Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98AB2NjexoQyX6hgHwfJrARQeBk.cer
File: 98AB2NjexoQyX6hgHwfJrARQeBk.cer (raw, json)
Hash identifier: wgN8c35RFnTDDL1m/T+F7wkS5tQ+6zajnL+FYUuxac4=
Subject key identifier: F7:C0:01:D8:D8:DE:C6:84:32:5F:A8:60:1F:07:C9:AC:04:50:78:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F405371F20CCB20AB4C01FC3F99A6A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/98AB2NjexoQyX6hgHwfJrARQeBk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:32:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.116.28.0/24
IP: 2a11:ec40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:40:53:71:f2:0c:cb:20:ab:4c:01:fc:3f:99:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:32:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7c001d8d8dec684325fa8601f07c9ac04507819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:d8:9c:ce:95:ff:68:54:81:ab:a0:16:be:
2d:95:db:8b:b9:45:ab:fe:f5:dc:a4:4e:a7:4b:c1:
fe:99:09:40:91:cc:43:48:fb:46:07:6c:d6:b0:a1:
11:6c:ab:fd:ae:74:36:55:fd:06:cc:4c:24:21:e2:
c3:ca:15:02:63:62:ca:26:a8:a9:e1:dd:42:fb:36:
50:e0:10:eb:72:6c:f9:7f:ee:17:6b:44:ad:88:a4:
a0:20:cb:00:43:9a:68:ec:01:06:ee:b7:b2:60:84:
53:8f:07:45:d5:40:8f:61:c0:c6:a3:2f:54:a9:a3:
c0:9e:a8:0e:fb:41:af:be:c5:62:3b:3c:c6:2f:e2:
8c:89:5a:7d:6e:ca:10:f2:c1:8b:82:a4:bc:46:17:
b0:1b:15:20:94:c0:63:69:43:ab:23:01:0d:1e:8c:
9a:b4:13:f6:58:51:cb:b9:40:ca:34:78:38:7b:81:
8b:ef:0b:51:be:f5:db:d2:90:f3:fc:d7:05:e7:ef:
f8:83:25:cf:86:0e:45:65:ed:98:f7:0b:a3:45:d2:
04:9c:21:45:ff:9a:a6:fc:9d:e0:59:9c:da:48:d8:
f6:80:f3:44:2a:a7:87:10:a0:8f:f9:2a:f0:f2:b7:
6c:0e:2e:f7:0a:7a:ce:23:54:3c:fe:3d:9d:aa:fc:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C0:01:D8:D8:DE:C6:84:32:5F:A8:60:1F:07:C9:AC:04:50:78:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/98AB2NjexoQyX6hgHwfJrARQeBk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.28.0/24
IPv6:
2a11:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
a6:4a:f5:9b:c9:27:7b:00:96:87:7e:ee:db:b2:52:4f:fb:be:
67:5a:31:48:72:2d:ab:e7:8c:90:19:48:fc:20:59:bc:d4:8c:
96:43:6b:57:bd:48:9a:af:a2:71:f4:5a:dd:72:1e:17:a5:ad:
2f:c9:f7:18:be:ef:06:aa:5b:d6:40:73:6e:3b:fb:5f:d1:5c:
17:9a:3f:ba:2f:45:65:12:a1:df:ed:38:9e:9a:ef:23:3e:c0:
fc:14:4a:25:ba:93:b6:03:8f:f7:26:4b:6d:db:5b:af:2b:65:
99:06:23:81:bd:c4:d6:6e:78:a0:f5:d7:35:15:f6:d1:dd:e7:
46:b7:c6:0b:30:15:67:96:f0:d7:01:ed:e2:a1:77:f1:52:e0:
e4:42:32:ca:fb:24:26:fe:fc:ca:3d:1f:aa:65:a7:ab:b5:55:
4a:92:1d:97:80:a3:4a:86:a6:6c:98:16:1d:7d:ea:e6:76:63:
aa:85:8c:e2:9c:80:dd:b1:f7:a0:b6:55:fb:1f:bf:50:dd:1b:
8a:9d:ee:c6:dc:bd:eb:2c:44:18:a4:3f:89:35:6b:b1:e0:a9:
97:f3:40:97:97:cf:88:94:ea:bf:04:bc:42:02:b5:a0:c0:b4:
3c:ea:67:92:67:f8:51:41:31:e6:56:c5:56:1b:13:ee:f9:be:
e5:cc:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:20 2025 by rpki-client