Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HuUVymibbrU5Pf4Eya-9aAaBnJE.cer
File: HuUVymibbrU5Pf4Eya-9aAaBnJE.cer (raw, json)
Hash identifier: QAgCghYiqNq0zHh5CzX0fb+zgDQuz/XnpcoAQqHkEbc=
Subject key identifier: 1E:E5:15:CA:68:9B:6E:B5:39:3D:FE:04:C9:AF:BD:68:06:81:9C:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0183CD4C069C5CCE8C04B1BEA18FA220D7C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/003841-2731-4220-8a8d-684b96600352/1/HuUVymibbrU5Pf4Eya-9aAaBnJE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/003841-2731-4220-8a8d-684b96600352/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Oct 2022 17:44:15 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 176.53.168.0/22
IP: 2a09:e500::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:4c:06:9c:5c:ce:8c:04:b1:be:a1:8f:a2:20:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 12 17:44:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ee515ca689b6eb5393dfe04c9afbd6806819c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:0f:af:34:52:e6:e3:f3:63:a8:5a:6d:33:
44:91:71:7f:25:bc:de:c7:f6:6a:d3:dc:56:80:ce:
25:41:f5:95:97:61:39:fc:6e:91:10:8b:3f:17:67:
24:b2:4a:4e:7d:57:b6:e4:ba:25:06:e4:4c:e6:f6:
df:f5:35:d8:57:49:60:16:d5:84:54:0a:fe:ff:7b:
3b:5c:80:99:aa:86:72:56:62:28:7a:38:e6:63:4f:
c5:36:07:83:98:3d:37:db:70:d1:19:8f:ae:f1:52:
95:22:eb:77:1e:bd:e5:5b:06:ce:6f:43:2e:f1:da:
35:cc:b2:2c:a8:01:03:f7:a5:b6:b7:af:3d:5a:e7:
40:80:47:5d:42:66:a8:29:e9:0a:2c:6d:ce:89:54:
dc:ac:50:68:01:ac:6a:16:45:38:3a:d7:11:9e:8e:
c1:b3:48:00:b2:d9:b0:bb:ee:6e:42:f5:0b:77:60:
1b:b4:49:fb:3d:49:cd:99:be:57:3f:39:13:39:49:
bd:80:40:b3:e5:f6:74:1c:82:9d:f3:6a:c0:7d:f6:
ea:3a:3a:0a:15:f9:5b:aa:af:b8:6a:cf:dc:87:d6:
8c:4a:c8:5f:90:85:af:35:4b:cd:4a:de:e9:3d:86:
b0:36:ff:d2:99:aa:68:ff:95:44:f9:3d:58:62:cf:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:15:CA:68:9B:6E:B5:39:3D:FE:04:C9:AF:BD:68:06:81:9C:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/003841-2731-4220-8a8d-684b96600352/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/003841-2731-4220-8a8d-684b96600352/1/HuUVymibbrU5Pf4Eya-9aAaBnJE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.168.0/22
IPv6:
2a09:e500::/29
Signature Algorithm: sha256WithRSAEncryption
67:b6:b4:fd:49:f4:1d:d2:06:f8:6a:3c:7c:95:6e:72:b7:9b:
e7:f4:cc:e2:08:e2:4e:aa:86:c8:0b:a5:df:1f:38:7e:8b:cb:
a8:32:dc:94:f5:94:80:4d:b2:3b:4c:2c:1e:e6:b9:d0:77:ea:
3f:4d:bb:5b:11:b3:07:83:d7:5b:dc:aa:e5:8e:51:1d:a5:72:
ab:0c:50:a4:2f:92:04:c1:db:ef:d6:0c:42:06:16:25:20:b2:
15:c3:7d:bb:17:eb:8d:ac:f2:ec:bd:69:78:8a:af:a0:c3:3b:
af:e7:86:3e:15:26:33:d2:f8:a8:82:e5:8d:ec:4b:3c:79:6a:
ca:e0:a0:2c:5a:74:94:a9:d1:f0:cc:e5:8a:7b:19:b9:2e:d7:
b3:cc:41:1e:98:ec:68:3c:12:3c:75:77:b7:67:79:a5:c8:74:
6f:ea:61:10:0c:69:14:8c:58:34:fa:bd:3c:38:93:66:41:a4:
7d:4f:58:49:01:f6:95:31:3e:50:ec:a9:61:d6:d8:a2:1d:6b:
3d:8c:53:59:9c:e9:12:9e:e7:5c:a7:c3:41:46:99:88:9d:c7:
e0:53:13:d1:88:c0:34:66:21:64:3f:df:65:e5:d1:2a:17:5b:
1a:5c:0c:ec:a4:c5:3e:64:87:63:ff:91:25:5a:67:2b:63:b3:
c0:68:96:3e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYPNTAacXM6MBLG+oY+iINfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMDEyMTc0NDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWU1MTVjYTY4OWI2ZWI1MzkzZGZlMDRjOWFmYmQ2ODA2ODE5YzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EUPrzRS5uPzY6habTNEkXF/Jbze
x/Zq09xWgM4lQfWVl2E5/G6REIs/F2ckskpOfVe25LolBuRM5vbf9TXYV0lgFtWE
VAr+/3s7XICZqoZyVmIoejjmY0/FNgeDmD0323DRGY+u8VKVIut3Hr3lWwbOb0Mu
8do1zLIsqAED96W2t689WudAgEddQmaoKekKLG3OiVTcrFBoAaxqFkU4OtcRno7B
s0gAstmwu+5uQvULd2AbtEn7PUnNmb5XPzkTOUm9gECz5fZ0HIKd82rAffbqOjoK
Fflbqq+4as/ch9aMSshfkIWvNUvNSt7pPYawNv/Smapo/5VE+T1YYs/HuwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFB7lFcpom261OT3+BMmvvWgGgZyRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzAwMzg0
MS0yNzMxLTQyMjAtOGE4ZC02ODRiOTY2MDAzNTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvMDAzODQx
LTI3MzEtNDIyMC04YThkLTY4NGI5NjYwMDM1Mi8xL0h1VVZ5bWliYnJVNVBmNEV5
YS05YUFhQm5KRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCsDWoMA0EAgACMAcDBQMqCeUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBntrT9SfQd0gb4ajx8lW5yt5vn9MziCOJOqobIC6XfHzh+i8uo
MtyU9ZSATbI7TCwe5rnQd+o/TbtbEbMHg9db3KrljlEdpXKrDFCkL5IEwdvv1gxC
BhYlILIVw327F+uNrPLsvWl4iq+gwzuv54Y+FSYz0vioguWN7Es8eWrK4KAsWnSU
qdHwzOWKexm5LtezzEEemOxoPBI8dXe3Z3mlyHRv6mEQDGkUjFg0+r08OJNmQaR9
T1hJAfaVMT5Q7Klh1tiiHWs9jFNZnOkSnudcp8NBRpmIncfgUxPRiMA0ZiFkP99l
5dEqF1saXAzspMU+ZIdj/5ElWmcrY7PAaJY+
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:15:58 2025 by rpki-client