:00:d8:3e:27:15:0e:35:c8:
96:16:dc:16:7b:e5:7b:6b:48:dc:b8:c6:bb:ed:6e:2c:01:2a:
c0:b4:9d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:17:52 2025 by rpki-client