
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
File: EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer (raw, json)
Hash identifier: OAoL3rXsXYaau+wJFTj9aAwXaCUaDpB08ojmtiUdFps=
Subject key identifier: 11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B195CDBB6824C123C40A42DF0954F24EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Oct 2023 11:33:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 48130
AS: 216190
IP: 185.142.52.0/22
IP: 193.177.0.0/24
IP: 193.177.162.0/24
IP: 193.177.182.0/24
IP: 193.178.0.0/24
IP: 2a07:28c0::/29
IP: 2a0f:9240::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:5c:db:b6:82:4c:12:3c:40:a4:2d:f0:95:4f:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 10 11:33:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11466326406436e31478b7bca2dda16c96d5a964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:cb:df:67:aa:9d:d1:21:ce:2c:db:0b:c2:
52:72:ea:aa:65:8f:3f:a5:c0:00:5c:26:f1:d8:90:
1c:07:e1:27:fd:4b:d6:59:5b:05:41:b1:86:a1:f7:
b5:28:bc:43:cf:39:eb:20:fc:69:33:86:e5:53:88:
d8:d0:35:d8:01:52:46:03:c9:96:22:30:38:15:a2:
3c:da:92:c2:5b:58:16:8d:74:86:88:5b:fa:53:8d:
97:29:57:b1:66:ab:92:90:0e:81:4b:34:89:12:38:
49:db:61:97:6a:32:16:e4:6b:7c:ae:57:a1:e3:8d:
8e:f2:29:b3:04:f5:30:d5:e5:d5:8b:9a:0b:83:41:
81:9b:36:06:59:2a:7e:55:c4:d4:1c:02:34:5f:56:
9e:32:d9:68:04:b7:d7:55:d5:88:ce:ec:08:62:ef:
be:42:7c:bd:3a:d6:6a:52:a4:0f:39:77:fe:4d:c4:
28:81:74:fc:87:c6:04:57:5f:d9:86:09:5c:b2:fe:
4e:f6:da:1b:88:8c:93:ee:b1:f2:b3:8a:86:1b:d2:
e8:4b:cb:b5:65:32:30:b1:2f:12:ca:06:19:08:fc:
8f:bd:32:f4:47:0d:3e:34:3e:87:53:8d:a6:6d:83:
f4:a9:c0:7e:9d:7c:11:e2:f2:92:1b:3c:bc:a4:62:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.52.0/22
193.177.0.0/24
193.177.162.0/24
193.177.182.0/24
193.178.0.0/24
IPv6:
2a07:28c0::/29
2a0f:9240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48130
216190
Signature Algorithm: sha256WithRSAEncryption
49:6d:d8:69:be:31:2e:21:9e:f4:74:74:b3:eb:fa:1f:1c:b6:
ba:64:aa:bf:38:29:58:03:fb:d3:02:9f:12:60:8f:ec:92:bb:
2a:ed:26:b0:a9:55:12:73:08:63:43:55:5b:80:57:85:d5:54:
a1:ba:3f:a0:fd:c0:2c:7b:cb:74:13:5b:56:99:bb:f7:15:51:
13:f8:45:43:00:de:f9:a1:3e:c0:c3:37:c4:77:b2:cd:87:2f:
83:3f:2e:73:79:60:43:07:b3:0e:bc:d4:83:d9:3a:c5:d3:f2:
f0:82:02:7d:07:fe:57:43:64:03:03:82:1e:58:86:ab:cc:c9:
cf:78:79:86:e5:c0:ab:f3:ca:8b:23:04:b7:67:54:ef:bf:0b:
97:42:7f:6c:cc:e0:80:d0:24:0f:b9:e5:a8:13:8b:63:83:75:
87:da:0b:7f:f0:80:1a:d9:d8:ca:df:a0:68:35:d4:6f:10:fc:
27:69:53:a7:ba:b6:88:b5:35:dc:60:d5:db:34:59:b6:70:bb:
c2:b4:0f:e8:4a:1d:23:7c:6d:72:85:c9:c9:86:f8:fd:25:9e:
52:a1:b0:ee:fc:39:8f:7b:2e:5f:dd:08:85:b9:8b:02:e6:5e:
cf:20:46:c4:fe:60:5d:9e:b1:5c:fe:5f:a1:b1:0f:cf:42:8d:
6e:9a:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:24:54 2025 by rpki-client