Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G_ife_GPa7hqeykhCYp5JlWX5Xc.cer
File: G_ife_GPa7hqeykhCYp5JlWX5Xc.cer (raw, json)
Hash identifier: DUV9zQ2/Hk+n5xhfXDcsU7C1EDATHQ8HLWK3yvHu6JY=
Subject key identifier: 1B:F8:9F:7B:F1:8F:6B:B8:6A:7B:29:21:09:8A:79:26:55:97:E5:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A2A7C799C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/753d0a-119f-4001-89de-16d97a972bef/1/G_ife_GPa7hqeykhCYp5JlWX5Xc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/753d0a-119f-4001-89de-16d97a972bef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:52:35 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 29006
AS: 59705
AS: 203842
IP: 5.45.16.0/20
IP: 185.3.248.0/22
IP: 217.27.240.0/20
IP: 217.168.16.0/20
IP: 2a01:6c8::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662137764252 (0x9a2a7c799c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bf89f7bf18f6bb86a7b2921098a79265597e577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:60:07:f8:5c:5b:00:69:83:f0:6c:8a:4f:
9d:fd:48:37:a3:8a:af:c6:99:8b:aa:57:e2:89:75:
4d:c6:11:d6:48:f3:b2:ec:e7:f5:ea:dc:ed:33:a9:
22:4b:a6:34:c2:ba:3a:6b:71:ce:25:95:88:72:92:
25:19:d2:26:cd:e8:ac:15:88:ed:22:01:9b:0e:f1:
d1:14:ec:eb:50:08:1f:7d:31:2c:ea:99:ba:44:dd:
b7:b7:1b:54:d3:cc:e1:f8:75:55:b0:b7:67:27:c7:
6a:b2:36:34:9f:fa:54:23:4b:d0:03:0c:dd:3a:36:
47:ad:25:be:a1:85:db:19:84:60:cc:d7:5d:52:dd:
27:a8:61:ec:1c:4f:0f:49:a1:0c:34:29:98:c9:57:
e0:f3:46:f1:57:f0:62:be:bf:d8:d3:90:74:1c:31:
50:e1:0b:81:06:e3:6c:99:0f:0a:6a:e2:d6:75:2a:
ab:cc:1e:a5:bf:02:cf:51:4a:81:ca:92:24:68:53:
15:d7:0f:5d:c0:e0:be:5f:db:0a:78:f0:eb:72:ec:
c5:d1:4a:e2:1a:00:dc:01:d6:d9:4b:a1:58:4c:01:
62:d5:2e:4d:87:b1:07:c7:0f:f3:2b:63:2f:de:af:
91:ca:2e:dd:eb:8f:87:9a:ee:c6:06:ac:21:b4:ae:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:9F:7B:F1:8F:6B:B8:6A:7B:29:21:09:8A:79:26:55:97:E5:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/753d0a-119f-4001-89de-16d97a972bef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/753d0a-119f-4001-89de-16d97a972bef/1/G_ife_GPa7hqeykhCYp5JlWX5Xc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.16.0/20
185.3.248.0/22
217.27.240.0/20
217.168.16.0/20
IPv6:
2a01:6c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29006
59705
203842
Signature Algorithm: sha256WithRSAEncryption
13:18:3e:b0:ee:2c:cd:5f:97:38:42:40:b9:2b:4a:48:67:93:
b5:f8:a6:85:5b:b0:17:93:c7:8b:22:3d:54:43:49:d5:93:9f:
0c:b4:45:06:f9:df:80:e9:71:16:f5:50:10:89:a0:0e:72:c0:
8c:3b:a2:29:12:2b:b6:01:b0:de:78:e8:b1:50:58:2e:59:4e:
a1:7a:03:4b:26:63:45:02:09:50:88:b6:bc:d3:ce:01:2e:09:
65:e0:24:ca:4d:04:89:87:26:41:2e:64:fa:09:78:7d:86:0a:
ff:17:77:f1:03:a9:4f:96:22:dd:47:3f:42:a3:1c:c6:ba:32:
d3:39:96:ed:05:c7:af:f5:a0:59:d8:cd:2e:d8:50:30:a2:8d:
61:5b:88:81:45:9b:a1:dc:85:1d:21:8d:0d:9a:52:e6:be:3c:
32:82:b2:09:bf:35:b6:a4:79:35:90:89:3c:05:71:13:dd:8c:
47:e0:9e:87:82:97:5d:a1:6e:c3:19:d9:d2:6d:d7:17:af:99:
60:56:d1:d7:b9:ba:fe:20:70:87:0f:4f:97:35:fa:ec:0f:c0:
be:0d:a9:a7:5f:e4:35:53:3e:c4:ef:ca:06:a5:f0:60:33:50:
84:5d:0a:82:1a:9a:54:2c:3a:d2:7b:8e:2e:96:d0:1f:86:20:
ad:57:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:32:35 2025 by rpki-client