Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FUpMHiP55uPj_KjoKteRMS5do1s.cer
File: FUpMHiP55uPj_KjoKteRMS5do1s.cer (raw, json)
Hash identifier: kBK8m//JBeHtyF9cebYqlmvKv/sj3DumgKdiTL9z/uk=
Subject key identifier: 15:4A:4C:1E:23:F9:E6:E3:E3:FC:A8:E8:2A:D7:91:31:2E:5D:A3:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B5702EFC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/6c2ddf-6211-4dc5-ba5a-a85604f7fd56/1/FUpMHiP55uPj_KjoKteRMS5do1s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/6c2ddf-6211-4dc5-ba5a-a85604f7fd56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:52:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44275
IP: 93.95.72.0/21
IP: 2a01:b9c0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667179741122 (0x9b5702efc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=154a4c1e23f9e6e3e3fca8e82ad791312e5da35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f2:a5:20:98:2c:6e:c4:aa:4b:68:9c:6f:ca:
0a:b2:15:51:22:58:fd:73:6c:6a:88:74:9e:2e:53:
14:93:c2:f5:c2:84:c8:0e:17:95:26:12:09:76:e3:
6b:30:b6:b0:a3:c1:e3:51:6b:7e:15:be:f8:65:b7:
8b:11:10:88:67:4c:d9:9f:4a:57:95:ac:32:7b:92:
02:3b:70:37:53:f4:f7:79:3a:5c:72:49:fd:54:ce:
fb:3f:c3:6d:fd:e6:8f:f5:5f:14:ee:56:95:3a:4c:
2d:ad:10:45:a1:2b:d3:b4:18:c7:2c:f4:93:8c:79:
d2:6c:a5:64:28:19:9b:84:61:f9:cd:2f:96:02:60:
be:09:18:72:8e:bb:48:09:a7:2e:c4:b8:67:21:6c:
b7:ac:d1:72:78:dc:c2:8a:2d:eb:f2:c1:82:3c:28:
aa:08:ab:a9:e2:94:6b:3c:20:9a:30:bb:b3:e7:38:
c6:cd:e8:37:00:4d:69:2d:fb:70:2e:ef:b8:f7:2e:
30:a9:2b:6c:2e:53:ea:54:6e:db:c4:b2:fd:68:87:
fe:62:1e:20:c4:02:0b:b6:f1:9d:25:da:3b:00:e4:
8f:33:f3:ce:b6:bd:68:7b:af:dc:60:b6:ba:07:54:
23:7c:ea:6c:68:f6:ba:e8:b2:70:33:a1:d4:6b:fe:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:4C:1E:23:F9:E6:E3:E3:FC:A8:E8:2A:D7:91:31:2E:5D:A3:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6c2ddf-6211-4dc5-ba5a-a85604f7fd56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6c2ddf-6211-4dc5-ba5a-a85604f7fd56/1/FUpMHiP55uPj_KjoKteRMS5do1s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.72.0/21
IPv6:
2a01:b9c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44275
Signature Algorithm: sha256WithRSAEncryption
68:f2:8d:0a:90:4c:ee:e3:b0:8b:6e:4b:2c:ce:4f:73:40:c2:
44:c8:ae:05:d7:44:7e:99:54:c4:0c:f6:82:ae:bc:e1:af:6f:
a5:68:77:13:2b:75:e2:e1:e3:a0:74:aa:69:a3:fa:c6:d9:41:
fb:61:dd:45:3c:8d:ab:53:c5:3b:33:96:f3:44:d9:6f:66:68:
63:94:12:77:e8:cd:d1:88:67:3f:87:19:06:03:cd:f5:0d:22:
ac:15:97:12:bf:17:83:28:01:fa:34:45:da:e9:a4:cf:4b:bc:
21:5f:91:57:81:51:7f:ff:4c:74:71:51:2c:c1:2b:44:3c:fa:
83:30:08:d8:66:86:a6:c1:bd:fc:2f:1b:ae:04:6b:ce:3f:46:
40:2c:dc:27:b2:f7:ac:5f:06:22:5d:48:ad:63:60:ab:80:2c:
4b:c2:08:e0:6d:e6:4f:81:ea:a1:8a:2e:b6:76:b9:21:11:02:
22:7e:47:7a:2c:0d:fc:3a:37:87:67:78:35:0c:ad:23:f1:00:
9d:ab:77:4c:45:4d:f5:d1:c3:fb:a9:0e:c8:6c:56:0f:74:ca:
68:88:7b:8b:65:98:a8:a2:3c:94:8d:b1:c3:7b:ea:06:76:55:
c9:6b:a4:c8:b4:ec:9e:41:66:71:29:f2:c5:63:3a:99:c1:8e:
aa:96:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:56 2025 by rpki-client