Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9faizNOy5R0Zzzj8FB7JQl13zyo.cer
File: 9faizNOy5R0Zzzj8FB7JQl13zyo.cer (raw, json)
Hash identifier: nC+jteBACXQ7XQTcHlwcdjWNoinIt31e9Vk579Ir4sQ=
Subject key identifier: F5:F6:A2:CC:D3:B2:E5:1D:19:CF:38:FC:14:1E:C9:42:5D:77:CF:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D5C06069AA56EB978671A82FCE61C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/9faizNOy5R0Zzzj8FB7JQl13zyo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.39.0/24
IP: 2a12:4d00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:c0:60:69:aa:56:eb:97:86:71:a8:2f:ce:61:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5f6a2ccd3b2e51d19cf38fc141ec9425d77cf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:31:e2:80:66:64:e7:b3:39:a9:0a:e4:d8:
86:ce:59:98:69:0a:67:81:65:25:8f:38:cc:b8:b7:
f7:8d:2c:c6:ab:0d:03:40:dd:4e:77:0b:4b:14:8d:
f4:81:ad:79:bb:a9:be:9e:56:ae:f9:09:1e:1b:22:
9b:9e:3b:df:12:d8:7a:46:0a:a4:87:87:7f:f2:47:
e2:93:89:c8:f5:f8:0d:38:cc:24:73:bf:e9:a4:ff:
38:d8:69:a9:1a:c0:0a:f5:2a:e7:a7:82:c9:8f:d6:
1f:b2:3e:1c:a1:14:78:31:ca:8e:5f:85:34:8d:56:
17:57:84:e0:29:de:e3:87:2d:c4:60:91:fc:ea:b6:
fd:30:06:80:85:da:cb:eb:60:15:04:54:7c:99:f0:
00:d9:c4:cb:76:f1:64:cd:2b:be:06:e3:d8:5e:b1:
6c:2e:b6:04:36:22:b3:bd:2d:b7:27:f2:9e:2c:d3:
b9:6c:9b:5b:36:23:95:9d:4c:55:93:32:59:9c:54:
17:f6:4c:5c:bd:fc:94:cf:0d:9a:78:d6:93:79:fa:
4b:12:9c:12:0a:da:1a:39:67:c9:f0:79:73:da:9e:
e1:94:33:fd:1c:b4:b7:ac:10:6e:95:b9:5f:98:41:
37:4f:01:48:4c:6d:5d:11:ba:76:a6:41:6a:30:59:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F6:A2:CC:D3:B2:E5:1D:19:CF:38:FC:14:1E:C9:42:5D:77:CF:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/9faizNOy5R0Zzzj8FB7JQl13zyo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.39.0/24
IPv6:
2a12:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
7c:d8:dc:8c:de:bd:49:72:3e:ee:94:33:51:63:7f:f6:4d:fe:
a9:c4:6a:8f:92:c4:b5:62:fd:ed:9a:82:17:8f:49:28:3b:f2:
ec:f5:06:27:84:5a:96:ec:d4:ea:a6:b1:fb:2c:f0:27:b9:e8:
02:8a:b5:ed:de:e6:08:9d:ad:f0:ff:55:fd:9a:1c:4d:6f:e2:
4b:ac:f7:0b:48:06:be:47:70:56:22:be:ee:aa:88:e4:e0:36:
46:a5:be:e9:82:ed:3d:d4:7d:5e:84:cd:ff:27:0f:a7:0c:44:
6b:55:14:63:3a:a0:d5:d1:2b:6b:18:4e:c9:0d:d1:6f:e3:13:
d2:5b:a2:9f:55:26:03:45:e9:9d:da:9b:b0:c0:24:ab:f6:79:
fd:63:25:34:7f:bc:91:ee:a2:06:5b:35:81:42:66:cc:73:32:
cd:ef:b7:43:09:85:9a:28:6f:f8:b9:bc:8d:5b:a7:ce:08:a8:
6a:bb:98:8b:1a:0a:b1:6b:70:23:e5:b7:1d:c1:ab:8d:e0:d0:
9a:fa:01:1f:43:2b:b5:ac:d6:bf:e4:60:05:26:3e:9f:a9:f4:
ff:a8:0f:9a:66:ce:7a:78:40:a9:02:21:ff:81:93:fb:40:09:
55:34:c8:8f:80:5e:95:2b:10:98:fd:11:fa:1b:24:a3:da:d0:
08:55:21:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:40:36 2025 by rpki-client