Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FA7Lcv8AOY02Quwj8hKtoOpyBm0.cer
File: FA7Lcv8AOY02Quwj8hKtoOpyBm0.cer (raw, json)
Hash identifier: Jb46XXE371Z6/z7lJg+Ys82sCzzAkF3ddD/EA7iUuMk=
Subject key identifier: 14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCE0DC25050C655CE109A26DE9B3AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/FA7Lcv8AOY02Quwj8hKtoOpyBm0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.216.59.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e0:dc:25:05:0c:65:5c:e1:09:a2:6d:e9:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=140ecb72ff00398d3642ec23f212ada0ea72066d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:6f:6a:47:27:64:ed:0e:cd:17:15:55:d8:
05:ad:27:c2:9a:b3:a3:3a:64:7c:9c:3f:5a:91:6e:
6b:b1:63:ac:e9:c0:84:a2:10:69:ba:fc:b5:1a:36:
9b:02:74:3d:9f:72:39:ce:bb:8d:d7:5d:55:41:d8:
8a:4b:e9:9c:79:14:e1:13:35:0a:d8:24:3e:13:d5:
2e:b2:7a:66:3c:3d:50:5a:2c:de:e3:95:b1:b2:ab:
21:ad:ed:da:a5:ff:47:66:ba:ad:d4:40:45:3c:12:
73:d8:02:a6:99:67:51:88:b6:3e:fe:92:63:b4:5a:
b2:d1:f0:af:2c:e2:6c:46:e9:4d:11:61:50:cf:61:
5e:b2:7c:d9:d4:1f:31:8f:eb:21:15:47:08:ba:83:
e9:1c:a4:4c:65:00:24:61:03:72:9c:ef:03:09:0e:
64:90:b7:95:42:8e:31:91:21:f3:9d:00:aa:26:35:
77:2f:3d:b0:cc:8f:80:d7:8d:0b:45:8a:a7:82:da:
19:49:b8:89:dd:71:bd:56:53:1f:ad:b2:e7:cc:a2:
dc:94:8f:8b:55:aa:ee:76:ba:5c:3b:81:2e:8f:38:
d4:4d:5f:b0:d5:f9:e7:68:6a:b4:d3:99:e5:76:44:
23:3c:0c:ef:d8:85:3c:38:2f:26:67:71:0f:63:5d:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/FA7Lcv8AOY02Quwj8hKtoOpyBm0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.59.0/24
Signature Algorithm: sha256WithRSAEncryption
22:53:f1:66:e8:14:d3:fc:b3:3b:61:9a:03:19:75:d5:29:b6:
8c:35:6a:18:15:d1:16:9b:88:14:0b:67:25:16:20:36:4f:64:
11:fa:fa:32:6b:e8:77:99:5e:51:b7:30:2c:d4:0c:b8:37:47:
ad:74:e6:e1:a1:75:37:2b:14:e5:08:76:0f:e4:b4:2c:94:5f:
a1:bb:24:6d:32:15:d7:f9:bf:cd:ef:cc:87:4e:a1:7b:af:46:
26:ea:ba:61:77:d3:04:aa:6d:1c:68:33:c7:1c:27:46:f8:84:
78:af:81:0f:3a:d9:be:2a:22:96:d6:50:13:62:1d:1e:8e:5f:
5a:d2:03:b9:84:df:33:84:b6:0b:c2:ac:bd:18:e9:2d:ba:f1:
40:29:b8:5d:50:83:42:39:97:8f:1a:64:6a:b5:ca:63:06:46:
b3:ee:bd:1b:08:66:ff:f0:07:4c:bf:62:cb:0c:aa:6c:7b:83:
3c:f3:a4:f3:df:a3:e5:d6:c9:f7:64:25:51:8f:11:2a:c2:1a:
a8:90:69:79:d4:aa:be:6a:d5:a5:db:d0:0f:a6:9c:af:06:99:
24:26:7e:bb:0f:82:d8:50:b7:fd:0d:83:33:85:4d:ea:ee:f9:
4c:45:2c:71:38:d7:ab:66:26:2c:4b:96:4d:0e:1c:f4:45:91:
ca:5a:93:12
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzF3ODcJQUMZVzhCaJt6bOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDBlY2I3MmZmMDAzOThkMzY0MmVjMjNmMjEyYWRhMGVhNzIwNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6VvakcnZO0OzRcVVdgFrSfCmrOj
OmR8nD9akW5rsWOs6cCEohBpuvy1GjabAnQ9n3I5zruN111VQdiKS+mceRThEzUK
2CQ+E9UusnpmPD1QWize45Wxsqshre3apf9HZrqt1EBFPBJz2AKmmWdRiLY+/pJj
tFqy0fCvLOJsRulNEWFQz2FesnzZ1B8xj+shFUcIuoPpHKRMZQAkYQNynO8DCQ5k
kLeVQo4xkSHznQCqJjV3Lz2wzI+A140LRYqngtoZSbiJ3XG9VlMfrbLnzKLclI+L
VarudrpcO4EujzjUTV+w1fnnaGq005nldkQjPAzv2IU8OC8mZ3EPY10RrwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBQOy3L/ADmNNkLsI/ISraDqcgZtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2U3MDAz
NS1iNjlhLTQ0NmEtOGRlNC0yNzBlNzJhZjIxYTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZTcwMDM1
LWI2OWEtNDQ2YS04ZGU0LTI3MGU3MmFmMjFhOS8xL0ZBN0xjdjhBT1kwMlF1d2o4
aEt0b09weUJtMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAH9g7MA0GCSqGSIb3DQEBCwUAA4IBAQAiU/Fm
6BTT/LM7YZoDGXXVKbaMNWoYFdEWm4gUC2clFiA2T2QR+voya+h3mV5RtzAs1Ay4
N0etdObhoXU3KxTlCHYP5LQslF+huyRtMhXX+b/N78yHTqF7r0Ym6rphd9MEqm0c
aDPHHCdG+IR4r4EPOtm+KiKW1lATYh0ejl9a0gO5hN8zhLYLwqy9GOktuvFAKbhd
UINCOZePGmRqtcpjBkaz7r0bCGb/8AdMv2LLDKpse4M886Tz36Pl1sn3ZCVRjxEq
whqokGl51Kq+atWl29APppyvBpkkJn67D4LYULf9DYMzhU3q7vlMRSxxONerZiYs
S5ZNDhz0RZHKWpMS
-----END CERTIFICATE-----
Generated at Sat Jul 5 23:13:03 2025 by rpki-client