Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AygU6oab9Ck1--Z3SF_66YcEYjU.cer
File: AygU6oab9Ck1--Z3SF_66YcEYjU.cer (raw, json)
Hash identifier: oSa+pZUUZWg7f0lQa3+fipVGQL/7U813y6ERF3KIypU=
Subject key identifier: 03:28:14:EA:86:9B:F4:29:35:FB:E6:77:48:5F:FA:E9:87:04:62:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAAC7F00BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/AygU6oab9Ck1--Z3SF_66YcEYjU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:58:27 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.82.184.0/22
IP: 2a0e:7180::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733038444734 (0xaaac7f00be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:58:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=032814ea869bf42935fbe677485ffae987046235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:8b:e0:8e:f8:37:66:8d:35:86:86:1d:27:
22:b8:c9:37:b3:9f:a0:13:37:42:9f:8e:23:6e:14:
ca:ba:f9:bc:61:a7:c0:ab:1f:fb:a0:5c:39:cb:98:
62:28:ae:80:b1:06:e9:7b:4c:19:40:09:ce:48:08:
da:e2:50:6c:43:2b:d6:8e:19:9a:f1:9e:38:05:eb:
72:ba:9d:68:17:f0:42:af:5c:0b:43:38:75:98:24:
c3:3c:9c:e5:8c:a7:e8:0d:88:a7:90:4d:c7:dc:f7:
34:1e:da:a2:62:0e:da:bf:50:b5:20:22:6e:69:6a:
6c:1a:80:bd:77:01:83:75:e9:56:d4:9b:0d:c2:30:
41:70:13:06:69:13:ee:17:ab:7f:f4:ca:e8:3f:b6:
e3:a2:19:49:ae:3e:80:87:b5:7c:16:a4:9e:79:ff:
43:40:cb:04:60:80:61:f8:ac:69:eb:05:5f:fa:27:
89:b7:c2:30:1e:0b:70:34:58:48:f5:7f:7e:c2:bd:
38:11:6d:d1:34:53:ea:07:38:59:e5:54:da:74:d5:
5b:cf:90:4b:ca:72:5d:a6:1b:c5:c0:4e:42:54:8b:
50:31:3b:5a:b0:62:84:95:dc:bc:1e:6c:8c:6f:b3:
55:c9:7b:e0:98:9d:95:18:39:f1:b9:8d:8c:9a:1b:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:28:14:EA:86:9B:F4:29:35:FB:E6:77:48:5F:FA:E9:87:04:62:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/AygU6oab9Ck1--Z3SF_66YcEYjU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.184.0/22
IPv6:
2a0e:7180::/29
Signature Algorithm: sha256WithRSAEncryption
3d:68:29:81:e7:03:39:1d:14:75:38:ea:61:32:84:7b:08:26:
b0:09:b1:ad:ce:a6:9a:3c:4a:cf:a6:cb:2e:76:fc:1f:9d:24:
64:9f:01:8d:07:d5:2c:d7:f2:94:25:ca:ce:39:62:c4:fa:3d:
7d:60:9d:e2:40:36:19:fe:76:8b:59:43:ab:e8:ee:7c:f8:ae:
0b:75:d1:e7:d1:e7:88:c3:67:bd:f5:2e:28:c8:91:77:39:5b:
23:9e:11:08:30:3c:f8:a9:d2:b2:a0:13:ee:32:d9:4e:01:4b:
fa:4e:34:5a:51:6a:74:9c:2c:61:ae:cc:ce:b8:09:e7:12:9f:
6e:fd:94:5e:8f:5c:2b:6e:67:f3:37:a2:90:11:a3:1e:26:2e:
47:e1:73:e7:aa:6b:f3:ae:2f:6b:48:8f:2f:da:dd:7f:b7:52:
7e:1d:d5:68:7b:fa:b6:81:f3:ee:f5:2e:75:8a:36:b7:f7:3c:
bf:a0:13:21:b1:da:85:20:b1:18:f8:e7:c0:24:86:99:9d:cb:
83:9d:61:5f:f9:8c:9f:64:ba:94:f4:c6:04:aa:26:87:1f:93:
cb:89:b7:a7:01:8a:75:56:99:4f:57:bc:38:03:3e:8b:c9:2b:
60:3c:97:d6:4d:6c:80:50:f0:2a:46:2e:b9:99:14:1f:67:6c:
9d:e7:ed:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:58 2025 by rpki-client