Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
File: AtoGJZU03EUgidKRrSd-6sFs1Co.cer (raw, json)
Hash identifier: hlhUIUqxagUl4VZFekAnc8TDconTQRuq6pIHp9Ys3Go=
Subject key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD5B5D832B12D29373076ECABDF0FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 205960
IP: 45.91.224.0/22
IP: 2a0e:1840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:5b:5d:83:2b:12:d2:93:73:07:6e:ca:bd:f0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02da06259534dc452089d291ad277eeac16cd42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:67:ab:10:de:81:4d:0f:d6:e0:a0:06:35:
ce:2e:18:74:c1:68:c3:33:0d:d8:e2:b5:69:e1:12:
f5:ef:da:2e:e3:da:49:b7:70:10:5d:37:ee:ce:b5:
60:05:d7:78:f4:8b:12:91:cf:07:4a:93:72:cc:84:
18:1f:47:41:09:12:7a:db:d4:17:61:ec:21:ca:ab:
74:77:a9:eb:58:65:65:e1:89:02:bb:f2:01:5f:05:
ac:24:93:80:6d:d7:a3:f2:8b:5c:96:36:d5:c5:7e:
ac:e7:c3:1d:56:67:ac:63:ba:8d:7a:9a:ee:83:c3:
e4:f4:73:c6:e1:d9:76:35:92:46:a0:17:2b:24:eb:
52:3a:98:e9:e9:fb:34:19:29:e1:e0:34:bf:9a:08:
4c:f0:24:21:f5:7b:02:50:8b:73:ae:aa:5f:c8:86:
88:f2:6a:d2:bf:8f:cf:9b:18:23:9f:da:4d:84:3a:
2b:d1:8e:f2:ed:2e:7f:f4:89:5d:04:d0:c4:82:92:
bc:30:a9:49:ed:30:5e:38:3f:74:1e:5c:ff:4e:db:
b7:99:f7:0d:b2:54:fc:17:d9:fb:38:2d:91:c9:41:
95:32:b9:9a:b7:0e:bb:10:61:d3:72:83:98:c6:5a:
29:32:42:4c:51:cd:30:d6:a0:cb:fc:77:be:a7:32:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.224.0/22
IPv6:
2a0e:1840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205960
Signature Algorithm: sha256WithRSAEncryption
14:8d:78:d0:d3:68:f7:ac:58:c7:74:33:f3:71:b3:c2:66:7e:
b9:91:51:16:07:f1:22:d2:8f:70:8a:7a:6a:ea:48:06:51:ed:
a4:59:36:01:05:00:da:d5:b3:3b:5e:5d:75:9c:ed:7a:96:1b:
4b:f4:0b:86:f5:7a:89:e0:0b:3f:7b:3d:aa:99:8d:e3:f3:71:
e4:29:ab:fd:8f:80:ba:34:b6:01:ba:6b:91:0c:85:8f:d1:ff:
3c:d3:2a:3f:4d:85:ef:91:c5:4f:53:d8:fb:d6:e0:ae:a8:69:
d2:52:17:f8:c5:3c:8e:a1:55:96:81:1e:cf:5a:16:45:60:7b:
f0:c7:9d:48:5e:c5:07:19:d1:84:11:21:b6:96:93:07:e0:16:
e5:d5:0f:4d:00:d7:02:89:b3:0e:71:69:2e:9c:4a:27:16:34:
10:c6:c4:6d:e4:55:81:bd:a9:c8:4e:52:72:00:57:51:cf:3c:
9e:9d:1b:4c:ee:56:34:d2:cc:15:43:f4:b3:f9:f5:8f:fd:d5:
ab:56:4e:a1:82:e4:bf:55:3f:dd:7f:2a:c9:ac:ad:9b:26:5b:
4b:a3:f4:16:7e:46:19:66:e4:d2:76:99:1a:47:cc:cb:b5:d4:
00:3e:88:99:32:03:d0:85:76:92:57:cf:47:79:0a:5e:b2:69:
8a:4f:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:28:20 2025 by rpki-client