Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
File: FUnxxKhu2QyvgZXdhNBA6sihm4g.cer (raw, json)
Hash identifier: FewpgmlfhTtHKBMnR+g7PKNX5TqKMKoD0PkuRVyvOTM=
Subject key identifier: 15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65ADF948D43A0254E3D14C97EB40B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.232.0/24
IP: 2a12:a80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:ad:f9:48:d4:3a:02:54:e3:d1:4c:97:eb:40:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:a5:12:b3:73:59:2f:16:4a:7a:11:fd:0f:
4d:ca:20:da:0f:0f:4d:dd:4f:4b:fb:b2:05:13:0b:
e1:bc:dc:91:da:cd:b8:5c:cc:c5:b4:9b:88:10:2c:
dc:9f:21:25:06:23:79:48:32:41:f3:8a:5d:ce:72:
7a:6d:04:08:9a:cd:05:f7:e2:8e:25:82:49:db:cf:
f7:7a:c8:8e:cd:6a:9f:a7:70:8f:db:af:87:e5:68:
d8:33:e7:b0:51:7e:19:c2:6b:51:db:9c:ff:ba:40:
9f:29:23:90:a0:eb:67:1e:ba:5d:34:1a:7a:a4:14:
e5:f1:9f:d7:c1:68:ea:67:2a:4b:71:a1:b1:fa:34:
7f:0c:b1:d1:a0:0a:e7:94:bb:b0:96:b8:4c:32:85:
cc:c1:5e:cd:e8:a7:94:13:7c:d2:56:b5:74:45:5b:
87:12:3e:42:2f:2e:a7:03:64:a2:cc:85:46:57:65:
06:b5:08:5e:87:45:b6:3d:c3:ad:49:5f:08:98:02:
62:70:9b:b0:99:06:4f:b8:e1:f9:b0:66:f4:d2:2d:
67:77:dd:b3:1b:46:2e:45:d2:b8:13:fb:0a:65:31:
d8:6d:8a:f1:05:be:e0:4f:64:75:d9:0d:ee:95:8b:
7b:fc:b0:88:4a:1a:67:27:ee:12:2b:9e:d2:aa:09:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.232.0/24
IPv6:
2a12:a80::/29
Signature Algorithm: sha256WithRSAEncryption
78:76:43:fe:94:0e:01:f4:a5:8c:1c:2c:f6:89:fa:78:f0:6e:
63:45:1c:4c:b1:65:6f:76:07:ca:98:89:c9:91:3a:00:cd:66:
f4:0a:c5:47:37:9d:d1:74:58:94:16:ca:32:5c:d8:64:43:79:
4e:3a:1a:e6:c3:3e:d6:3e:5b:1e:e0:a2:52:3a:a6:a6:5a:27:
d2:57:b4:79:6b:8e:c0:e3:34:0f:ca:cf:9b:62:c7:00:c2:a3:
35:91:39:69:c5:a7:8f:20:4d:d5:74:f8:99:72:44:ba:90:57:
75:98:6c:9d:a2:04:3b:36:83:c7:c5:99:3a:c8:7e:10:53:48:
7a:ab:b3:29:72:e0:fa:d7:ff:cd:f1:5a:f9:10:b9:df:f5:5a:
d1:07:12:0e:39:d8:e1:74:a9:ed:5e:f5:c3:bc:fd:a3:cd:19:
84:00:e9:01:b3:00:0d:38:25:71:70:d6:40:9d:0a:44:24:5b:
41:d1:53:b4:36:7a:40:70:a7:bb:55:19:f6:00:10:c0:f8:9d:
0a:e4:96:9d:f1:dc:d1:86:5e:d5:25:ea:0f:8d:27:88:00:7a:
99:67:98:ce:32:16:ba:a6:59:50:60:48:f5:7a:3e:e0:c2:6e:
8c:96:88:83:a1:dc:64:1f:9e:71:a0:00:db:e1:f2:91:29:ea:
e6:03:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:12:32 2025 by rpki-client