Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CW96d7V6bTLTd96o-yBbazwqXEI.cer
File: CW96d7V6bTLTd96o-yBbazwqXEI.cer (raw, json)
Hash identifier: qpMI9HM0ek7lbKbo98kirjYGYRAXziqjujJl58AuEH4=
Subject key identifier: 09:6F:7A:77:B5:7A:6D:32:D3:77:DE:A8:FB:20:5B:6B:3C:2A:5C:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9BC8713235
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/bab5cd-4746-4923-b4f9-6bb1e43de5bf/1/CW96d7V6bTLTd96o-yBbazwqXEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/bab5cd-4746-4923-b4f9-6bb1e43de5bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:56:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 47909
IP: 94.154.80.0/21
IP: 194.143.148.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669082792501 (0x9bc8713235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=096f7a77b57a6d32d377dea8fb205b6b3c2a5c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:5e:75:e9:6d:c2:8a:11:fb:0d:4b:1a:0e:
49:d2:2e:2b:1b:99:f8:f5:83:4a:76:45:dd:73:d2:
d8:24:06:b6:2d:3a:e7:32:d0:0c:2c:17:c7:60:ce:
55:78:79:34:c8:a3:c5:21:4e:81:be:16:94:60:ae:
f4:d4:44:44:ad:89:ef:8e:89:e8:1a:ed:17:0c:95:
20:fa:f9:58:d0:1f:07:4f:3f:b1:8a:33:e0:eb:f3:
d8:ef:67:34:32:a6:ae:e7:7e:1c:4a:f4:92:34:10:
34:1d:be:09:c6:98:89:73:1b:00:44:64:4e:fa:31:
fe:ee:56:e5:1b:02:ba:7d:fc:42:ac:7a:ef:e8:c2:
80:1d:1a:1d:47:0a:c7:cc:ed:61:bc:5d:7f:a1:55:
c3:aa:56:a8:b1:11:97:fc:8c:da:b6:61:c3:50:77:
1d:ad:9e:6a:cd:4f:75:4f:e6:31:b3:70:dd:59:55:
12:af:62:a5:c7:53:d6:23:12:19:d7:3f:52:9c:be:
eb:b0:66:98:43:9e:cf:0f:8c:4a:c4:0b:d0:10:73:
84:88:bb:87:8f:4a:22:47:64:ba:0b:10:f4:61:88:
50:b2:f6:87:bb:18:ca:8c:1d:ac:be:69:31:7d:c5:
8a:20:81:4a:5b:0e:2c:9a:c9:b3:c4:a4:f5:44:05:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:7A:77:B5:7A:6D:32:D3:77:DE:A8:FB:20:5B:6B:3C:2A:5C:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bab5cd-4746-4923-b4f9-6bb1e43de5bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bab5cd-4746-4923-b4f9-6bb1e43de5bf/1/CW96d7V6bTLTd96o-yBbazwqXEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.80.0/21
194.143.148.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47909
Signature Algorithm: sha256WithRSAEncryption
4a:f3:d6:d7:28:9c:34:9e:ac:6a:2b:ee:8d:da:fe:47:5e:04:
ef:4e:1b:7b:f4:5d:36:33:0d:ab:e8:fb:db:fd:02:8c:b0:90:
14:f7:04:f0:b9:ba:e5:46:da:97:c4:1e:a0:8e:26:55:3a:ac:
83:da:7d:3c:8a:d0:c2:0e:67:af:d4:26:47:74:a6:21:70:31:
ce:1a:3f:44:66:e5:f8:ac:47:cf:b2:e8:13:d4:67:fd:b9:ed:
9f:70:66:21:22:97:6e:98:88:c4:03:e8:54:76:22:27:8e:37:
1e:56:87:8f:be:5d:a1:0f:0a:f2:44:60:69:81:43:bd:45:65:
51:2d:ed:52:ac:1e:56:b9:60:17:12:83:a8:0d:18:c7:6e:1a:
9f:75:d4:55:f2:6f:7a:ae:6d:49:6c:99:c3:97:1c:00:3e:1d:
f6:cf:8a:8e:72:25:0c:fc:65:63:f5:51:24:46:5d:07:e6:07:
95:51:df:0f:ef:89:fd:98:d9:55:37:f8:9d:46:0d:bf:b2:96:
15:ab:66:a0:fa:cd:81:6f:2a:47:55:cc:11:f8:15:a4:96:93:
91:1c:32:e0:d7:fd:4f:be:26:57:0e:8b:df:dd:f0:23:5f:01:
7b:14:af:13:a1:58:36:3f:40:c8:9b:b1:74:0d:a0:bd:06:71:
4d:a6:55:6f
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIGAJvIcTI1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDI1NjU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwOTZmN2E3N2I1
N2E2ZDMyZDM3N2RlYThmYjIwNWI2YjNjMmE1YzQyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA7qdedeltwooR+w1LGg5J0i4rG5n49YNKdkXdc9LYJAa2
LTrnMtAMLBfHYM5VeHk0yKPFIU6BvhaUYK701ERErYnvjonoGu0XDJUg+vlY0B8H
Tz+xijPg6/PY72c0Mqau534cSvSSNBA0Hb4JxpiJcxsARGRO+jH+7lblGwK6ffxC
rHrv6MKAHRodRwrHzO1hvF1/oVXDqlaosRGX/IzatmHDUHcdrZ5qzU91T+Yxs3Dd
WVUSr2Klx1PWIxIZ1z9SnL7rsGaYQ57PD4xKxAvQEHOEiLuHj0oiR2S6CxD0YYhQ
svaHuxjKjB2svmkxfcWKIIFKWw4smsmzxKT1RAUhCwIDAQABo4ICpjCCAqIwHQYD
VR0OBBYEFAlvene1em0y03feqPsgW2s8KlxCMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2JhYjVjZC00NzQ2LTQ5MjMt
YjRmOS02YmIxZTQzZGU1YmYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvYmFiNWNkLTQ3NDYtNDkyMy1i
NGY5LTZiYjFlNDNkZTViZi8xL0NXOTZkN1Y2YlRMVGQ5Nm8teUJiYXp3cVhFSS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDXppQAwQBwo+UMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC7JTAN
BgkqhkiG9w0BAQsFAAOCAQEASvPW1yicNJ6saivujdr+R14E704be/RdNjMNq+j7
2/0CjLCQFPcE8Lm65Ubal8QeoI4mVTqsg9p9PIrQwg5nr9QmR3SmIXAxzho/RGbl
+KxHz7LoE9Rn/bntn3BmISKXbpiIxAPoVHYiJ443HlaHj75doQ8K8kRgaYFDvUVl
US3tUqweVrlgFxKDqA0Yx24an3XUVfJveq5tSWyZw5ccAD4d9s+KjnIlDPxlY/VR
JEZdB+YHlVHfD++J/ZjZVTf4nUYNv7KWFatmoPrNgW8qR1XMEfgVpJaTkRwy4Nf9
T74mVw6L393wI18BexSvE6FYNj9AyJuxdA2gvQZxTaZVbw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:32:55 2025 by rpki-client