Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C_CzYmtzsR7KFXrpFTo4tNQzzYs.cer
File: C_CzYmtzsR7KFXrpFTo4tNQzzYs.cer (raw, json)
Hash identifier: aRsexaoou1bokHEjT4JuYNAY2YOyONN//s6zYU2EhO8=
Subject key identifier: 0B:F0:B3:62:6B:73:B1:1E:CA:15:7A:E9:15:3A:38:B4:D4:33:CD:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3539260DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/C_CzYmtzsR7KFXrpFTo4tNQzzYs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:06:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 62038
IP: 185.50.32.0/22
IP: 2a04:bd40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701481771227 (0xa3539260db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bf0b3626b73b11eca157ae9153a38b4d433cd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:41:f9:f8:69:3e:0e:63:3f:16:12:3c:7a:
66:90:07:1d:4b:67:37:14:ad:3b:2d:74:05:58:06:
ad:d6:ed:89:69:72:fc:54:a8:cd:7e:eb:bc:d8:ce:
e4:2e:bc:e4:6c:1d:09:e6:3c:eb:c5:72:b8:06:0b:
42:4e:9d:92:e3:9d:26:c1:c9:bc:fa:b5:75:e4:33:
6b:ab:53:fa:83:bc:6f:aa:36:27:27:06:e2:04:8b:
b0:8f:95:9f:a7:dc:ed:4c:88:73:9b:a7:0b:87:d0:
e9:7d:18:28:eb:8f:1c:54:70:75:39:e6:39:71:ad:
94:7b:8f:df:cd:eb:e0:0c:94:bf:ee:3b:78:f4:37:
39:f5:12:03:39:63:8f:ac:e3:57:fd:e4:c5:e6:d6:
2f:07:04:64:d4:92:f2:49:1e:76:0c:5f:d5:f4:45:
0d:eb:97:c9:e9:c4:75:ce:c7:19:68:ec:0b:6e:19:
0c:21:5e:95:48:4d:ce:38:5e:26:ce:25:86:a0:87:
dc:e3:c8:18:67:5f:05:18:98:5d:c9:2a:36:85:0d:
c7:e8:9b:b2:0c:1f:af:b9:59:29:bb:21:09:9b:e5:
7e:60:6b:8a:c8:1f:dd:a9:8d:87:b8:b8:95:60:45:
bb:8a:1e:4d:93:a7:b1:fd:94:54:17:4b:da:9f:a4:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F0:B3:62:6B:73:B1:1E:CA:15:7A:E9:15:3A:38:B4:D4:33:CD:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/C_CzYmtzsR7KFXrpFTo4tNQzzYs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.32.0/22
IPv6:
2a04:bd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62038
Signature Algorithm: sha256WithRSAEncryption
50:81:02:80:31:96:dc:4f:9b:25:0d:0f:cf:b0:b6:9b:4a:39:
8d:9f:20:ef:70:7c:a4:39:e0:34:89:fb:4f:90:77:11:79:98:
1e:be:bf:ae:c9:16:56:d9:d5:25:29:52:76:97:3d:bf:5a:bb:
b2:15:74:43:80:2c:91:6f:1e:e3:09:12:2d:7f:46:f3:ca:04:
56:a8:7f:ad:55:04:f6:83:78:2c:5d:47:59:48:04:09:e8:4c:
51:b4:97:f6:ed:1f:dc:3a:10:e4:83:ef:1a:8a:6d:15:a8:a4:
95:30:55:c6:aa:e8:21:33:2c:e9:c3:ac:a4:be:d0:5e:23:c7:
e0:41:09:3f:1c:7f:ce:74:2e:55:d8:84:a0:0f:29:45:0b:9f:
06:2b:06:72:ab:29:b2:ac:e3:e5:05:c1:40:a1:2d:2b:00:8d:
d0:23:25:dd:3c:a0:96:af:fa:79:04:f8:8b:ce:26:af:79:c4:
0c:10:5c:40:6a:5f:3b:4b:97:0f:8e:27:81:de:53:f3:7f:24:
be:77:c6:6e:59:09:90:71:f4:ca:94:59:5a:23:8b:c0:37:9c:
fb:cb:8d:de:2c:33:64:86:b7:e1:53:c6:01:0a:8d:f9:8f:17:
ad:7b:ed:35:5a:35:9a:da:92:0e:ef:eb:62:bb:aa:65:de:9e:
f1:97:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:51 2025 by rpki-client