Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0RzKXn_RahDbpyBJ_XFDLxGtjfw.cer
File: 0RzKXn_RahDbpyBJ_XFDLxGtjfw.cer (raw, json)
Hash identifier: /6f9bZ3AOKgXMOwv/32S4s6q5PSR7m8lu56YdkwRoZs=
Subject key identifier: D1:1C:CA:5E:7F:D1:6A:10:DB:A7:20:49:FD:71:43:2F:11:AD:8D:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A533124BFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/d92dee-ca39-4e31-a3d6-e8a42560a32e/1/0RzKXn_RahDbpyBJ_XFDLxGtjfw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/d92dee-ca39-4e31-a3d6-e8a42560a32e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:59:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.137.176.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709526440957 (0xa533124bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d11cca5e7fd16a10dba72049fd71432f11ad8dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:e9:1e:83:ea:9a:e8:88:27:00:8f:96:c1:
30:06:53:56:b4:6b:8b:6b:37:80:34:44:17:e9:82:
70:3b:47:16:91:4c:5d:81:5e:50:bf:6b:e9:69:1c:
c5:cf:65:b4:33:9d:b8:9a:07:e4:aa:d4:e6:5b:7f:
27:ec:aa:32:09:51:9d:2c:93:51:58:e3:0d:1f:a2:
e7:40:7f:d3:c5:c2:9f:8f:1c:7e:a2:8c:06:29:e3:
76:33:cd:72:09:80:87:ae:7d:d8:65:e9:44:52:2c:
df:f1:e6:c7:c9:8b:c7:f4:b5:d1:8b:3d:d7:7d:11:
e4:5a:6e:e5:7f:3a:02:12:f9:9d:ba:51:1c:1e:e9:
91:ab:15:28:40:14:e6:aa:ab:14:85:b9:13:7f:00:
0f:c4:94:c1:6a:a4:77:8b:b5:00:eb:63:ec:a6:5f:
51:41:8d:88:fb:8f:7f:54:e9:6a:21:66:7f:e9:58:
9b:b4:89:f1:a1:27:0a:28:9f:2a:25:ea:ad:a4:6e:
06:5b:26:f5:04:7e:c5:d5:15:c3:b7:81:20:de:f0:
09:b2:c1:6c:04:54:45:e1:c7:93:81:05:a7:33:4a:
83:95:d5:f0:69:ed:e1:0e:9f:36:ca:7a:c5:65:e0:
34:08:7d:c6:23:97:9e:9f:8b:da:2a:5c:c0:93:a3:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:CA:5E:7F:D1:6A:10:DB:A7:20:49:FD:71:43:2F:11:AD:8D:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d92dee-ca39-4e31-a3d6-e8a42560a32e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d92dee-ca39-4e31-a3d6-e8a42560a32e/1/0RzKXn_RahDbpyBJ_XFDLxGtjfw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:b3:ff:91:ae:b0:8a:82:3e:33:39:c1:42:ab:f8:ba:f9:6e:
83:7e:24:67:88:5f:44:29:e6:50:26:35:6f:9c:e0:cd:9e:c3:
6c:59:f5:95:a5:ec:0f:f5:56:d3:12:78:96:13:c9:2d:c3:37:
24:17:95:96:f7:24:88:4d:d2:97:8f:cb:b4:b7:a3:eb:22:42:
bf:ad:9e:72:5d:3f:84:a7:2b:a3:cd:ee:96:60:b7:e3:be:85:
4c:e6:42:a5:15:de:ee:82:66:3f:73:8a:b9:a1:e2:a0:41:fa:
e4:db:1b:38:11:db:02:ac:8b:2a:a0:2d:f9:3a:8f:04:09:43:
45:b8:70:a4:21:27:81:dc:f4:4c:d2:e1:2e:e5:8e:7a:73:88:
cc:40:d2:98:b5:31:e0:2d:14:d9:2e:41:c4:75:52:8f:ac:37:
cc:4f:0c:57:a3:06:07:94:1b:89:8f:14:7a:5d:07:0a:46:c1:
e9:b3:7c:15:ba:88:3a:ae:c8:ca:d7:c4:a2:94:d7:a0:4f:27:
79:ca:d2:0e:9d:58:4d:29:7e:23:ee:f8:fd:2e:67:ae:b3:80:
0c:fd:ee:c0:0f:f7:62:64:2d:0c:f3:81:6b:4e:a2:19:81:a7:
00:21:fc:27:73:52:28:87:3d:27:13:69:c0:57:b4:5c:13:59:
9f:3c:80:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:29:11 2025 by rpki-client