Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6FdiAITiKZJCY5NnalWtPa5haPo.cer
File: 6FdiAITiKZJCY5NnalWtPa5haPo.cer (raw, json)
Hash identifier: xsieJYgxfZV/0IYcZHFEvM03qA0IPCZVk1LHshFq7y0=
Subject key identifier: E8:57:62:00:84:E2:29:92:42:63:93:67:6A:55:AD:3D:AE:61:68:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A43D8E321
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/b40ac1-7dbb-4740-b3ce-fa633a2ef42e/1/6FdiAITiKZJCY5NnalWtPa5haPo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/b40ac1-7dbb-4740-b3ce-fa633a2ef42e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:53:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.140.168.0/22
IP: 2a0e:c540::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662563250977 (0x9a43d8e321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:53:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e857620084e22992426393676a55ad3dae6168fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:e4:2f:7a:78:45:1d:17:5a:a5:97:69:cc:
29:85:0b:c5:6c:6e:b5:1a:b6:1c:6f:7d:5b:a9:b3:
c9:c6:4b:ae:35:d8:07:36:52:65:b0:da:e7:fc:0b:
dd:36:ad:0b:03:37:59:af:90:e5:31:65:fc:b3:95:
aa:c6:a1:f6:c0:ac:dc:4c:6a:9c:db:7b:1f:66:a0:
5b:8f:7d:d2:8a:f9:d3:30:2b:6d:a1:0a:9f:b3:44:
f8:24:e4:95:6d:21:9c:6a:1c:50:2f:70:f4:a1:97:
e6:dc:fc:8a:0a:d0:c6:66:5e:27:50:aa:b3:cb:f4:
70:98:76:eb:02:24:94:69:ab:1f:4f:ad:53:99:2d:
20:09:f8:ce:a6:f0:3f:f2:27:b7:d1:8c:3b:64:04:
2c:2c:5c:98:03:46:67:0e:96:50:d5:6a:6a:06:f0:
fa:cd:13:5a:66:4c:4d:d5:dd:37:6a:2f:5d:e3:a4:
eb:73:57:d5:e1:cb:26:92:4f:04:bb:ad:d8:43:99:
6e:c7:a8:cb:e1:a1:4b:c8:fa:00:ef:77:86:eb:78:
e1:f8:f5:c8:fa:5a:6f:69:86:20:a7:53:3f:69:31:
29:d6:4f:b5:de:e6:20:43:e7:f9:83:34:13:b9:ae:
e4:8a:da:71:60:fd:0f:e7:d8:52:72:a2:aa:3e:1f:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:57:62:00:84:E2:29:92:42:63:93:67:6A:55:AD:3D:AE:61:68:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b40ac1-7dbb-4740-b3ce-fa633a2ef42e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b40ac1-7dbb-4740-b3ce-fa633a2ef42e/1/6FdiAITiKZJCY5NnalWtPa5haPo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.168.0/22
IPv6:
2a0e:c540::/29
Signature Algorithm: sha256WithRSAEncryption
af:4b:56:e7:83:6b:12:48:33:d7:6c:38:1d:2a:d6:92:a9:a9:
52:d1:f9:c5:d8:15:6a:b3:85:09:4b:1e:d5:5b:f9:93:7e:83:
2c:25:bb:a0:6b:d5:b5:91:69:a7:5d:5d:97:40:f3:1b:67:f2:
13:6c:a0:2d:0e:d8:27:5f:71:f1:23:42:3b:ba:cf:98:83:96:
8c:02:ed:3a:ec:9c:33:ae:f0:e8:13:74:65:d6:b9:91:e4:c3:
d7:bc:90:c3:87:0e:bd:cf:9e:03:34:be:9a:b1:6d:a6:b6:9a:
d8:ac:22:65:7a:15:65:4e:9b:18:07:ae:c4:33:ed:45:77:a8:
62:db:d3:2e:cf:5b:06:c9:fd:cc:24:9b:c7:c5:95:3d:16:34:
60:c4:a8:d8:74:25:4d:bc:d5:43:d3:b5:7f:df:d1:c8:c6:c0:
8b:2c:42:73:3c:9e:98:4c:b4:81:23:60:74:01:6c:df:95:8d:
74:d8:f2:a3:27:48:e5:41:b6:a1:20:20:82:36:f3:42:b3:ba:
0b:c9:2c:af:d1:81:93:d1:bc:13:71:fa:ef:31:f7:68:74:6d:
1d:fc:31:d6:b7:65:eb:bc:45:26:bc:c9:0c:1e:5a:a8:a9:a4:
57:87:66:ed:26:78:cc:10:c1:d2:ec:63:82:71:fb:00:57:5e:
c7:3c:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:31:38 2025 by rpki-client