Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
File: EOAhGyJF3P-NZjyywnmPoPA68Qg.cer (raw, json)
Hash identifier: cxyDAPzrMd8fyA05b7/TFuaBEJ0kfDJgZ85Dzvfltrs=
Subject key identifier: 10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CE09F89A7117BE0C3660EB04933D337
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/10E0211B2245DCFF8D663CB2C2798FA0F03AF108.mft
caRepository: rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 10:28:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.81.56.0/22
IP: 2a09:d640::/29
IP: 2a0e:5080::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e0:9f:89:a7:11:7b:e0:c3:66:0e:b0:49:33:d3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:1a:91:30:01:de:89:16:5b:47:65:5a:24:
18:ae:f1:61:dc:a6:82:e7:b5:24:6e:71:3e:97:96:
14:d7:73:3a:c7:ab:c4:16:09:a2:84:59:86:e1:b2:
4c:b9:fe:35:a7:c1:d3:2f:e3:46:55:78:0c:18:84:
c1:53:87:23:dc:e7:b8:77:0e:da:63:29:08:ba:af:
b4:c0:5e:a0:40:91:71:c6:ce:72:d7:01:db:df:89:
f1:e2:a9:7f:90:2b:4f:6b:95:1a:24:b4:48:75:36:
f3:da:4c:5b:b1:3b:93:6d:8f:fc:76:67:e7:a7:70:
4d:9b:a2:4d:de:ec:9f:a0:12:1a:eb:1f:71:a6:af:
9f:9f:58:fb:e5:ac:9c:2a:f3:63:29:95:8c:6d:85:
79:55:b7:a9:96:97:1c:1e:3c:fc:ab:15:b2:f6:2f:
71:c5:99:39:75:17:e3:38:f8:27:b1:3a:0c:56:70:
5f:24:c2:b6:51:2e:84:b4:7f:2e:4b:76:16:2b:06:
71:33:c9:fa:38:c9:8a:ba:79:1f:a6:0f:5c:9c:c0:
1a:89:b9:05:7e:9c:03:15:dd:96:d3:81:22:77:c2:
6b:c9:53:95:85:df:d8:fc:11:d9:a9:e9:45:b2:d9:
37:15:d3:91:24:d7:29:87:cc:b0:42:41:9f:4c:24:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/10E0211B2245DCFF8D663CB2C2798FA0F03AF108.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.56.0/22
IPv6:
2a09:d640::/29
2a0e:5080::/29
Signature Algorithm: sha256WithRSAEncryption
13:7c:d3:1d:fa:ba:e6:88:10:60:ad:e6:77:a9:1b:d8:c0:20:
bd:1b:6f:fb:a6:ca:b6:5b:bf:31:c7:b0:bb:5e:b0:80:47:65:
da:59:93:b5:3b:ee:d6:f3:01:31:dc:06:6d:8c:b8:9a:73:76:
d5:03:8e:19:18:b5:f6:14:aa:ce:87:85:45:66:46:cd:17:13:
e7:f6:b9:f6:8a:36:a9:82:c8:70:7c:77:5a:09:7d:bc:3f:32:
c7:56:57:39:b1:08:b9:c2:e5:df:40:0a:fa:fb:b9:51:09:1a:
a8:2f:89:e7:a4:ce:9a:42:ca:e5:39:24:0d:d7:e9:ed:9b:c3:
b6:e7:7c:aa:33:37:b2:51:81:49:18:a6:08:9b:28:41:44:b2:
17:95:ce:aa:35:ca:d8:4e:c9:8a:32:ac:6f:6d:61:c3:78:b7:
73:b3:c1:1f:90:6b:c5:a2:a5:98:bf:0e:fe:0e:b1:77:5f:43:
6d:3a:10:9f:a6:59:32:9c:9d:be:c2:23:a1:c4:57:56:d0:e8:
dd:05:7c:e2:31:f2:1f:5d:0e:8e:5b:1f:a7:fd:32:13:f8:fb:
fd:b2:a4:ab:07:83:ef:9e:b8:7a:37:27:50:eb:e7:34:be:08:
85:04:91:73:54:b3:dd:0c:f7:5b:96:51:58:3a:7c:60:7e:00:
40:86:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:38:49 2025 by rpki-client