Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3VrWGwETpSyq6b5VCMTkZcH_gPw.cer
File: 3VrWGwETpSyq6b5VCMTkZcH_gPw.cer (raw, json)
Hash identifier: J2SqVnvcnSfU3GirB6/ktvsT6CcJzCrK4OQkeBo+1xI=
Subject key identifier: DD:5A:D6:1B:01:13:A5:2C:AA:E9:BE:55:08:C4:E4:65:C1:FF:80:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65B534865704DA6E97F19E3E4A0E7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/343c03-4287-4a7d-882e-3605c14b5815/1/3VrWGwETpSyq6b5VCMTkZcH_gPw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/343c03-4287-4a7d-882e-3605c14b5815/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 43610
IP: 89.28.176.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:b5:34:86:57:04:da:6e:97:f1:9e:3e:4a:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd5ad61b0113a52caae9be5508c4e465c1ff80fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:1c:c2:b6:af:b2:20:8a:d5:74:56:9e:89:
1d:eb:6e:54:21:98:ab:23:0e:17:b2:b0:a2:2c:67:
46:79:8d:57:4a:db:f6:41:15:18:3d:9d:04:4a:4a:
c4:9a:05:43:58:d7:45:4f:c0:63:a6:3e:d4:c8:be:
ac:19:6d:0b:54:35:13:2a:15:e8:15:a9:b8:94:94:
68:6c:e9:64:1d:ad:b0:4b:b5:06:67:8b:99:eb:51:
92:c7:4b:67:dc:4a:fc:86:cc:a4:05:6f:ec:8c:2d:
c1:14:bc:5c:70:e5:ee:30:03:ae:6d:70:2b:a5:27:
32:92:a0:c3:d7:db:ea:04:68:a6:17:ce:06:1f:3b:
71:f7:6a:90:5f:cf:1f:ba:9f:63:a1:65:0e:66:2b:
43:20:a0:79:fb:d8:c5:4a:9c:e1:44:07:63:d4:a8:
b4:fc:fb:9a:9f:04:f1:df:a2:3c:13:3a:b3:8c:4b:
80:d9:b6:be:26:b1:69:ea:af:66:69:e9:9f:ff:b7:
33:f1:c0:c5:cc:20:7f:76:fc:55:32:28:a1:2a:99:
d9:e2:bd:8a:8b:71:21:95:d0:02:fa:e1:7f:c6:7a:
16:9c:7d:db:32:2a:3c:c9:1d:e6:93:31:91:51:89:
6b:1d:8e:63:a7:5c:10:36:60:3b:23:02:11:3b:a8:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:D6:1B:01:13:A5:2C:AA:E9:BE:55:08:C4:E4:65:C1:FF:80:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/343c03-4287-4a7d-882e-3605c14b5815/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/343c03-4287-4a7d-882e-3605c14b5815/1/3VrWGwETpSyq6b5VCMTkZcH_gPw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.176.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43610
Signature Algorithm: sha256WithRSAEncryption
52:31:fa:9a:3f:ad:32:9d:34:55:96:e9:18:a2:c7:75:2b:9b:
69:05:ef:79:25:7b:0e:98:4a:f8:da:11:5b:8f:b1:a7:0c:8d:
32:e3:75:57:61:2b:69:b1:9e:d4:90:19:27:cc:a2:43:db:f8:
04:d7:89:df:bc:47:08:fb:c3:91:15:25:e0:de:05:72:cc:f6:
1e:a0:d7:d6:78:00:cd:78:e7:de:c8:b4:fe:d5:f3:90:d8:5d:
23:ef:10:a9:81:d0:0a:a2:21:9a:9e:d8:ff:c4:38:f9:f7:8b:
2d:20:ce:f6:ce:2d:39:a5:a1:55:91:d4:ba:78:92:9f:97:98:
e8:87:3d:4f:f7:98:79:33:11:f7:02:1a:81:e4:b7:a7:25:f8:
cc:ff:6b:fb:d0:6e:1a:ad:2b:d0:1e:15:33:72:17:d9:4b:94:
3b:20:2f:08:ed:54:4d:91:fa:14:a0:5a:23:eb:63:a6:ea:e3:
73:bb:30:c4:4b:59:2a:13:e6:7f:a4:fa:e3:5e:e7:25:b5:98:
64:c9:ea:c0:f5:32:21:ad:23:ec:5f:7f:2f:70:8b:41:c0:68:
26:4f:b1:5b:6e:0f:e1:8c:ad:65:29:ad:bc:8f:08:71:f9:8c:
46:99:f8:41:90:e2:44:f7:4c:97:84:41:ab:66:e7:a1:36:8e:
67:06:84:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:28 2025 by rpki-client