Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cl0ds8h0vigpimiBLKoksbQ-A8k.cer
File: Cl0ds8h0vigpimiBLKoksbQ-A8k.cer (raw, json)
Hash identifier: GUJX9Z3cvkRgvd0RYC4LYC9bLUWOzPYSLRnpK5nEVCE=
Subject key identifier: 0A:5D:1D:B3:C8:74:BE:28:29:8A:68:81:2C:AA:24:B1:B4:3E:03:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F47B353E6326B849A6A59383C9D7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.205.57.0/24
IP: 2a11:9880::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:47:b3:53:e6:32:6b:84:9a:6a:59:38:3c:9d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a5d1db3c874be28298a68812caa24b1b43e03c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:4e:54:d2:ce:3c:6a:f3:62:55:b1:b6:81:
7b:66:d7:c3:28:37:25:46:9d:ba:61:5c:9b:d1:0f:
80:18:3f:60:fa:51:23:3f:41:5d:86:8e:a2:6d:8c:
22:40:26:f7:ea:6e:f0:e7:24:6d:a5:ba:25:16:0d:
9f:96:f7:83:7f:da:19:c1:69:d2:c0:06:93:de:81:
67:04:55:ed:70:d0:39:8b:b8:8b:19:87:f9:53:e3:
f7:60:fa:c4:4e:86:f3:e3:06:a9:b5:27:a7:91:10:
96:2c:9f:76:2a:0e:71:fc:02:47:de:2c:85:b1:d2:
ce:4c:fb:c0:13:48:49:16:2c:d8:db:e0:c4:20:01:
8d:8a:36:6b:2c:ef:ba:0e:d1:40:25:19:8e:e5:0f:
8d:ee:f2:7c:bb:e2:64:2a:f5:de:d6:63:24:5b:f6:
34:e5:3f:82:d7:a1:4c:c5:e5:76:dc:d8:12:3c:59:
eb:75:30:60:c3:d7:60:1a:9e:06:c4:e1:62:45:54:
4c:b3:8c:d4:9e:69:3e:79:d5:ae:5a:73:44:0f:0c:
54:59:9e:0d:dc:9d:a7:32:61:dc:13:18:b9:9b:12:
ac:df:64:f6:55:b3:be:96:1a:b0:4b:ef:84:7b:d2:
0e:3e:7f:ae:a3:ef:57:84:1e:fb:77:c8:ca:42:ee:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5D:1D:B3:C8:74:BE:28:29:8A:68:81:2C:AA:24:B1:B4:3E:03:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.57.0/24
IPv6:
2a11:9880::/29
Signature Algorithm: sha256WithRSAEncryption
a2:79:9d:08:98:2a:5f:5b:e0:d4:3f:94:3e:fb:9a:9b:cf:6b:
3e:99:77:45:65:a5:1a:10:96:03:eb:d1:0d:d1:88:07:ba:9e:
cc:f0:9a:3b:a5:92:c4:93:00:23:fa:6a:d7:a9:06:69:d6:c2:
1c:2b:46:10:99:77:a6:d6:89:f9:76:32:cf:09:a6:92:75:20:
d6:fb:f0:a2:15:31:92:18:05:c0:44:8c:5e:25:bd:0e:35:4f:
eb:af:c1:4f:1e:aa:95:26:f5:7d:f0:e6:d4:c2:31:ed:df:9a:
78:91:bf:73:83:8f:81:6f:34:b6:79:f0:3a:ba:0d:05:1a:e8:
54:31:dd:ad:98:1f:84:26:ed:c9:1b:f9:c7:d0:65:3a:39:27:
8b:05:80:52:87:e1:4e:ec:20:f7:9d:31:57:0f:5b:dc:8d:85:
72:a7:39:a8:70:56:37:e8:7f:5c:44:37:0c:dc:89:22:1e:36:
b7:2b:42:95:ae:1f:44:64:92:f5:3c:84:ad:f2:6f:47:55:5b:
24:b1:dc:7a:2c:bd:b5:f0:18:5b:fb:6c:9b:05:ee:f2:43:91:
14:de:78:18:f8:81:18:81:18:55:bb:f6:4e:2b:5e:b9:03:eb:
25:0f:1c:0b:40:5d:1f:5b:7c:66:31:08:0e:4c:97:67:fe:ed:
9e:24:a8:9c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVsP0ezU+Yya4Saalk4PJ1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDczMjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTVkMWRiM2M4NzRiZTI4Mjk4YTY4ODEyY2FhMjRiMWI0M2UwM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbxOVNLOPGrzYlWxtoF7ZtfDKDcl
Rp26YVyb0Q+AGD9g+lEjP0Fdho6ibYwiQCb36m7w5yRtpbolFg2flveDf9oZwWnS
wAaT3oFnBFXtcNA5i7iLGYf5U+P3YPrETobz4waptSenkRCWLJ92Kg5x/AJH3iyF
sdLOTPvAE0hJFizY2+DEIAGNijZrLO+6DtFAJRmO5Q+N7vJ8u+JkKvXe1mMkW/Y0
5T+C16FMxeV23NgSPFnrdTBgw9dgGp4GxOFiRVRMs4zUnmk+edWuWnNEDwxUWZ4N
3J2nMmHcExi5mxKs32T2VbO+lhqwS++Ee9IOPn+uo+9XhB77d8jKQu7/nQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFApdHbPIdL4oKYpogSyqJLG0PgPJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzM0MzAz
Ny00NTUwLTQ2OWQtODJmZC00ZjU1ODg5NDdhNGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvMzQzMDM3
LTQ1NTAtNDY5ZC04MmZkLTRmNTU4ODk0N2E0YS8xL0NsMGRzOGgwdmlncGltaUJM
S29rc2JRLUE4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAbc05MA0EAgACMAcDBQMqEZiAMA0GCSqGSIb3
DQEBCwUAA4IBAQCieZ0ImCpfW+DUP5Q++5qbz2s+mXdFZaUaEJYD69EN0YgHup7M
8Jo7pZLEkwAj+mrXqQZp1sIcK0YQmXem1on5djLPCaaSdSDW+/CiFTGSGAXARIxe
Jb0ONU/rr8FPHqqVJvV98ObUwjHt35p4kb9zg4+BbzS2efA6ug0FGuhUMd2tmB+E
Ju3JG/nH0GU6OSeLBYBSh+FO7CD3nTFXD1vcjYVypzmocFY36H9cRDcM3IkiHja3
K0KVrh9EZJL1PISt8m9HVVsksdx6LL218Bhb+2ybBe7yQ5EU3ngY+IEYgRhVu/ZO
K165A+slDxwLQF0fW3xmMQgOTJdn/u2eJKic
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:38 2025 by rpki-client