Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EPKd2EeLV95e6tbnnfleZABhku0.cer
File: EPKd2EeLV95e6tbnnfleZABhku0.cer (raw, json)
Hash identifier: cVBfpY0a3d2/FFQX+wCKw+mmGpPa7R0bw1eQ1VLSaRk=
Subject key identifier: 10:F2:9D:D8:47:8B:57:DE:5E:EA:D6:E7:9D:F9:5E:64:00:61:92:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6850CA1E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/98c304-1fce-4f15-a41a-51e8f2dfa0cc/1/EPKd2EeLV95e6tbnnfleZABhku0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/98c304-1fce-4f15-a41a-51e8f2dfa0cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:03:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.137.52.0/22
IP: 2a0e:a340::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715196768740 (0xa6850ca1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10f29dd8478b57de5eead6e79df95e64006192ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:66:b3:56:e4:dc:bd:39:fa:07:42:74:cc:
f3:49:3a:77:c8:81:63:13:f7:bf:a9:d7:4b:02:fa:
20:4e:8e:2d:d4:0c:b0:f9:5a:30:c0:96:1a:ec:82:
cd:b6:6b:95:f8:1f:b6:ca:0f:dc:e4:82:d6:a7:20:
01:4b:f8:b8:db:6f:ce:bd:6e:c9:3d:18:e2:e1:a4:
81:fc:9b:81:51:9b:d8:74:64:99:ae:e5:65:df:ac:
0a:70:86:e3:90:0d:06:ca:d3:2d:51:1e:76:98:18:
ab:43:69:08:80:e6:99:94:db:6a:5e:3f:43:a7:26:
a0:45:60:41:9c:e5:64:91:ab:17:d2:76:b2:8f:ab:
44:9e:64:2a:02:ae:2e:da:7a:9c:9a:2f:c9:38:d3:
d7:3d:75:5d:45:ee:9a:b4:6d:64:dd:3d:ce:32:30:
b7:f7:71:ab:66:02:e4:0b:06:70:bb:f9:c3:6c:c7:
03:9c:fe:52:57:3b:5b:07:d8:db:7d:e7:0e:85:9e:
0e:7c:55:98:48:25:d5:de:0e:52:09:88:be:51:ad:
b5:0f:d9:46:3e:11:3e:1d:0e:1b:36:ec:eb:e4:9e:
17:d6:78:29:17:e7:8f:8e:b0:2a:16:4b:5a:6f:97:
08:c2:ce:90:da:13:49:9f:5b:cd:95:82:8c:3b:fa:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:9D:D8:47:8B:57:DE:5E:EA:D6:E7:9D:F9:5E:64:00:61:92:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/98c304-1fce-4f15-a41a-51e8f2dfa0cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/98c304-1fce-4f15-a41a-51e8f2dfa0cc/1/EPKd2EeLV95e6tbnnfleZABhku0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.52.0/22
IPv6:
2a0e:a340::/29
Signature Algorithm: sha256WithRSAEncryption
1c:31:55:07:af:6a:e2:d6:9a:4a:47:29:80:19:d6:67:5e:7a:
3b:30:a2:77:8b:b1:5b:8a:84:cd:d3:4f:fc:04:6e:37:fe:7e:
00:94:da:27:d1:fb:d8:6e:11:24:e4:f2:0c:38:86:61:d4:d1:
84:1e:7c:e5:2d:f0:5d:8a:39:16:9b:39:bf:08:69:59:29:93:
36:3f:78:4f:60:61:fa:b8:92:fb:f8:ba:8d:be:bb:11:62:55:
10:23:e0:e2:c5:bc:e6:1d:7b:bc:0f:e2:63:89:1f:42:f5:26:
dd:9a:0a:ab:52:74:db:c8:4f:71:4a:a9:17:d2:17:a1:2d:7f:
9a:0e:51:d6:c0:02:63:95:c7:ee:24:69:4b:3d:28:04:17:3c:
88:39:85:da:bb:31:44:5c:51:4a:54:5c:80:64:2f:34:b6:ae:
27:0e:85:fd:0b:b7:e2:98:d2:d6:0b:19:59:30:71:9a:55:a8:
3f:33:aa:dc:43:ef:46:5c:04:39:17:6f:c8:6a:a3:10:c2:14:
6e:75:a7:2a:47:d3:79:bf:35:4b:e4:e4:ec:a3:a2:08:44:c7:
a4:48:88:5c:0d:02:7e:11:2b:4c:7d:cf:38:ef:c2:aa:ed:dc:
0d:01:8c:96:49:41:55:07:f5:37:87:81:0a:8d:df:27:0b:27:
df:87:2f:45
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAKaFDKHkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTIwMzIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMGYyOWRkODQ3
OGI1N2RlNWVlYWQ2ZTc5ZGY5NWU2NDAwNjE5MmVkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAr7Zms1bk3L05+gdCdMzzSTp3yIFjE/e/qddLAvogTo4t
1Ayw+VowwJYa7ILNtmuV+B+2yg/c5ILWpyABS/i422/OvW7JPRji4aSB/JuBUZvY
dGSZruVl36wKcIbjkA0GytMtUR52mBirQ2kIgOaZlNtqXj9DpyagRWBBnOVkkasX
0nayj6tEnmQqAq4u2nqcmi/JONPXPXVdRe6atG1k3T3OMjC393GrZgLkCwZwu/nD
bMcDnP5SVztbB9jbfecOhZ4OfFWYSCXV3g5SCYi+Ua21D9lGPhE+HQ4bNuzr5J4X
1ngpF+ePjrAqFktab5cIws6Q2hNJn1vNlYKMO/oA0QIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFBDyndhHi1feXurW5535XmQAYZLtMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzk4YzMwNC0xZmNlLTRmMTUt
YTQxYS01MWU4ZjJkZmEwY2MvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvOThjMzA0LTFmY2UtNGYxNS1h
NDFhLTUxZThmMmRmYTBjYy8xL0VQS2QyRWVMVjk1ZTZ0Ym5uZmxlWkFCaGt1MC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLYk0MA0EAgACMAcDBQMqDqNAMA0GCSqGSIb3DQEBCwUAA4IBAQAc
MVUHr2ri1ppKRymAGdZnXno7MKJ3i7FbioTN00/8BG43/n4AlNon0fvYbhEk5PIM
OIZh1NGEHnzlLfBdijkWmzm/CGlZKZM2P3hPYGH6uJL7+LqNvrsRYlUQI+Dixbzm
HXu8D+JjiR9C9SbdmgqrUnTbyE9xSqkX0hehLX+aDlHWwAJjlcfuJGlLPSgEFzyI
OYXauzFEXFFKVFyAZC80tq4nDoX9C7fimNLWCxlZMHGaVag/M6rcQ+9GXAQ5F2/I
aqMQwhRudacqR9N5vzVL5OTso6IIRMekSIhcDQJ+EStMfc8478Kq7dwNAYyWSUFV
B/U3h4EKjd8nCyffhy9F
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:20:34 2025 by rpki-client