Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DL7Uku9UvZNALyMRfpFHIbaV8xI.cer
File: DL7Uku9UvZNALyMRfpFHIbaV8xI.cer (raw, json)
Hash identifier: q1jyF67YqcuF4rnxuvwtRghHmAmLNt1yexr1Zz6cvTQ=
Subject key identifier: 0C:BE:D4:92:EF:54:BD:93:40:2F:23:11:7E:91:47:21:B6:95:F3:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B032A8947D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/e75bad-6519-4e72-8eae-e6dc452f0194/1/DL7Uku9UvZNALyMRfpFHIbaV8xI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/e75bad-6519-4e72-8eae-e6dc452f0194/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 17 Apr 2022 12:48:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.59.46.0/24
IP: 194.59.59.0/24
IP: 194.59.142.0/24
IP: 194.59.155.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756764152957 (0xb032a8947d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 12:48:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cbed492ef54bd93402f23117e914721b695f312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:d8:fb:bd:ae:2a:dd:a2:a5:f4:e6:7f:b5:
be:18:cd:f3:73:6f:a3:ee:cf:a4:f3:3f:a5:52:db:
7c:fe:35:f6:e5:d0:65:4e:bb:76:57:86:fb:de:49:
9f:6b:1a:21:e3:2a:0f:ab:9b:68:ed:ff:08:25:cb:
03:04:7b:51:8a:ec:9b:b3:42:bf:2d:cd:f1:db:33:
a6:99:19:ca:fb:b5:a9:b8:ad:eb:ef:2c:a7:ed:a4:
e7:1d:d8:02:11:44:e4:39:30:38:89:86:33:52:4e:
81:2b:b5:99:1b:b4:62:4a:41:5e:8b:59:99:2b:83:
ce:fd:3f:77:b9:01:2a:e2:87:56:cc:93:0e:11:a1:
ca:05:35:e5:3e:0b:39:0a:8e:a6:07:92:e0:fe:83:
f7:83:05:55:56:41:be:d8:83:e9:e5:50:39:a6:7f:
ee:c6:32:ab:20:86:26:c0:16:bc:17:b1:36:32:67:
1b:d7:a0:05:8f:29:2a:bf:76:d6:d1:71:b5:4d:df:
03:17:1e:94:7a:dd:9a:9e:3b:13:42:77:3b:56:13:
31:31:b5:56:42:9c:15:f4:50:e1:2c:8e:d7:b4:64:
f6:b8:3f:0e:b0:37:1d:cf:b1:74:13:29:20:ba:ff:
a9:53:d8:01:30:ba:13:b5:52:89:67:31:e6:6a:a1:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:D4:92:EF:54:BD:93:40:2F:23:11:7E:91:47:21:B6:95:F3:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e75bad-6519-4e72-8eae-e6dc452f0194/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e75bad-6519-4e72-8eae-e6dc452f0194/1/DL7Uku9UvZNALyMRfpFHIbaV8xI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.46.0/24
194.59.59.0/24
194.59.142.0/24
194.59.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:80:c5:c8:48:5a:9c:d0:df:88:b3:34:f9:76:31:c6:ba:f8:
34:bc:60:a4:a0:c2:5f:0a:03:4c:40:94:05:81:22:b0:3c:af:
ba:a2:b9:98:ef:10:09:ca:6c:46:22:c1:1e:bb:f0:af:d6:27:
57:c3:ae:77:25:d4:18:65:6f:2d:2f:76:5b:8b:00:e6:a7:48:
7c:78:ac:7b:0f:a9:96:75:73:7f:8c:83:80:78:19:51:4b:9c:
61:7d:89:e8:e1:ef:82:b5:ed:dc:02:d5:1b:a1:4d:10:46:e3:
44:92:f1:73:d1:1c:62:5b:c7:e3:ce:7f:40:c6:f8:a9:9d:9f:
a2:9d:49:63:24:11:78:44:6f:cf:b9:12:ce:b9:c1:39:72:81:
d3:f1:b5:90:88:15:e9:e9:cd:a7:b7:f9:71:91:8c:56:69:25:
1d:2f:2f:6c:31:36:28:b1:21:97:de:5e:43:28:2e:42:db:2e:
5e:50:38:48:bc:56:d7:f6:c5:e4:5f:ba:03:58:8e:8d:cc:62:
dd:cd:98:79:38:62:e2:7a:39:41:e4:b7:20:3a:58:66:2c:c7:
e8:9b:de:ff:29:4f:39:28:1f:2c:ba:66:d7:79:d4:51:e0:c4:
3e:0f:58:cb:e5:37:91:fb:79:d5:a6:f0:db:3f:b3:4f:02:3a:
ed:96:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:17 2025 by rpki-client