Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.cer
File: 1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.cer (raw, json)
Hash identifier: m0Z3tUS3LOjVn6FhuGlkVjoIe+nDu0aSuCmr7hSM89s=
Subject key identifier: D7:0C:89:9D:81:EE:E5:67:49:D0:16:59:4C:E8:CD:28:9E:31:8F:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D8969BE8ADFD93B03A9B8E8E95DF32A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/878f1d-817f-4046-9d1f-bbf13ab954a4/1/1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/878f1d-817f-4046-9d1f-bbf13ab954a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.42.143.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:69:be:8a:df:d9:3b:03:a9:b8:e8:e9:5d:f3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d70c899d81eee56749d016594ce8cd289e318f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:fa:d6:4a:13:23:1d:93:1d:93:e0:4f:35:
e1:98:18:a8:3f:2e:78:5f:13:8c:6e:7c:2a:23:7b:
ec:b4:9e:43:a6:fb:71:66:de:be:8c:f5:08:bd:c8:
ac:72:d1:d3:af:50:89:bb:69:b8:89:18:28:2c:a1:
ad:c9:69:d9:b3:3c:b0:75:9e:22:00:d4:24:16:ed:
8d:bf:95:a0:0a:bc:23:af:a9:05:8a:da:ef:1c:28:
93:d0:32:ef:2e:47:8c:b3:33:48:b4:d1:a4:5f:1d:
d5:31:8c:7b:66:ba:18:0d:ab:97:99:bb:a6:74:d5:
ad:73:91:c7:9e:03:ac:31:a7:77:34:61:9d:a8:00:
c1:5a:de:96:f1:79:bc:9a:6a:71:fa:3b:e6:ea:66:
66:be:5d:cf:b8:5d:80:72:e9:f1:22:f4:d9:b1:a4:
d0:dd:b8:7a:1c:f4:9b:ff:b3:86:ab:47:35:0d:db:
40:23:03:65:2f:f2:be:97:e0:e0:6d:33:ba:56:f8:
c1:b8:77:8d:b3:90:77:ac:ca:96:b0:bd:a1:a6:b9:
04:56:44:4c:72:01:38:78:6a:b6:06:0e:d2:8a:59:
ee:31:58:35:07:61:9f:e3:1d:54:54:8f:bb:99:37:
3a:37:52:31:9a:cc:16:ee:50:03:93:9b:a4:6f:9a:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0C:89:9D:81:EE:E5:67:49:D0:16:59:4C:E8:CD:28:9E:31:8F:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/878f1d-817f-4046-9d1f-bbf13ab954a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/878f1d-817f-4046-9d1f-bbf13ab954a4/1/1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.143.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1f:33:57:b8:71:a0:ae:91:2d:0e:14:45:77:ad:fa:bd:27:
83:27:8a:73:4e:b9:4e:a5:91:1e:e2:31:55:a5:c8:19:4a:8f:
56:66:fe:a8:6a:ea:29:e8:18:b5:34:16:ba:5a:ff:42:71:b1:
b0:e1:72:99:78:e9:96:2a:09:45:90:0e:8e:4d:22:43:a6:bf:
fc:91:1b:ef:3f:1e:08:27:ce:34:b3:5a:f8:7d:b8:88:d2:12:
7d:c8:81:a1:8e:fc:b7:75:0b:f9:e0:79:ec:e4:6a:7e:b6:a8:
ae:4e:14:14:cd:c7:68:ab:d4:e6:88:b1:0e:e8:6c:53:17:02:
94:6d:63:92:3f:83:57:56:47:bf:f6:88:5a:34:83:fe:98:d1:
55:4f:65:9e:f4:89:c2:f3:4a:c4:5f:97:f6:10:9b:1f:c6:d3:
e5:c7:fd:a3:50:b8:e2:a7:39:20:f5:0f:2b:00:03:fd:29:56:
eb:53:69:25:a6:2d:ef:40:b0:c6:a5:d3:80:5d:8d:01:81:26:
3f:01:6b:39:28:de:38:b3:a3:bf:db:52:fe:35:7f:f2:71:07:
b4:13:a4:4c:17:e4:8c:25:9a:60:2c:c2:97:58:0b:fd:d9:7a:
c9:02:69:db:4d:cf:fb:f7:cd:99:81:f5:4a:26:75:5d:f3:53:
b0:7c:d8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:59 2025 by rpki-client