Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00PC7U5K5iY-HzdaZ9X2O30hDPU.cer
File: 00PC7U5K5iY-HzdaZ9X2O30hDPU.cer (raw, json)
Hash identifier: 8S6KQHhw90J9EQJn/jTGTvRrvSVytJ0zdz4gAmf25HI=
Subject key identifier: D3:43:C2:ED:4E:4A:E6:26:3E:1F:37:5A:67:D5:F6:3B:7D:21:0C:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B493F6B3F709FF969A1A96D36DFB9C20C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/463606-e52b-4e89-8591-a48a640179e3/1/00PC7U5K5iY-HzdaZ9X2O30hDPU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/463606-e52b-4e89-8591-a48a640179e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Oct 2023 18:42:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 59462
IP: 185.22.231.0/24
IP: 185.150.16.0/22
IP: 2a0e:d480::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:3f:6b:3f:70:9f:f9:69:a1:a9:6d:36:df:b9:c2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 19 18:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d343c2ed4e4ae6263e1f375a67d5f63b7d210cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:3b:e2:46:70:c3:47:3a:8e:3a:69:54:86:
96:d4:04:29:12:5b:de:80:50:b2:fa:db:03:d7:59:
ec:57:ac:11:ef:e5:6e:08:0f:65:d4:10:ae:99:ed:
66:67:ec:6b:68:bf:1d:0c:4c:5e:6f:85:ef:71:92:
15:60:e2:11:69:a2:05:9d:43:b0:d6:7e:9d:a9:34:
9e:07:50:81:41:73:a7:cb:b3:49:47:c2:3e:e3:e4:
1e:50:d6:bf:a4:1a:47:08:ac:d2:fa:50:05:c1:ff:
ea:54:46:11:a0:e8:86:1c:79:a1:e9:13:bf:62:87:
c6:d7:d7:3b:9a:9b:28:2f:e6:c8:b3:98:26:c2:fb:
02:af:a6:fd:0d:a0:d6:68:27:cb:e7:a5:b9:57:e3:
f9:1d:04:83:91:f9:47:20:26:d9:9f:ab:a8:94:7a:
7d:16:6a:71:b9:80:75:58:00:39:67:23:f3:7e:6f:
a1:27:ea:27:55:b0:ae:2a:01:78:98:4a:ce:08:af:
e4:ee:d4:cc:bb:2c:cd:74:80:e1:89:ed:3b:f1:7c:
62:92:2d:27:7a:6b:0d:a3:61:20:84:10:13:03:ff:
26:df:32:96:b0:74:1e:28:c8:2a:cb:f1:57:e1:cc:
a7:97:d5:5f:8c:a3:23:05:06:82:55:78:f7:89:38:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:C2:ED:4E:4A:E6:26:3E:1F:37:5A:67:D5:F6:3B:7D:21:0C:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/463606-e52b-4e89-8591-a48a640179e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/463606-e52b-4e89-8591-a48a640179e3/1/00PC7U5K5iY-HzdaZ9X2O30hDPU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.231.0/24
185.150.16.0/22
IPv6:
2a0e:d480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59462
Signature Algorithm: sha256WithRSAEncryption
95:cc:e0:44:40:66:07:15:d1:c2:01:f2:b0:6f:c6:b2:e8:2f:
ac:ce:ab:17:9d:d6:7c:df:5d:31:29:24:cc:35:1a:23:71:07:
0d:48:ba:28:b6:4a:15:b5:3f:75:6c:51:35:c9:b8:d5:d6:67:
fa:51:4f:57:8c:25:cf:67:91:56:06:3d:39:05:aa:4e:e3:fd:
ce:37:e2:8f:74:c2:3a:ca:85:d0:a1:ca:36:a5:e4:85:e5:1b:
fb:ea:1f:d4:87:f1:b5:a3:44:14:99:c1:4c:ea:bf:8a:0b:3e:
a5:44:18:cf:2b:89:28:3b:54:e8:f1:c1:f1:2b:41:7c:9c:94:
14:fb:a7:ec:19:4b:1c:7b:69:98:0e:f1:76:ca:53:35:b5:89:
c5:f1:ed:2d:3e:d2:14:25:d9:ea:61:71:5f:07:c3:ec:4c:aa:
ba:ee:db:4d:b6:2e:53:72:21:20:d9:bf:9f:01:40:dd:d5:0b:
95:c1:24:73:1a:46:da:2c:a8:f7:0b:d6:69:73:bf:58:f6:4b:
5d:42:1f:29:65:8f:d0:58:d1:f8:06:dd:2c:76:57:ef:79:ad:
99:70:0f:2e:0d:73:62:db:44:af:44:0f:71:52:5c:46:0d:fa:
b8:bc:bc:d2:b2:59:a2:66:21:cc:b1:01:59:08:9e:58:0f:00:
6d:c9:09:a7
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYtJP2s/cJ/5aaGpbTbfucIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDE5MTg0MjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQzYzJlZDRlNGFlNjI2M2UxZjM3NWE2N2Q1ZjYzYjdkMjEwY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAI74kZww0c6jjppVIaW1AQpElve
gFCy+tsD11nsV6wR7+VuCA9l1BCume1mZ+xraL8dDExeb4XvcZIVYOIRaaIFnUOw
1n6dqTSeB1CBQXOny7NJR8I+4+QeUNa/pBpHCKzS+lAFwf/qVEYRoOiGHHmh6RO/
YofG19c7mpsoL+bIs5gmwvsCr6b9DaDWaCfL56W5V+P5HQSDkflHICbZn6uolHp9
FmpxuYB1WAA5ZyPzfm+hJ+onVbCuKgF4mErOCK/k7tTMuyzNdIDhie078Xxiki0n
emsNo2EghBATA/8m3zKWsHQeKMgqy/FX4cynl9VfjKMjBQaCVXj3iThM6wIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFNNDwu1OSuYmPh83WmfV9jt9IQz1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzQ2MzYw
Ni1lNTJiLTRlODktODU5MS1hNDhhNjQwMTc5ZTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvNDYzNjA2
LWU1MmItNGU4OS04NTkxLWE0OGE2NDAxNzllMy8xLzAwUEM3VTVLNWlZLUh6ZGFa
OVgyTzMwaERQVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAuRbnAwQCuZYQMA0EAgACMAcDBQMqDtSAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDoRjANBgkqhkiG9w0BAQsFAAOCAQEAlczg
REBmBxXRwgHysG/GsugvrM6rF53WfN9dMSkkzDUaI3EHDUi6KLZKFbU/dWxRNcm4
1dZn+lFPV4wlz2eRVgY9OQWqTuP9zjfij3TCOsqF0KHKNqXkheUb++of1IfxtaNE
FJnBTOq/igs+pUQYzyuJKDtU6PHB8StBfJyUFPun7BlLHHtpmA7xdspTNbWJxfHt
LT7SFCXZ6mFxXwfD7Eyquu7bTbYuU3IhINm/nwFA3dULlcEkcxpG2iyo9wvWaXO/
WPZLXUIfKWWP0FjR+AbdLHZX73mtmXAPLg1zYttEr0QPcVJcRg36uLy80rJZomYh
zLEBWQieWA8AbckJpw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:03:02 2025 by rpki-client