Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74DJCv6b-TGzuleUWpZRP94IMb0.cer
File: 74DJCv6b-TGzuleUWpZRP94IMb0.cer (raw, json)
Hash identifier: um5gwQDDJW9Vlqt+53kiLwcP6ofGH7tnwYE4YO9Ozjs=
Subject key identifier: EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245BCA4BE4EC1D93D11A0B2DC849B44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/74DJCv6b-TGzuleUWpZRP94IMb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.26.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:bc:a4:be:4e:c1:d9:3d:11:a0:b2:dc:84:9b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef80c90afe9bf931b3ba57945a96513fde0831bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:05:da:43:7a:b9:07:65:57:65:0b:b4:12:
f0:5f:4a:c8:17:8e:b2:3e:5e:20:51:18:c4:3e:1f:
ee:31:d1:fd:6c:f3:42:b2:1a:3c:7e:22:44:f8:01:
eb:53:17:2e:12:77:ed:59:58:4c:de:28:15:04:dd:
5d:ba:25:49:4e:ed:3f:1b:b4:42:1c:4d:a0:25:33:
b1:d9:3a:d0:d4:1f:69:d9:02:89:e1:d1:b4:3a:b6:
b4:e8:0e:10:36:7f:63:7a:c7:0c:12:65:b9:34:b5:
b3:6d:21:01:f2:f2:f8:ec:87:d8:d3:90:4d:ec:0f:
8e:10:47:4d:09:31:25:4d:8a:60:2c:4f:23:77:35:
aa:1a:67:1c:da:84:fd:3c:db:9a:39:c7:79:e7:a3:
c1:1a:37:10:ad:52:1a:7a:03:d0:30:f8:ec:d4:b0:
ca:8f:29:8b:44:63:be:15:b7:29:d2:06:e9:63:56:
3c:69:31:93:66:ce:30:15:0f:ef:38:11:ad:75:58:
bc:f6:84:ca:2d:77:02:0e:bb:f8:78:96:87:f5:b4:
50:23:47:68:9b:6d:6c:66:1b:1e:18:60:45:ef:8b:
9f:7d:a0:1e:27:b1:77:d6:b9:5f:df:9d:40:e1:38:
b8:06:19:a1:97:91:8e:1e:22:82:d3:10:f0:c5:a4:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/74DJCv6b-TGzuleUWpZRP94IMb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.26.0/24
Signature Algorithm: sha256WithRSAEncryption
40:54:e3:fa:04:16:0f:fd:01:4a:1e:82:d8:57:c8:a0:78:1e:
e3:58:d6:26:b9:12:b8:2b:6b:32:75:69:a2:b2:e6:ff:1b:aa:
fe:c5:5d:de:b5:bf:3b:ee:1a:f8:98:57:9b:9b:b1:a6:03:0f:
29:65:28:33:0c:94:a9:9b:81:6a:c3:ff:6d:3b:0f:12:82:3c:
54:cf:80:00:d5:64:3a:c1:06:10:2e:fa:11:8f:c3:c2:b5:e8:
da:0a:a1:da:58:f9:6a:6f:a2:2b:f1:51:1b:11:20:7b:3a:82:
c0:70:1a:0f:95:8a:1b:1c:7d:02:66:da:25:83:bd:ec:97:9a:
3e:b2:89:25:47:d9:2c:3f:e6:f5:3a:62:d0:bd:a0:c7:9a:89:
5e:3b:1b:62:a8:88:ad:17:ec:33:b8:3f:ac:ff:e9:79:21:c5:
3d:ef:67:c4:01:ec:39:27:10:df:20:88:de:57:22:09:b5:c5:
3b:38:bf:5e:3e:bc:42:d3:fb:63:7e:24:b6:60:ed:f3:68:27:
db:61:c4:56:31:dc:5b:8a:b2:b6:84:5d:41:ea:6d:51:1b:5b:
5e:97:64:8b:37:eb:58:fa:6c:e7:e7:b1:1d:b8:27:f3:4e:5e:
79:be:9a:66:80:18:99:94:8a:b7:78:1c:23:50:17:4e:ae:83:
26:91:09:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:30:11 2025 by rpki-client