Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DC5BE1H5Qv1arxAMWDGWxrgjDZM.cer
File: DC5BE1H5Qv1arxAMWDGWxrgjDZM.cer (raw, json)
Hash identifier: av7S7bjUU595NS4mk1CSqFiwBbjDKYHYtptckwzuQ1U=
Subject key identifier: 0C:2E:41:13:51:F9:42:FD:5A:AF:10:0C:58:31:96:C6:B8:23:0D:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01823DBE7FC63C647764CCE9EC027B23A26E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/1997ac-d3c1-4721-b7a2-e6d882bf99e5/1/DC5BE1H5Qv1arxAMWDGWxrgjDZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/1997ac-d3c1-4721-b7a2-e6d882bf99e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Jul 2022 03:41:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 188.119.68.0/22
IP: 2a09:df00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3d:be:7f:c6:3c:64:77:64:cc:e9:ec:02:7b:23:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 27 03:41:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c2e411351f942fd5aaf100c583196c6b8230d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:f1:78:23:7d:c2:21:85:ea:55:22:6d:11:
d6:31:57:02:2a:30:0d:23:29:06:b9:37:6a:6a:40:
de:0c:1a:a3:1a:30:84:27:90:3b:47:21:d1:b5:6c:
6d:a8:7c:45:ca:d0:17:8a:bf:ce:1c:d6:2b:99:c0:
db:77:3e:83:15:03:de:5e:a1:08:09:f3:86:73:3b:
74:cd:3e:11:10:59:5c:66:ab:d6:e3:2f:be:d0:e6:
08:16:e1:9a:08:3d:7a:d0:55:82:fd:d2:06:94:b8:
d0:a0:cd:76:1d:62:76:8d:15:40:ae:ec:8a:61:ca:
fd:71:ba:c8:50:28:20:88:5b:fc:2b:7f:54:3e:af:
42:ba:e5:4c:04:eb:df:a8:d9:4f:e1:63:8e:37:dc:
a8:ab:4c:58:f9:1f:49:a0:20:24:c7:31:d1:74:91:
e5:ba:6f:d4:73:d4:38:06:96:a0:61:fa:0e:d0:6c:
27:ef:d5:35:e8:88:c9:f9:4d:53:e9:83:0d:fd:be:
5c:ae:87:30:f3:bc:ae:a4:15:a1:01:8b:e6:b6:68:
97:5d:9b:f0:bd:d6:39:f9:ab:0e:86:85:c7:7a:9d:
62:f5:c2:43:99:cf:69:91:f6:02:d3:60:ab:9f:23:
76:4c:e4:d2:cc:fc:e0:ed:7c:9d:94:6e:28:29:bb:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:41:13:51:F9:42:FD:5A:AF:10:0C:58:31:96:C6:B8:23:0D:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1997ac-d3c1-4721-b7a2-e6d882bf99e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1997ac-d3c1-4721-b7a2-e6d882bf99e5/1/DC5BE1H5Qv1arxAMWDGWxrgjDZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.68.0/22
IPv6:
2a09:df00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:c3:35:24:ba:72:ab:a5:a0:b8:3b:85:ef:d5:2d:e6:bf:a7:
3d:7a:29:55:c0:07:bb:af:4e:64:74:07:28:47:b0:0c:b8:d9:
2e:e3:9c:35:69:12:9a:73:1a:a1:a0:11:f8:94:47:7f:12:1d:
06:b2:44:56:42:0c:57:6e:d2:ac:d9:cd:39:aa:e6:98:c0:83:
d6:8e:c8:e4:8d:2f:75:b2:31:ce:aa:ba:a6:0f:3e:d4:33:4d:
69:ee:3a:eb:78:58:f5:cc:54:dd:ad:60:d8:f3:1f:0f:03:bf:
c0:38:49:f3:fc:ae:1a:5f:3f:99:23:b6:54:a6:be:51:3a:71:
90:9a:dd:93:ca:94:a3:41:f9:89:b6:16:7a:50:7c:3a:d6:5f:
82:f5:36:f7:ca:64:bc:13:89:c0:c8:6a:51:2e:67:5b:87:4e:
51:40:c2:1c:03:f0:3c:7c:a4:2f:3e:69:89:3b:75:5a:33:e7:
2b:09:60:14:a6:da:07:7d:f3:b7:c1:a6:a0:8f:56:a3:60:13:
28:df:b7:33:a6:de:d5:c3:ab:bc:7b:f4:63:b9:3b:73:2b:69:
7f:3f:85:38:f0:d5:4d:9b:e5:58:7a:c2:ed:00:17:81:e0:53:
29:cc:a5:c6:9c:d3:e3:5c:f3:de:a6:81:0b:c6:0f:90:64:ab:
ed:a3:b1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:38 2025 by rpki-client