Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HrpB1u5isulPs6lg_0RftfjKe84.cer
File: HrpB1u5isulPs6lg_0RftfjKe84.cer (raw, json)
Hash identifier: T4iJSRP6NmCtzuRHRQ6/U7NHkkK7n5Y6h1L5xLF6HxQ=
Subject key identifier: 1E:BA:41:D6:EE:62:B2:E9:4F:B3:A9:60:FF:44:5F:B5:F8:CA:7B:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018909263968925BB68128167994D3A7C2BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/0/1EBA41D6EE62B2E94FB3A960FF445FB5F8CA7BCE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 29 Jun 2023 21:54:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.122.189.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:09:26:39:68:92:5b:b6:81:28:16:79:94:d3:a7:c2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 29 21:54:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eba41d6ee62b2e94fb3a960ff445fb5f8ca7bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:07:e2:9b:41:0d:3a:01:23:3b:c0:1c:c4:
1d:3e:7f:39:d2:3d:0f:6b:c5:68:47:24:85:7f:18:
b9:21:4f:a6:1a:3e:61:57:15:35:a7:4f:18:e8:2f:
a5:a9:9c:e5:c4:d5:59:d7:27:d0:7a:33:47:3c:72:
a5:1b:d7:33:e4:db:19:97:e7:79:cc:56:bc:92:6d:
97:d1:ea:28:2c:ad:fc:91:26:dc:ef:80:d6:85:ee:
8e:33:48:8d:cc:a6:37:00:76:ca:5e:b0:a2:84:25:
65:3c:d8:25:db:f5:4e:49:38:2c:6b:44:40:f3:c7:
40:f7:90:2c:27:00:59:5a:33:2d:e3:d0:88:88:fe:
df:19:05:87:97:48:d9:67:8e:32:d2:84:a3:75:bf:
68:aa:5a:10:3b:0a:fc:f0:64:d7:f1:e4:a7:33:84:
43:8e:34:4d:23:b5:f0:9b:98:4a:e6:3a:f4:8f:06:
ca:15:b8:92:c2:81:bd:2d:8a:82:ac:d6:de:eb:e8:
96:07:e6:92:65:03:de:10:06:3a:4a:59:a7:d5:d4:
b9:34:17:34:45:6d:ca:39:41:36:b5:ef:a9:d2:4f:
4a:6b:66:6b:dd:98:33:c6:71:ae:b9:01:73:1f:8c:
2b:43:e0:9a:41:b5:a8:1e:c7:64:ea:90:85:06:95:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BA:41:D6:EE:62:B2:E9:4F:B3:A9:60:FF:44:5F:B5:F8:CA:7B:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/0/1EBA41D6EE62B2E94FB3A960FF445FB5F8CA7BCE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
85:27:e9:27:9a:2e:05:e6:c1:a8:39:79:df:e2:aa:07:c6:45:
64:81:d6:f1:0f:6d:d9:9e:8a:f4:38:82:da:f2:8f:7b:6e:69:
6b:d8:9f:19:bb:c8:ba:b8:09:2e:fd:c0:9b:59:95:b7:fb:e4:
d9:57:94:f7:f5:f4:e1:ff:99:99:4a:6c:b4:66:df:19:9f:c8:
4e:2a:57:da:e2:e8:e4:f4:47:fa:e1:ab:83:ab:c4:1a:44:43:
f8:73:0d:24:07:c8:ee:c4:c3:bc:29:33:56:90:69:5d:30:1a:
35:f3:c7:3a:b6:2f:ec:b1:b6:33:e5:96:6e:34:1d:9b:6c:65:
6e:26:81:5a:6c:20:bc:b4:b9:5f:eb:f8:92:57:00:50:bb:67:
94:17:b1:e2:2f:39:72:dd:0a:80:7e:6b:63:5a:2c:c0:80:ed:
56:e8:16:a0:87:18:1f:00:46:3a:58:c7:08:da:28:f1:64:af:
46:c8:c0:8c:3c:81:10:e0:3a:b1:2b:39:f9:c1:5c:b6:d3:52:
d8:19:33:4b:bb:19:d2:0f:4a:5b:54:20:33:c6:16:89:c8:6d:
d0:1d:b7:30:d4:fe:bd:b5:62:4f:02:bd:7a:de:87:68:b3:6a:
4a:6d:a9:dc:3b:97:3c:d3:3d:d6:01:22:10:59:70:9e:08:0a:
9b:ea:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:06 2025 by rpki-client