Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0bS1qglWi2vgU2UNh2s6lJoSZFI.cer
File: 0bS1qglWi2vgU2UNh2s6lJoSZFI.cer (raw, json)
Hash identifier: 0/ZAxxq40LPFhQHrIGEpSwQSI5MGpVFa/F7J5SclE20=
Subject key identifier: D1:B4:B5:AA:09:56:8B:6B:E0:53:65:0D:87:6B:3A:94:9A:12:64:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B4FEA1D68A830D0E751AFB0803C88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/0bS1qglWi2vgU2UNh2s6lJoSZFI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:04 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.123.0/24
IP: 2a12:dc00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:4f:ea:1d:68:a8:30:d0:e7:51:af:b0:80:3c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1b4b5aa09568b6be053650d876b3a949a126452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:ae:de:ef:94:c9:a4:f9:33:88:71:be:44:
dd:8f:2d:60:11:cc:fe:5a:9d:19:b7:75:bd:cb:7c:
e5:18:34:53:a3:5a:78:d7:42:f4:ed:54:cc:da:b0:
14:19:16:06:40:bd:76:88:54:ef:3f:19:52:61:1a:
b4:e9:5d:e3:6e:04:cb:9b:06:76:89:26:b1:7a:9c:
05:22:2f:b4:0c:1b:7a:62:2e:a9:38:8c:6a:4a:9e:
56:43:74:7f:b4:04:01:67:07:5d:81:2b:92:ae:51:
76:e1:35:80:cd:48:7b:cd:bd:18:a7:ab:24:5e:49:
81:c1:71:3c:d7:ec:8e:e0:a8:cf:1d:9e:e2:89:2d:
e6:04:ea:8c:01:14:4f:e7:6e:33:f0:9f:81:17:05:
fb:e1:c4:93:f9:7f:3c:c9:7f:d1:ed:d9:2e:c7:f9:
e5:a4:2d:34:3b:99:92:73:dd:f8:8c:4d:b6:2f:ff:
98:09:4d:c8:75:20:79:a9:ff:a6:26:26:c8:db:fa:
75:12:71:1c:5a:5f:f6:67:a4:0d:cf:d0:c5:5d:1d:
8d:8a:5c:7a:d8:6c:21:59:64:76:cd:b3:a2:26:67:
db:c3:22:ee:64:f1:09:9b:c1:15:01:b6:20:b8:92:
d9:1e:76:3a:a1:b2:fc:fe:7e:2e:08:8e:ae:9d:76:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:B5:AA:09:56:8B:6B:E0:53:65:0D:87:6B:3A:94:9A:12:64:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/0bS1qglWi2vgU2UNh2s6lJoSZFI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.123.0/24
IPv6:
2a12:dc00::/29
Signature Algorithm: sha256WithRSAEncryption
a7:d9:50:d5:75:00:91:20:4a:04:c6:31:fb:1c:8c:d6:7c:2f:
03:1e:31:46:ab:16:1b:38:6a:03:6f:88:83:ce:bd:f6:d1:24:
2a:c0:30:86:27:a0:8e:0c:e1:5f:f8:fb:cd:14:fa:37:b4:5e:
51:4b:9d:28:48:0c:15:c4:b0:ae:b5:86:05:ec:7f:0f:11:d6:
c0:d4:d3:16:42:62:0b:ab:61:d9:f1:51:ba:5f:a1:5f:bd:aa:
6a:c2:11:f5:00:67:ee:ef:66:2a:20:23:d6:37:f4:6d:f6:79:
56:dc:21:27:dc:27:94:b8:8c:90:35:b5:f5:7b:34:83:12:f6:
59:6f:5e:71:a5:5f:56:ce:18:96:9b:04:0d:18:01:ca:1c:48:
82:60:4e:5b:b5:62:91:96:00:e5:e5:cc:33:85:0b:a8:8d:e5:
51:64:0b:70:67:37:f7:47:51:10:f0:be:cc:96:5d:66:28:0d:
19:31:14:22:67:84:fa:9a:18:11:57:9e:6e:83:98:e5:0a:9a:
52:f1:88:3c:73:91:35:c6:fc:c6:a3:e9:b3:45:bb:ae:ba:69:
39:07:59:39:62:63:b4:bc:3c:70:6c:47:1b:c2:e7:07:8f:14:
69:ba:33:9a:ee:7a:6d:26:e5:13:6c:aa:90:2d:14:e2:ee:34:
22:c3:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:22 2025 by rpki-client