Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.cer
File: F2kHJ7RI3QCVPNTaXYg1EhpUzkg.cer (raw, json)
Hash identifier: yFfibGJKhyatFkYwIsCgpi8ADVV9ZEGjOIRnzrfCcN8=
Subject key identifier: 17:69:07:27:B4:48:DD:00:95:3C:D4:DA:5D:88:35:12:1A:54:CE:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185540FFDA13000DF45D25C2CF1B1D9598E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Dec 2022 14:50:12 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.251.0.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:0f:fd:a1:30:00:df:45:d2:5c:2c:f1:b1:d9:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 27 14:50:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17690727b448dd00953cd4da5d8835121a54ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:a8:fe:52:91:28:f4:1b:45:40:bc:de:05:
39:36:fc:10:18:62:1b:00:73:bb:53:be:44:d1:0a:
cc:1f:48:0e:e5:d7:a9:39:3d:6d:f6:f9:d2:80:81:
73:b4:59:51:5b:8c:d9:07:42:36:d2:2f:96:4a:87:
bc:3c:95:15:70:f1:88:64:f3:41:63:c3:9b:31:5e:
d0:62:cf:e3:3a:00:8f:ad:88:a2:7f:41:20:06:68:
26:87:7b:ae:5c:83:f3:ef:12:e6:a1:bf:50:87:e0:
14:11:75:59:a3:ac:b7:1a:13:8a:77:cc:dd:f4:fc:
93:ec:72:53:43:f2:37:b4:6d:b5:4a:dd:a2:26:c2:
9c:79:27:bc:14:80:07:b5:b2:2f:41:e1:73:1d:dd:
d0:b6:df:73:a4:39:72:17:f8:cd:1a:f9:d3:9c:e1:
45:09:4f:92:bd:58:6e:d1:d2:55:06:5e:04:ca:54:
fb:ef:04:72:5a:4f:8f:51:a1:d3:6e:58:52:89:7e:
0e:ec:35:b4:da:57:dc:47:16:50:81:c2:19:8c:d4:
cd:64:96:a5:ed:7d:b7:23:14:4f:3e:60:60:83:a4:
54:87:9d:74:45:55:80:b3:1c:e1:b0:e3:91:79:f6:
1e:1f:0c:74:d1:91:3e:ab:18:95:b9:c0:03:f8:12:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:69:07:27:B4:48:DD:00:95:3C:D4:DA:5D:88:35:12:1A:54:CE:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:bf:dc:fc:7d:74:ea:bc:54:c4:5f:52:b4:60:8e:63:05:34:
53:84:e1:83:48:8a:40:55:24:68:0a:0e:96:c9:34:e4:2e:c6:
1a:05:a7:59:4c:1e:b3:a7:b9:27:d8:06:1a:de:14:43:bc:bd:
9b:ee:48:6f:39:c1:cf:63:25:9f:99:97:25:0c:d9:6c:11:3f:
4f:80:df:9b:49:a8:9f:bd:5b:cb:0f:4b:33:0d:77:3c:74:63:
69:81:21:f3:55:47:fc:7b:88:63:d4:53:32:91:86:aa:e1:e2:
03:78:72:e8:1b:0f:0e:75:bc:48:da:09:04:86:45:ad:6e:d4:
3d:b8:60:6d:f5:b8:b1:83:a5:0d:5e:bc:1c:6e:cd:a0:50:22:
3a:9f:46:ad:a3:15:d1:32:28:98:26:39:a8:bd:69:a5:5c:8d:
54:9a:c6:00:49:11:a2:b1:13:71:5d:d0:2c:4f:ff:27:a4:66:
f6:3f:9e:48:26:4e:61:ab:8f:5d:4d:eb:6d:73:fe:fc:3f:14:
bf:ac:a9:3f:10:63:a9:e0:b9:50:32:5d:fa:de:6f:72:1f:9c:
27:e7:2b:ff:59:69:a0:62:ed:c6:6c:a1:2a:38:fe:25:25:e9:
25:e3:4c:44:29:22:cb:32:2e:09:c7:b5:4b:cb:e2:83:7f:52:
a2:07:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:25 2025 by rpki-client