Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8XQPwwzWxspfgKKaG-fRg0Yjzo8.cer
File: 8XQPwwzWxspfgKKaG-fRg0Yjzo8.cer (raw, json)
Hash identifier: 8PaWok7tmQ4+sfaXOrhQnynl/tBb+rKgTNKO+EQCQ0g=
Subject key identifier: F1:74:0F:C3:0C:D6:C6:CA:5F:80:A2:9A:1B:E7:D1:83:46:23:CE:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF51C18A7694F30D84B564E7DD93515
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/8XQPwwzWxspfgKKaG-fRg0Yjzo8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:06 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.225.83.0/24
IP: 2a11:ee00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:1c:18:a7:69:4f:30:d8:4b:56:4e:7d:d9:35:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1740fc30cd6c6ca5f80a29a1be7d1834623ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:d2:c4:9f:4a:a5:53:aa:d6:8a:1a:e3:8d:
be:c3:b9:2d:c5:67:fd:84:89:4e:19:b3:70:7f:8d:
a1:f0:1f:1e:bc:05:42:1f:4c:23:36:b2:a9:a1:7a:
5c:fb:dd:a8:f4:80:e0:16:24:6c:43:84:89:fd:0f:
42:38:0f:b2:d6:cc:97:e8:70:de:be:25:db:7a:05:
a6:92:91:23:af:2e:33:7c:d3:f7:13:93:5e:56:08:
6e:7f:26:e2:f5:87:cd:a6:a8:20:95:24:cb:53:ea:
cf:5d:9e:61:a3:e2:be:b5:83:bc:ee:a1:63:a1:be:
82:3d:01:3e:b2:94:c6:18:fa:da:ea:74:f4:9b:9e:
e4:4a:9d:6a:c6:ee:56:4f:14:6a:c1:a9:26:d7:81:
6c:34:9d:3c:07:78:0c:8c:73:e4:42:37:69:30:28:
a9:cd:91:23:df:23:28:b0:93:62:4c:3a:f6:8b:71:
6d:db:d6:99:2f:9b:69:5f:72:ad:0d:6c:c9:8a:c5:
99:25:de:91:e4:d6:2a:e9:5a:52:b5:ab:fa:e1:19:
f9:15:9e:94:21:2d:35:b8:23:51:df:bf:15:17:14:
c9:e6:d0:c6:da:f2:f8:f3:44:e4:4f:da:16:29:fb:
fd:36:a4:e9:06:4c:b0:09:02:f8:4a:c9:0d:95:a3:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:0F:C3:0C:D6:C6:CA:5F:80:A2:9A:1B:E7:D1:83:46:23:CE:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/8XQPwwzWxspfgKKaG-fRg0Yjzo8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.83.0/24
IPv6:
2a11:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
12:45:40:25:01:1e:c8:ef:c5:58:0a:a3:26:57:1f:d6:ac:bf:
ab:72:02:67:2e:18:fa:64:a4:c1:cc:28:4a:cf:a4:4f:e2:7f:
5b:32:60:56:4b:ab:35:bf:56:ec:9f:8a:01:9f:74:6a:ba:e5:
a6:53:9c:92:c5:e6:0b:94:8b:7f:82:4e:a4:01:7f:5c:ae:4b:
59:c5:c1:e5:7f:78:d0:e1:ee:ce:9c:d9:e0:e5:4e:c5:e6:98:
da:9a:6e:04:01:8c:28:7e:72:e8:bb:fe:53:33:72:07:6b:ce:
68:4b:f5:56:a9:fb:b1:28:0b:71:76:b9:b2:08:0b:12:6c:9c:
e0:22:5e:48:2b:d0:06:d2:46:7a:db:9a:07:86:24:2c:c0:3c:
84:90:98:70:d9:aa:03:d5:6b:68:c9:26:1a:0e:fd:a4:e1:85:
58:b8:93:9d:b5:d3:e1:41:01:99:66:39:fa:8e:9d:75:4b:ec:
28:f3:0b:0d:8f:a7:f2:e0:6f:6d:de:fc:17:f3:fe:b9:42:38:
97:91:fb:ee:07:c4:49:f2:ee:dc:e4:74:ca:48:32:be:9c:e8:
cb:1c:98:04:05:f7:e4:ba:2a:4c:33:50:6f:07:c8:1f:90:2d:
d0:54:57:e5:78:ee:3a:70:b8:43:b7:63:78:8e:cb:c7:4c:f6:
8f:7c:6d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:38 2025 by rpki-client