Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1I7UgoloTUgEAs6O5LL1NoGliMU.cer
File: 1I7UgoloTUgEAs6O5LL1NoGliMU.cer (raw, json)
Hash identifier: lKzKtLP9vOtJoyUTusdYI1EFCv8C18KFSt3c/DrBJLU=
Subject key identifier: D4:8E:D4:82:89:68:4D:48:04:02:CE:8E:E4:B2:F5:36:81:A5:88:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186C621EFF4FBCD31C84CDC25852A5E480C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/45d55e-1fc0-4e37-8362-17d216d726d3/1/1I7UgoloTUgEAs6O5LL1NoGliMU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/45d55e-1fc0-4e37-8362-17d216d726d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Mar 2023 11:29:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.162.128.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:21:ef:f4:fb:cd:31:c8:4c:dc:25:85:2a:5e:48:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 11:29:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d48ed48289684d480402ce8ee4b2f53681a588c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:9d:7a:41:0e:a1:19:ca:6a:df:d7:31:60:
03:28:a1:a8:82:75:f8:03:76:28:4e:10:52:03:1f:
84:97:ba:85:9c:3e:be:00:ea:ff:05:33:3d:d9:ce:
c5:1a:2a:93:d2:18:9f:4a:c8:60:69:73:4e:71:f1:
e8:bc:62:b6:bf:d8:4a:9e:7b:76:bc:43:54:65:6d:
c7:29:83:09:3a:d2:c0:bf:af:af:b8:3f:92:11:b9:
f0:20:4b:03:aa:3a:9a:2c:bd:b5:33:26:7c:87:d0:
69:69:30:97:22:b5:6e:c9:3d:39:31:0f:1e:0f:29:
d9:4d:7a:bb:e3:ea:21:6c:e8:ce:a2:4e:c2:90:cc:
87:7b:3c:fb:15:62:4f:2e:b0:30:67:d3:ee:ea:75:
12:99:2f:ef:1e:29:f4:0f:ff:ad:c9:4b:56:f5:b6:
77:ad:eb:76:db:37:88:30:44:85:34:95:74:56:14:
08:59:c8:08:76:e0:49:3b:e0:41:d3:4c:df:73:74:
a6:35:7d:ff:5c:ca:f6:ae:51:ff:08:31:6c:47:af:
b2:bc:e0:35:04:db:1d:34:e3:3c:b6:f2:45:7e:32:
98:05:13:e3:ee:3f:85:44:a4:86:46:c7:25:22:71:
fd:de:4b:27:84:b6:4a:c1:95:64:dd:32:ea:ae:31:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:D4:82:89:68:4D:48:04:02:CE:8E:E4:B2:F5:36:81:A5:88:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/45d55e-1fc0-4e37-8362-17d216d726d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/45d55e-1fc0-4e37-8362-17d216d726d3/1/1I7UgoloTUgEAs6O5LL1NoGliMU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7d:d8:b0:ed:14:9f:af:65:9d:3a:4c:0f:13:4e:0e:6c:b8:
da:f3:6c:53:a0:11:ea:48:be:f6:1a:de:51:59:36:da:b5:32:
11:15:17:67:c9:c9:bb:64:d9:79:f1:1a:82:6c:68:92:65:d3:
92:0f:95:95:0a:fa:11:de:a2:95:37:dd:53:3d:eb:c3:02:bc:
15:43:34:3b:d3:0c:ca:39:0c:1b:8a:1c:da:90:f7:c1:f7:18:
3f:28:77:6c:28:48:70:fb:00:3a:b7:a4:e6:e5:1a:e9:3c:23:
4f:dc:50:55:eb:53:46:45:6a:90:4e:b1:e3:a5:f6:84:55:45:
e6:b7:8f:a7:da:0b:fb:34:e0:c8:3b:d2:89:c0:94:08:89:28:
e3:bd:0b:f8:9c:d4:dd:aa:1b:c5:3c:9d:72:b5:ba:3f:fe:e1:
de:e4:18:23:09:36:c6:80:7f:f3:95:e4:cf:3a:87:29:50:03:
53:b1:70:e5:74:8f:59:ee:24:e5:32:aa:37:c3:a1:47:0f:ca:
c4:eb:79:bc:e3:45:7d:4a:38:7f:ea:b3:bf:49:bd:90:20:8f:
b8:21:ae:5c:2d:c2:7a:19:da:d9:8a:89:17:19:e2:e2:dd:e3:
79:11:f1:0d:69:1b:63:c2:21:c7:bc:6e:9d:49:5a:e2:af:46:
99:e0:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:38 2025 by rpki-client