Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G6ssKKEYQgVC2C8ZnQ4Vtddsz-k.cer
File: G6ssKKEYQgVC2C8ZnQ4Vtddsz-k.cer (raw, json)
Hash identifier: vXyFMoaCp2nwM4GHW8+CzvxJQn4rLMvWyGprBBLgvvc=
Subject key identifier: 1B:AB:2C:28:A1:18:42:05:42:D8:2F:19:9D:0E:15:B5:D7:6C:CF:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A64E183510
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/ce9faf-1bdd-48ba-9039-6f0f8b4d62a7/1/G6ssKKEYQgVC2C8ZnQ4Vtddsz-k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/ce9faf-1bdd-48ba-9039-6f0f8b4d62a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:00:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.230.149.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714274780432 (0xa64e183510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bab2c28a118420542d82f199d0e15b5d76ccfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:10:b2:96:9c:de:2d:8b:e6:3f:5f:a0:ed:1b:
9a:67:fd:c9:38:21:47:fc:48:9f:4e:61:a6:e8:3b:
e1:1e:c0:33:84:1c:2d:c8:29:8e:8e:f9:8a:a4:7a:
42:fa:b9:ec:44:d8:7c:18:14:76:e6:eb:13:38:2e:
29:77:db:b9:69:0f:3c:45:c6:d0:ba:c6:b7:f2:0a:
ec:d6:4b:89:98:fd:7c:36:40:50:f3:7d:3c:05:25:
ba:98:26:93:48:8e:70:5b:24:1b:c1:62:a5:b9:31:
23:b5:c0:0f:ad:12:e5:c1:6a:72:35:1b:75:35:00:
51:84:2e:bc:c5:e2:0a:58:73:3f:ca:16:f0:26:79:
0f:01:f2:b2:59:9a:e2:f7:06:30:65:c0:cb:37:62:
26:80:97:ae:0e:85:e1:7d:9c:f7:86:05:c9:cd:67:
48:23:8f:8e:94:7d:07:e9:90:7a:f6:53:6c:3b:8e:
5f:5d:42:55:06:9e:e8:8a:69:6e:65:c4:93:b8:57:
ae:21:fa:2f:7a:c6:6f:a5:f7:e3:3c:21:ad:48:7e:
6f:01:f2:9b:96:47:12:b5:e8:18:ba:97:d9:c3:aa:
8d:31:df:a8:7c:ad:57:4f:2d:72:13:e3:74:f0:56:
c4:ab:40:2a:c9:62:8e:c5:42:5a:ab:a4:81:d0:fc:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:2C:28:A1:18:42:05:42:D8:2F:19:9D:0E:15:B5:D7:6C:CF:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ce9faf-1bdd-48ba-9039-6f0f8b4d62a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ce9faf-1bdd-48ba-9039-6f0f8b4d62a7/1/G6ssKKEYQgVC2C8ZnQ4Vtddsz-k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.149.0/24
Signature Algorithm: sha256WithRSAEncryption
50:84:1f:65:d6:06:df:69:ef:37:c4:b4:c3:11:bb:68:c6:ac:
7b:a4:43:22:07:4b:9c:e0:27:e2:2f:f8:a5:dd:3b:75:e7:4f:
16:55:38:2c:24:50:97:2e:66:05:0e:11:f1:23:a1:91:1b:1a:
7f:21:99:48:96:96:63:ee:3c:d4:eb:73:65:85:9f:73:e5:89:
aa:63:25:c7:c9:81:f9:41:e6:43:f7:32:00:e8:d2:b9:b5:0c:
44:3c:be:d4:df:4a:ee:ff:3e:94:6f:26:a5:30:10:32:5d:8a:
fb:70:17:d1:7a:3b:f0:29:ac:8c:7a:f2:98:3a:c7:9c:8a:3c:
19:88:aa:e8:73:a9:cb:42:9a:80:4a:f6:d0:8a:06:e5:c4:b5:
dc:e4:29:e3:fc:4d:78:29:60:cb:c1:4c:b6:cb:ab:3c:93:17:
eb:79:54:78:18:60:4b:05:fb:22:87:c3:14:3c:d9:e9:36:3e:
e3:37:12:e4:32:77:6b:2c:aa:f0:d1:1a:d7:1c:9d:e9:0d:3a:
b1:fe:54:17:f9:de:5e:fc:ce:24:e2:0f:b1:32:21:85:c8:ca:
21:2e:30:e8:02:84:10:46:c1:0b:24:8e:bf:96:bf:b6:42:bf:
5d:fa:fa:21:dd:42:0e:03:58:5e:40:af:ff:13:92:62:cd:f7:
e1:af:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:58:10 2025 by rpki-client