Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EDu0KhJtb9E9anNrap5BtPTDHmg.cer
File: EDu0KhJtb9E9anNrap5BtPTDHmg.cer (raw, json)
Hash identifier: 1Y6mPSMcvm+R7+LcMUkv4BxhrVCqggjwuhmpJPiI8mU=
Subject key identifier: 10:3B:B4:2A:12:6D:6F:D1:3D:6A:73:6B:6A:9E:41:B4:F4:C3:1E:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B3062567CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/EDu0KhJtb9E9anNrap5BtPTDHmg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Jun 2022 09:49:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 51808
IP: 91.220.121.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768902260683 (0xb3062567cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 09:49:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=103bb42a126d6fd13d6a736b6a9e41b4f4c31e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:79:37:a6:b8:93:27:7e:21:fa:02:06:85:
ed:27:b3:d2:2b:28:cb:ae:cf:aa:b9:9e:22:b4:ae:
31:3d:ee:2a:fc:34:bd:b1:dc:98:f2:a0:2b:66:5a:
e9:0e:54:9e:14:2b:ce:ba:4e:ea:02:6b:d9:18:cd:
b4:5e:34:89:fb:31:ed:d6:77:c7:64:ef:fb:b6:d8:
0f:35:02:ec:03:3b:61:31:d8:1b:34:a2:ef:ee:2c:
f9:22:68:45:e3:99:d4:6d:d5:9d:1a:97:84:f5:6a:
ba:5f:12:72:ce:1e:b2:7f:14:df:46:5d:c7:8b:58:
f8:88:0b:e9:f8:7f:bc:2a:09:77:e2:26:5b:9e:1c:
40:75:19:11:6b:18:b3:dd:a4:26:95:21:f6:94:84:
70:45:f6:40:10:11:5a:08:a6:5d:70:c3:b2:98:85:
2e:33:cd:4b:7c:d3:3c:f7:d0:bd:ad:4a:c7:e8:7e:
7a:5a:80:ce:ac:77:54:24:3f:5f:ae:f1:78:a7:d9:
ce:fb:ae:9b:b9:d6:36:fe:8a:e2:cd:fc:6e:54:f1:
16:07:8c:e0:f0:f8:e2:e7:41:d7:d2:dd:ad:28:13:
be:99:e0:ce:55:3c:24:a1:8a:fa:6d:1a:50:f1:1d:
28:fc:2a:28:49:9c:be:fc:04:67:61:25:dd:b8:f1:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:B4:2A:12:6D:6F:D1:3D:6A:73:6B:6A:9E:41:B4:F4:C3:1E:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2636fd-6241-4aae-b09e-e1448294552a/1/EDu0KhJtb9E9anNrap5BtPTDHmg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.121.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51808
Signature Algorithm: sha256WithRSAEncryption
7d:3b:23:25:45:ef:83:1f:ce:a6:d8:99:40:71:26:38:be:8c:
e7:76:bc:4a:ac:03:c9:c0:0c:90:ae:00:b6:09:22:6f:57:c0:
08:be:87:36:c7:b1:c7:5b:63:21:a2:c1:8a:24:c4:39:7a:18:
4d:19:44:f1:3b:b0:a2:e7:b8:26:b8:23:55:0b:1a:e6:cd:cf:
ca:5c:41:a5:d4:43:a8:09:e5:c3:a0:b2:75:b6:f6:f3:6c:89:
17:ae:5f:53:0b:77:e5:8a:86:a6:70:7a:ae:e7:1b:7d:32:cc:
c8:c7:c2:79:72:f0:b4:c6:f1:b2:6a:ca:90:1d:87:01:42:74:
74:dd:44:09:fc:ea:bd:1c:a7:88:4d:41:70:2a:23:39:b2:a1:
ef:6a:24:8e:5e:6d:a0:c4:d2:9a:34:f1:70:bd:b7:6e:25:1e:
93:c4:28:11:77:ad:4e:35:13:cb:98:c5:44:a0:1b:9b:a2:e2:
58:ed:bd:e5:fe:03:10:8b:f3:19:1b:98:ec:bb:3f:4b:c3:01:
5c:9d:e8:88:1b:f6:4b:93:30:67:06:87:b4:e2:88:fb:3e:0e:
1f:40:50:d0:d9:5d:b6:10:f9:26:c8:95:b7:50:4f:af:26:e5:
6b:7c:58:07:d2:6c:26:0d:bc:49:57:a3:39:2b:2a:33:f5:41:
84:7a:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:37:21 2025 by rpki-client