Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Y9JxzOICuj6HTImFLxe0_0PWsM.cer
File: 3Y9JxzOICuj6HTImFLxe0_0PWsM.cer (raw, json)
Hash identifier: sDOBeT2RxShUBdjB9iVUXO21XiY0kDHtXOgu275eoVY=
Subject key identifier: DD:8F:49:C7:33:88:0A:E8:FA:1D:32:26:14:BC:5E:D3:FD:0F:5A:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD08EA27782D11F8244C669A4CBB88D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/3Y9JxzOICuj6HTImFLxe0_0PWsM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:31:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.99.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:8e:a2:77:82:d1:1f:82:44:c6:69:a4:cb:b8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:31:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd8f49c733880ae8fa1d322614bc5ed3fd0f5ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:a2:9c:02:52:a5:6f:ed:e7:e6:41:41:9f:
22:21:c2:8e:64:3a:ea:f7:8e:f1:b7:78:45:c5:44:
4c:15:96:46:ea:65:56:7c:df:8a:e2:ee:db:9a:d8:
4e:e2:ab:b4:15:b9:80:85:ab:37:65:c2:ff:a5:2c:
fe:a1:e9:7d:9e:5e:a7:bf:bf:11:36:2e:00:b8:69:
58:7a:f5:91:60:56:f7:21:23:56:eb:59:ac:7e:27:
c9:25:7b:80:5b:dc:fa:0e:15:98:0a:da:dc:3b:01:
a3:9f:63:1a:28:63:83:f6:30:28:66:75:ee:11:fb:
1e:e1:55:3c:11:fb:45:a5:8b:49:a2:61:bb:ae:cd:
23:79:c3:50:a6:14:e2:7b:ef:10:09:88:3e:9f:a5:
dc:f8:b3:99:38:54:4a:e0:e9:0d:7c:0d:05:06:14:
7f:26:46:2b:03:f9:a9:a0:27:dc:21:87:9e:ae:ad:
ac:89:e5:9a:82:20:bd:05:7d:d3:5e:7b:fe:5f:35:
5c:72:95:11:cf:82:42:76:50:f1:a0:a0:90:25:de:
fa:fa:f0:48:97:72:54:5b:e8:7f:4e:7a:9a:05:25:
08:67:86:23:da:93:5b:d6:02:0f:91:9a:7a:40:61:
69:89:11:3f:13:e7:4f:ae:f4:e5:5a:99:c1:83:cb:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8F:49:C7:33:88:0A:E8:FA:1D:32:26:14:BC:5E:D3:FD:0F:5A:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/3Y9JxzOICuj6HTImFLxe0_0PWsM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.99.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b9:e3:41:71:e6:79:43:7f:96:c9:10:3e:59:c5:f3:cd:7d:
4d:45:fe:d1:79:c0:59:d1:cb:d4:af:94:3a:09:a2:f6:53:fe:
5e:b6:36:96:06:db:ab:0f:47:07:37:dc:53:36:10:4a:6d:44:
15:ec:83:b3:00:67:44:78:23:20:62:1e:99:7e:48:6e:5a:60:
4d:4f:97:b5:9d:7a:8f:3c:25:a9:c1:30:48:c7:17:fa:b1:28:
86:70:8e:c3:db:50:0a:f5:7f:e2:b5:90:40:4d:76:21:b6:d6:
85:47:72:25:3e:f9:9a:22:a9:5d:7b:75:a9:77:37:bc:4e:ec:
0c:26:6d:a2:a9:28:f8:87:1b:7c:c9:67:2c:fa:e3:c6:18:47:
91:d1:86:ff:37:aa:bd:ba:2e:48:a1:45:d5:07:96:52:03:a2:
3d:41:9d:84:5e:50:87:a7:69:0b:8c:53:25:5f:d6:bb:b1:9d:
df:51:4e:17:ad:65:7a:45:48:76:67:72:00:28:a0:66:6e:7e:
99:65:ce:17:3c:ad:96:1a:57:f0:ad:e9:a7:ec:82:d0:6a:79:
37:2d:73:ce:ac:d8:af:1a:95:4a:13:8e:68:b3:c6:4d:83:18:
67:c6:2b:5a:20:5e:8b:94:f4:1d:32:f1:19:26:3a:14:22:05:
4e:da:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:00:18 2025 by rpki-client