Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07-ucJpTeCozFlUluXWFVBGgiXw.cer
File: 07-ucJpTeCozFlUluXWFVBGgiXw.cer (raw, json)
Hash identifier: Rg62Sxm6xQNqHqHLOsbT3V5oJtEluC0tf3NFHIqdzsY=
Subject key identifier: D3:BF:AE:70:9A:53:78:2A:33:16:55:25:B9:75:85:54:11:A0:89:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B056E1C7CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/07-ucJpTeCozFlUluXWFVBGgiXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 Apr 2022 09:39:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 198964
IP: 5.104.80.0/21
IP: 2a06:1cc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757371881418 (0xb056e1c7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 21 09:39:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3bfae709a53782a33165525b975855411a0897c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:b0:a9:fe:cf:bc:22:08:1e:00:34:b5:f3:
84:b8:a6:51:8b:ac:fd:37:40:20:5f:9c:89:dc:74:
76:7c:95:18:4d:be:2b:a8:76:e3:7c:e8:b1:5d:75:
bb:d4:e9:94:4b:15:49:b7:79:1f:cf:75:9f:0f:52:
36:8c:99:4e:b8:9b:37:13:b8:c5:96:0d:e8:d6:52:
b2:5f:57:35:82:ba:83:33:26:65:2a:33:15:6d:37:
ec:32:0c:86:5b:26:23:eb:51:1e:11:c9:f5:31:29:
ad:93:4a:c5:cc:30:8b:34:27:92:33:20:19:87:08:
9f:1a:94:b2:33:46:61:9e:23:02:4e:25:2f:3e:28:
2b:55:61:aa:78:b4:f7:39:8b:b0:53:2f:3e:1b:1d:
4f:f5:fe:1a:ef:7d:ea:ce:cf:a7:b0:d6:22:57:30:
39:69:a2:66:05:14:4a:a7:a6:50:ea:c5:57:32:6d:
55:5c:4b:b0:8b:ff:53:64:bc:1f:a7:10:cd:d2:35:
b6:4c:9d:5a:f2:29:51:2d:04:aa:b2:cd:96:21:bb:
7c:66:bb:7c:9a:c0:d9:7d:9b:46:52:17:de:bf:16:
c9:f0:13:5f:39:5b:38:5e:1f:53:68:83:aa:3f:4d:
b1:14:60:c6:e6:a1:c0:7d:3f:50:ee:b8:23:e4:51:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BF:AE:70:9A:53:78:2A:33:16:55:25:B9:75:85:54:11:A0:89:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/07-ucJpTeCozFlUluXWFVBGgiXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.80.0/21
IPv6:
2a06:1cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198964
Signature Algorithm: sha256WithRSAEncryption
8c:5b:1b:11:8e:ec:40:b2:b3:2d:ac:4f:4c:04:9f:53:8b:f7:
9e:b4:1c:9a:e9:9e:4f:ba:66:4a:91:36:5a:4d:0b:7d:28:ce:
17:9d:a8:15:b3:14:9c:09:29:9b:b2:c0:8e:fd:6f:78:c9:66:
64:04:6d:1b:23:95:f8:c5:90:9f:6e:2e:b1:78:7b:55:09:0f:
ad:4a:24:53:9e:74:e8:b0:77:30:55:13:6e:fd:dc:14:17:80:
2b:88:72:48:46:51:03:c9:e8:d0:f4:5f:ed:90:ec:00:21:0f:
cc:e5:a1:3d:fd:6b:f3:a3:68:90:48:c4:bf:af:50:66:77:64:
a3:c7:43:cb:41:48:0d:50:b0:2b:f1:bb:06:9d:0d:15:20:75:
f8:28:e3:d1:dd:95:57:e1:bb:c1:92:61:ad:a7:77:e9:96:f9:
32:26:92:eb:e0:13:42:28:74:6d:bb:d8:b3:66:c8:21:76:6e:
84:4e:20:96:90:0d:d8:91:1e:7c:3e:b4:da:db:ed:87:ae:1f:
29:da:c4:d6:38:9d:1a:4a:1a:56:a0:88:e5:27:54:e7:69:fe:
cd:86:43:da:da:ac:41:a9:d4:cf:7b:e9:ea:a2:d3:c5:2a:87:
2f:f2:7c:df:88:5b:d4:70:ad:d9:73:8c:55:12:9c:47:bc:9e:
8a:e3:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:56:38 2025 by rpki-client