Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HSqIrMkSOMUydRKQzPgxJw-X9wg.cer
File: HSqIrMkSOMUydRKQzPgxJw-X9wg.cer (raw, json)
Hash identifier: ua27WRCYFpO0scBQtP8Ihto6FfOpRst6VLeDiP+tpuo=
Subject key identifier: 1D:2A:88:AC:C9:12:38:C5:32:75:12:90:CC:F8:31:27:0F:97:F7:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570891389CA1B28728DAC6DA29016437F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/HSqIrMkSOMUydRKQzPgxJw-X9wg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:31:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 39455
IP: 185.85.36.0/22
IP: 2a05:aa00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:89:13:89:ca:1b:28:72:8d:ac:6d:a2:90:16:43:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:31:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d2a88acc91238c532751290ccf831270f97f708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:b9:e9:23:e3:34:17:c8:bb:37:49:10:a3:
a8:09:ef:2e:ed:41:23:00:a9:4a:fb:f7:e3:ca:70:
40:53:25:9a:67:4d:d1:98:8b:c8:2f:1c:db:ae:73:
36:32:0c:c9:92:b0:6f:cc:94:66:fa:e9:d9:b5:f2:
af:23:8a:32:5c:20:15:cb:ee:af:36:e2:4e:4c:92:
b3:0f:de:0c:83:e5:40:40:7b:16:bc:15:dc:4d:e2:
94:d0:2a:09:b9:d7:e7:34:b0:b7:23:e6:20:85:4c:
e7:2b:5f:52:9f:f1:01:de:05:cc:dc:7e:89:05:c2:
a6:f0:51:d3:4d:73:58:e2:46:d8:b0:10:72:b4:8d:
a9:30:f7:4b:45:70:a3:82:04:20:e5:08:cf:45:c7:
56:ab:1a:eb:34:22:38:ac:ec:5c:fe:05:07:84:73:
1a:46:b2:dc:ea:63:86:2f:f3:25:92:26:e5:cd:42:
ae:a5:c3:0a:3e:e2:db:be:82:32:0a:43:73:17:27:
88:b6:68:76:92:8c:88:29:bc:f8:04:78:78:ed:0e:
82:c4:59:a0:53:03:53:ab:c7:8e:f0:ba:b0:4f:bb:
31:de:04:7a:20:e9:ed:c2:ea:80:fb:60:33:87:8e:
d1:6c:cb:1b:b2:10:ed:1e:dd:33:50:f0:2c:83:8d:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2A:88:AC:C9:12:38:C5:32:75:12:90:CC:F8:31:27:0F:97:F7:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/HSqIrMkSOMUydRKQzPgxJw-X9wg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.36.0/22
IPv6:
2a05:aa00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39455
Signature Algorithm: sha256WithRSAEncryption
15:4e:68:2a:90:dd:68:b6:37:47:f8:e7:1f:6f:5f:58:90:a2:
64:7c:b6:c4:cb:df:e3:a0:6f:7c:2a:c2:ab:59:5a:21:5e:7e:
52:45:70:6b:43:76:f1:60:fb:fa:f7:44:bd:19:1f:1e:e2:c7:
c2:98:d7:d8:7a:2b:62:9c:d6:cb:46:ca:f7:b2:d6:2e:3c:25:
c8:ac:16:35:cc:b0:87:3d:2b:a0:aa:2d:7b:5a:53:0e:02:a4:
94:cc:9a:db:9f:6c:d5:7d:cb:89:8b:b3:54:b1:88:cd:b0:b3:
da:16:df:3f:6c:ad:55:8e:fc:2f:2f:ab:4b:67:e3:ea:0c:09:
4b:66:4d:b1:f0:e2:10:c7:b1:e2:c1:24:29:45:82:c5:99:a8:
c0:a0:7d:49:8e:9d:6b:d3:ca:f0:8d:d2:66:f8:24:43:11:d3:
19:ea:b1:30:c9:eb:eb:08:bb:82:d6:a6:c7:75:d1:e6:fc:8a:
0d:01:4c:fa:72:96:b7:91:55:da:5a:84:38:62:bb:38:1f:0d:
98:ea:40:46:b9:51:64:b7:57:27:32:96:fa:e8:fa:38:c5:c1:
d4:a5:6c:4e:55:70:49:f3:99:50:66:33:41:b4:ac:58:27:01:
3d:2f:c0:06:c4:4d:6e:e1:1f:a5:3f:be:81:32:62:06:01:02:
14:32:7c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:46 2025 by rpki-client