Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
File: 6csWh0iM9DpzNPnvpNnN9jVyTpw.cer (raw, json)
Hash identifier: Ve98wQQIYSakJVEkaE+LoO9g0jqxFNxfkMI9mkKoxGI=
Subject key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E1B9DDC99181C3813FFE274B0413D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:59 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.126.202.0/24
IP: 194.126.215.0/24
IP: 194.126.219.0/24
IP: 194.126.227.0/24
IP: 2a0f:aec0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:1b:9d:dc:99:18:1c:38:13:ff:e2:74:b0:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:89:9c:3f:61:dc:9c:0d:b5:d4:b4:d3:bb:
d2:3d:9c:54:e2:b3:1c:6c:14:4a:18:5a:34:11:d4:
bd:96:18:f9:a5:38:1d:b0:71:b7:ba:f9:af:11:8a:
f5:0b:ba:a4:6d:16:2d:66:d7:64:9a:dd:e6:85:89:
0e:85:79:63:d3:52:e1:26:d3:78:62:a0:77:fd:ea:
a4:40:fb:28:4d:0c:de:c7:54:9a:f6:05:06:3d:da:
78:ad:35:cb:5a:f7:af:2e:7f:57:d5:1c:dd:64:3b:
33:35:6b:6a:ac:53:a4:32:2f:c2:a1:6d:d4:0f:f7:
43:d6:df:7b:a2:41:e4:20:b0:68:58:37:e8:6c:3e:
5e:57:a3:72:ff:d4:ee:08:72:8f:d8:20:ae:0e:b1:
c4:8e:c1:3e:f1:2f:78:8a:6c:f0:ca:55:df:f9:02:
45:a0:32:c7:f6:b7:7c:b5:62:c8:77:5e:c5:12:63:
54:00:a1:28:1e:01:84:dc:ae:f8:50:88:ce:75:6f:
cf:d4:a7:84:22:e7:f7:0e:62:c4:94:1e:e9:c6:51:
70:1f:fd:b4:04:01:db:20:d9:f1:b8:71:ee:db:38:
f3:e1:9c:5a:da:db:51:24:61:e9:1d:25:37:bb:7f:
91:ea:7d:94:86:49:5d:5d:7a:ba:60:d7:0f:9a:a5:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
194.126.227.0/24
IPv6:
2a0f:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:45:b9:c7:6f:aa:7e:ae:67:4c:b5:98:85:6b:ad:25:2b:b0:
4a:ad:74:f6:02:d1:89:80:03:4b:16:e2:2d:dc:f2:be:db:96:
ab:27:18:28:db:cd:0a:ef:20:2a:cd:e6:60:9c:e6:a9:6b:00:
1a:0a:d7:06:39:65:19:ff:21:77:87:93:33:d6:70:cf:64:81:
7d:45:c5:17:3a:39:c6:6e:d1:54:72:c4:fa:82:0c:33:25:fb:
d5:9c:fa:25:b1:22:7b:11:03:bd:73:95:de:b2:7b:a1:93:1c:
1f:87:85:ce:05:2b:83:51:8b:e7:d1:49:7b:74:3b:08:6a:ee:
60:57:44:a7:0e:20:68:15:cc:8e:3c:fa:a4:1f:d7:c8:c3:96:
9b:ae:48:81:dd:39:b8:0d:64:a6:b6:60:b8:5f:be:0c:5c:c1:
74:ae:dd:2f:3a:90:cc:1d:cc:f7:70:0e:d3:f7:a5:40:6b:e3:
bb:11:a9:ca:c6:ab:ae:99:0a:30:97:3e:0f:8f:f6:d0:2a:64:
cb:51:d0:27:77:3b:6c:82:a3:26:9e:e1:9e:de:63:a9:c0:02:
1e:0a:3d:cf:1a:e7:5f:e8:33:39:e7:2d:99:2f:de:9c:de:a5:
99:5b:bc:88:db:c9:98:a9:33:37:5b:e8:ae:23:3a:e4:b1:52:
b5:94:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 16:38:01 2025 by rpki-client