Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.cer
File: 4G6-pkxGTf8wF3tX1gKLZ9Huhi4.cer (raw, json)
Hash identifier: M7vuEA/1omQr+aXuiQAhxWYs8zhc33i048Z1tqEo4js=
Subject key identifier: E0:6E:BE:A6:4C:46:4D:FF:30:17:7B:57:D6:02:8B:67:D1:EE:86:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6323D655519DC7E3DD28E0CF173FBB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.77.149.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:23:d6:55:51:9d:c7:e3:dd:28:e0:cf:17:3f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e06ebea64c464dff30177b57d6028b67d1ee862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:c4:ae:29:90:ab:20:32:0e:be:2d:10:1e:
34:a6:e9:36:60:cb:a6:91:03:3e:60:d1:9c:b8:a9:
2e:c8:44:a7:1f:73:ef:6a:32:3c:c5:35:3a:a4:14:
7b:e2:c7:f8:eb:0f:43:d2:40:25:ba:80:9e:af:ea:
8d:a3:37:b3:0d:64:4a:50:7a:fe:88:1e:be:62:ac:
bd:62:30:d1:f1:75:7a:eb:db:16:57:ca:4a:b8:e7:
18:5c:1d:f8:a7:e3:cf:e6:cd:c8:ac:c2:b4:76:f7:
86:39:3b:6c:96:58:56:29:9d:bc:3d:e2:88:fd:15:
c6:18:ce:dc:04:fa:17:c3:24:34:a2:86:16:ae:f7:
6d:c4:cf:a8:a5:12:79:e0:2d:eb:4e:6c:8d:18:f4:
64:a4:4a:9f:31:5b:fe:45:47:fd:f6:4a:57:44:db:
4e:94:69:38:ff:62:3d:c8:30:63:b3:db:e6:01:fc:
09:39:30:3c:25:47:f9:28:07:80:b9:4c:f3:7d:01:
3a:13:58:28:e2:82:93:84:f5:36:e6:55:ab:78:25:
bb:bd:ec:d0:d7:e8:a5:a6:fd:c1:54:7f:99:2b:8c:
ba:70:71:54:28:67:f5:9f:4a:57:9c:73:b9:4f:79:
2b:b7:3e:3d:1f:30:e1:e2:28:e9:42:69:d0:22:25:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6E:BE:A6:4C:46:4D:FF:30:17:7B:57:D6:02:8B:67:D1:EE:86:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.149.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ae:9e:b1:a5:21:47:cc:80:b7:7f:6d:00:58:38:ff:5f:1c:
c1:9f:4e:05:23:66:a6:9a:b5:38:a8:b8:27:79:38:e2:c7:6a:
d4:e9:1c:97:52:f4:4b:93:d8:87:76:ea:ab:d4:e8:a0:35:16:
e2:73:02:bb:06:18:a2:e1:a9:08:3b:0c:f1:32:3a:88:24:4f:
8c:c6:64:69:8e:de:62:37:f2:30:02:70:4d:88:60:1a:ef:a2:
50:f1:75:da:17:4f:f9:45:8e:97:0a:37:65:bb:c9:2b:f5:26:
61:4c:0a:ba:91:4e:9e:65:73:20:a0:7e:b9:bc:94:71:6b:84:
6d:db:76:58:da:5e:6b:9a:15:a1:f8:63:c0:0c:d3:a1:24:91:
05:89:ff:39:76:11:91:af:cd:23:80:46:59:71:31:46:39:2d:
46:2b:10:ee:2f:59:6b:f1:de:7a:72:15:ae:48:de:78:31:41:
f7:95:bc:11:95:37:24:ad:8c:96:b3:b3:22:1e:b2:80:76:0b:
35:f6:b6:8f:3b:57:4b:c0:c3:7f:f6:e9:1c:63:a0:28:60:96:
1d:b5:9f:8a:30:d8:e5:0b:8b:10:50:5c:18:4a:82:03:32:86:
c0:98:0e:61:5b:b4:a9:9d:99:63:d6:09:98:fb:8f:bf:d4:9a:
3d:91:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:54:06 2025 by rpki-client