Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
File: 9CeuFzuErzmhDrvQfdY8LVzo_cY.cer (raw, json)
Hash identifier: +wmQS9LOg4ZpSY0d3eiGINOlaFFj6PXbeNr9g2gX/+4=
Subject key identifier: F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0EE2CED85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/9CeuFzuErzmhDrvQfdY8LVzo_cY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:02:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.25.207.0/24
IP: 2a06:99c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691190689157 (0xa0ee2ced85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:e0:fe:31:43:8d:09:55:5a:b5:ac:38:c5:
53:07:f0:35:7e:f0:75:3a:f4:38:99:25:0a:e3:43:
b9:2a:f2:4a:0e:26:98:51:2d:e4:19:b8:51:07:e2:
aa:1c:13:10:3f:9b:f3:ac:e3:24:7b:37:a1:db:0f:
22:3a:07:3c:8d:82:e3:79:f3:9b:d1:7d:14:9a:d7:
c6:cc:59:c7:3b:aa:61:1c:3c:90:13:38:da:63:b4:
c0:33:d4:b0:c4:7e:e8:ca:33:54:9d:9c:51:e6:20:
0b:5a:71:ef:97:4d:36:8e:c3:64:55:90:6b:38:99:
a1:05:91:37:9f:4a:b2:f3:c5:f4:48:ce:70:f5:dd:
aa:06:7a:cd:81:bd:fa:26:05:85:08:1a:5a:87:5b:
31:c6:10:fe:80:4d:66:f7:ae:df:69:0c:f9:69:46:
f2:60:f1:b4:0a:cd:00:de:85:23:8b:1d:99:39:2f:
e2:96:4a:39:ca:b7:9c:45:a1:61:e8:b5:54:ab:59:
de:37:87:cd:06:c2:90:20:70:65:54:8b:f2:5c:e2:
17:43:5e:8f:74:5f:6b:9a:70:84:14:bb:9c:de:61:
ae:3e:4d:86:fc:ed:23:4f:84:fe:7f:f8:a9:ea:3e:
d7:d5:80:30:0d:1f:62:30:6d:20:cb:69:30:c8:d6:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/9CeuFzuErzmhDrvQfdY8LVzo_cY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.207.0/24
IPv6:
2a06:99c0::/29
Signature Algorithm: sha256WithRSAEncryption
50:1d:ec:88:06:e0:5c:9b:5e:44:4e:22:b4:d0:8e:76:71:8e:
de:8e:ac:60:cf:ca:44:6c:26:fb:be:3e:69:0a:f6:b3:8d:ad:
8a:d7:47:7c:23:48:34:18:83:1d:6e:5d:c1:f9:49:ca:e5:b6:
55:9e:73:e0:a6:0c:5f:95:67:bb:56:6a:d7:6d:8b:71:e2:50:
1d:95:24:dc:1f:cf:3d:23:02:be:21:06:f9:2b:5c:b8:99:55:
45:c7:56:dd:ec:a1:c5:e5:8e:c6:00:d5:28:fa:04:fa:ba:2b:
b0:fd:e2:37:c2:ff:1e:fe:11:9a:9b:4d:40:ba:7d:a4:07:41:
22:94:fb:db:3b:c3:15:a4:c8:79:c5:23:69:d5:e3:71:a1:3b:
8e:23:27:87:b3:e0:3e:b3:1f:20:63:cd:52:ed:23:4d:0b:6b:
60:3c:fe:29:00:a2:c8:20:e6:e4:c2:88:72:37:46:7d:d5:ad:
36:8e:e6:41:ee:f5:b4:a8:6d:33:cb:b0:a3:f9:0f:de:cf:83:
b9:f8:42:57:80:1a:c3:20:19:45:b3:37:a2:1f:fc:07:ec:2d:
b2:80:fb:cf:1e:c3:3b:01:39:a6:5f:c7:25:d0:3e:05:60:40:
9a:c6:12:1d:dd:9c:2d:77:22:90:e0:62:df:17:f5:02:72:1d:
b9:56:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:10 2025 by rpki-client