Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7ziTCD_NFBdlCT6UIVdL2RlsLO0.cer
File: 7ziTCD_NFBdlCT6UIVdL2RlsLO0.cer (raw, json)
Hash identifier: eeKs/Peolylg6Fmscuv49T93wX/u6xeZHoha3qjutBg=
Subject key identifier: EF:38:93:08:3F:CD:14:17:65:09:3E:94:21:57:4B:D9:19:6C:2C:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D35D3E03C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/4bda4f-9215-4cf9-928c-c4a908f161c9/1/7ziTCD_NFBdlCT6UIVdL2RlsLO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/4bda4f-9215-4cf9-928c-c4a908f161c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:59:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.85.132.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675212943420 (0x9d35d3e03c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef3893083fcd141765093e9421574bd9196c2ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:eb:1c:eb:6a:a3:26:d3:f8:71:eb:fe:03:
f1:9c:8c:22:48:71:5d:37:1e:29:46:e6:a0:9b:68:
1b:1e:df:ce:30:90:17:e6:41:b4:94:57:2d:4c:8a:
51:b6:3e:fb:45:f1:6d:ac:40:1a:0a:42:3d:06:2e:
9d:77:9d:31:40:27:d3:47:cc:71:a7:3b:3d:87:c5:
df:0a:cf:53:34:78:41:53:6d:6a:5e:4b:4c:f2:3a:
60:45:45:f9:0b:e9:8f:1d:ee:40:90:ba:fe:2c:a1:
42:a7:1e:84:91:96:92:b0:3d:57:87:00:25:ae:58:
80:a1:34:bb:61:70:72:63:94:83:64:70:96:8e:7e:
38:01:96:9a:f7:08:3c:47:96:b0:5e:1a:22:52:82:
94:7a:bb:bf:8f:5f:c0:64:ba:30:39:15:a9:fe:f1:
bc:4c:08:99:b9:ac:db:ff:15:96:30:81:be:75:65:
86:fb:1c:22:f1:8d:61:f9:65:21:38:c7:1d:fa:8b:
2f:ae:a1:fa:52:0e:95:47:90:13:f7:d6:7d:1d:a3:
25:89:36:d9:3d:4e:1a:18:db:e2:8c:d6:fe:9f:35:
dd:45:c6:06:91:f4:fc:9e:a6:00:6a:72:2f:7a:e1:
d2:69:f0:ff:29:1d:68:d5:a3:92:97:44:dc:5b:0f:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:38:93:08:3F:CD:14:17:65:09:3E:94:21:57:4B:D9:19:6C:2C:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4bda4f-9215-4cf9-928c-c4a908f161c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4bda4f-9215-4cf9-928c-c4a908f161c9/1/7ziTCD_NFBdlCT6UIVdL2RlsLO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:a4:b8:0c:4e:54:fa:fe:06:58:6c:79:5e:4f:51:65:83:f5:
d2:b5:c0:ba:65:58:2e:d3:cf:2a:89:c7:94:42:aa:40:9a:91:
51:c8:30:fc:da:aa:c0:99:56:5a:31:14:b2:7b:a1:0b:74:04:
c6:62:61:17:ef:82:28:6f:9b:c5:13:48:d9:12:f5:ce:e2:c8:
27:27:6b:24:30:04:5f:9e:44:dc:5a:48:9b:8c:83:f3:1b:5d:
9d:db:8b:03:b9:8c:f2:59:56:98:18:07:99:8e:82:80:b0:d3:
8e:36:60:4e:f1:a1:31:5b:79:c1:c7:32:64:11:35:a8:39:e8:
8f:46:b0:31:db:f9:87:57:55:70:63:81:1f:9d:f3:b5:52:e3:
b7:bb:d8:de:b9:97:ec:3b:29:4c:e0:85:b1:5b:ed:59:07:b9:
64:b5:2e:ea:c6:02:f4:78:de:83:e8:ed:96:c5:dc:ac:1d:97:
1d:bc:48:05:d0:73:e5:18:60:2d:8a:af:13:c9:a5:77:4b:85:
1e:e2:96:27:85:d7:8f:d1:e4:6f:e6:25:69:9e:84:ee:f0:9b:
fd:50:5a:2c:3a:dd:4d:c4:c2:1b:3b:10:3e:6f:10:aa:a5:21:
ea:4d:ba:d3:34:76:d5:0d:a1:dd:f1:bb:fc:90:f2:48:d3:47:
42:b1:90:2f
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ010+A8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDM1OTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlZjM4OTMwODNm
Y2QxNDE3NjUwOTNlOTQyMTU3NGJkOTE5NmMyY2VkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA2djrHOtqoybT+HHr/gPxnIwiSHFdNx4pRuagm2gbHt/O
MJAX5kG0lFctTIpRtj77RfFtrEAaCkI9Bi6dd50xQCfTR8xxpzs9h8XfCs9TNHhB
U21qXktM8jpgRUX5C+mPHe5AkLr+LKFCpx6EkZaSsD1XhwAlrliAoTS7YXByY5SD
ZHCWjn44AZaa9wg8R5awXhoiUoKUeru/j1/AZLowORWp/vG8TAiZuazb/xWWMIG+
dWWG+xwi8Y1h+WUhOMcd+osvrqH6Ug6VR5AT99Z9HaMliTbZPU4aGNvijNb+nzXd
RcYGkfT8nqYAanIveuHSafD/KR1o1aOSl0TcWw9+1wIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFO84kwg/zRQXZQk+lCFXS9kZbCztMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzRiZGE0Zi05MjE1LTRjZjkt
OTI4Yy1jNGE5MDhmMTYxYzkvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvNGJkYTRmLTkyMTUtNGNmOS05
MjhjLWM0YTkwOGYxNjFjOS8xLzd6aVRDRF9ORkJkbENUNlVJVmRMMlJsc0xPMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLVWEMA0GCSqGSIb3DQEBCwUAA4IBAQBepLgMTlT6/gZYbHleT1Fl
g/XStcC6ZVgu088qiceUQqpAmpFRyDD82qrAmVZaMRSye6ELdATGYmEX74Iob5vF
E0jZEvXO4sgnJ2skMARfnkTcWkibjIPzG12d24sDuYzyWVaYGAeZjoKAsNOONmBO
8aExW3nBxzJkETWoOeiPRrAx2/mHV1VwY4EfnfO1UuO3u9jeuZfsOylM4IWxW+1Z
B7lktS7qxgL0eN6D6O2WxdysHZcdvEgF0HPlGGAtiq8TyaV3S4Ue4pYnhdeP0eRv
5iVpnoTu8Jv9UFosOt1NxMIbOxA+bxCqpSHqTbrTNHbVDaHd8bv8kPJI00dCsZAv
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:16:58 2025 by rpki-client