Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.cer
File: CnCRE0Rw8E7eK8-xrw9YrCtfEvM.cer (raw, json)
Hash identifier: TJNE5hSY0NRpxS+N801xrUKtNNOKTOf6d+gK6KvZ6mM=
Subject key identifier: 0A:70:91:13:44:70:F0:4E:DE:2B:CF:B1:AF:0F:58:AC:2B:5F:12:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FA7B3BD8EBCB2503FEE8D747EB227E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:35:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212742
IP: 62.106.94.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:7b:3b:d8:eb:cb:25:03:fe:e8:d7:47:eb:22:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a7091134470f04ede2bcfb1af0f58ac2b5f12f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:d6:43:de:64:02:f3:e8:de:e8:2d:11:1a:
20:69:6c:af:71:55:05:53:d6:18:49:e8:a0:f7:32:
1d:90:1c:a1:86:c7:72:a9:c3:c5:6c:ef:55:05:59:
96:3c:1b:1a:e9:ff:30:63:21:65:09:81:4a:4f:ce:
09:95:54:2d:41:b2:98:54:bf:f0:e9:71:1b:80:b8:
3d:a9:b1:2a:05:90:e0:f9:f7:88:86:7b:b7:b1:ba:
99:bc:06:b5:aa:e2:c2:3d:ad:0f:2c:29:7f:56:c3:
2c:de:d4:b8:af:81:68:f5:91:ef:d1:68:fa:7f:41:
62:96:5f:e8:a2:d2:b0:76:22:65:91:67:b9:24:83:
05:5e:86:e0:06:12:5f:52:92:2f:ed:22:93:ef:7c:
17:84:29:2f:83:cd:5c:07:7a:13:fc:3f:f6:4c:22:
75:30:50:73:61:c9:e6:de:36:c9:21:d7:53:a9:e0:
fc:f1:9b:a8:9e:75:21:17:ff:18:74:28:fe:c5:9c:
6e:00:76:d9:39:7b:db:f1:22:d8:49:69:ab:af:ac:
d4:de:8d:a9:b1:f1:47:ee:dc:40:63:0f:e6:96:22:
68:18:21:80:fd:21:00:c4:e5:e4:07:7b:fc:d2:ea:
ff:c9:8b:20:cd:d6:7c:9b:8d:80:5f:ab:65:c2:67:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:70:91:13:44:70:F0:4E:DE:2B:CF:B1:AF:0F:58:AC:2B:5F:12:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.94.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212742
Signature Algorithm: sha256WithRSAEncryption
ac:fb:45:ad:f0:0d:b9:01:23:f6:c4:6a:2c:7a:50:b0:ee:23:
8a:fd:b9:b0:ce:b8:4d:f0:29:69:fe:88:e9:b0:a0:b6:0d:ff:
6b:9c:82:84:21:0a:5f:9a:92:a7:81:c7:d0:64:38:d5:06:c1:
69:d8:8e:c6:53:44:e0:ef:7a:6a:7f:ca:83:d7:a0:d4:56:2d:
5b:22:d0:ad:5b:19:d3:b5:12:be:11:4f:36:0d:6b:d5:10:e2:
0b:23:3b:60:91:5f:b6:87:2b:f0:25:ed:73:36:8b:a6:66:8c:
db:00:32:46:a0:71:92:0f:59:86:c4:ba:7f:d0:62:99:5b:ec:
a0:ee:98:0e:25:9b:4d:09:09:bd:17:5d:69:83:9e:37:7f:d8:
f0:b7:71:18:d9:3b:82:ea:ae:ca:b2:23:2a:b9:9b:09:53:92:
77:92:b6:9b:15:42:05:fd:61:c4:bb:86:41:ce:11:6f:47:83:
da:d8:2c:8f:13:ff:45:4e:67:08:ef:ad:ed:c1:fc:2e:af:7a:
49:de:e7:99:f7:02:a4:6b:32:ee:b1:86:a5:11:98:da:48:56:
ad:75:30:60:06:63:aa:f9:ba:16:21:21:7a:d2:37:02:b4:60:
00:95:8c:49:d1:90:20:cd:8d:c5:79:43:93:07:b3:fb:71:41:
c0:b2:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:28:16 2025 by rpki-client