Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I5WxZFvCqNZgj7AQVpWa8OZYPns.cer
File: I5WxZFvCqNZgj7AQVpWa8OZYPns.cer (raw, json)
Hash identifier: H7Y3NuckQD7vbuz4hiT0rvSt9LevyOg7WQu+lPCaJ0Q=
Subject key identifier: 23:95:B1:64:5B:C2:A8:D6:60:8F:B0:10:56:95:9A:F0:E6:58:3E:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7617CA496F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/41/2395B1645BC2A8D6608FB01056959AF0E6583E7B.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/41/
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:20:21 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 62.192.176.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507205273967 (0x7617ca496f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:20:21 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=2395b1645bc2a8d6608fb01056959af0e6583e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:10:8d:cf:84:58:1e:49:41:10:90:c4:6d:
ea:3b:8d:ee:11:13:d1:e5:92:f9:20:2a:45:b5:2c:
5a:8a:3d:d4:97:6b:a2:62:63:12:6c:a4:60:c3:15:
c1:31:de:c9:94:15:b4:4f:17:72:a0:ed:d3:a9:24:
f1:c9:2c:3e:14:f4:6b:a4:ac:73:81:1c:75:ee:b3:
99:3f:5c:67:e1:51:bb:83:02:fa:06:95:dd:20:f2:
6c:e1:c4:ed:83:92:79:7d:20:3b:8a:f3:66:9c:1c:
a3:e5:1f:a8:a1:82:3b:e5:25:f1:4b:df:6e:a8:f5:
6d:61:fc:25:73:d8:ab:c4:e6:99:4d:32:c5:43:49:
4e:ca:d7:85:83:dc:89:05:93:c3:c3:61:5f:75:cc:
88:ed:f9:23:92:d5:13:37:c8:54:60:4b:7c:df:f4:
03:12:83:3e:3c:9b:d8:90:c1:e6:18:9b:46:c6:c9:
be:16:aa:a8:f7:be:80:ce:71:54:5c:37:ec:bb:e6:
05:34:2a:c0:db:43:19:23:96:06:83:3c:de:b9:28:
60:ba:77:f6:e3:c1:13:27:e4:90:f9:de:e1:06:a4:
f3:5a:94:08:ac:89:85:7a:61:42:ce:72:54:f2:87:
d3:31:89:ec:d8:5b:d5:6f:70:92:e3:76:18:61:97:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:95:B1:64:5B:C2:A8:D6:60:8F:B0:10:56:95:9A:F0:E6:58:3E:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/41/
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/41/2395B1645BC2A8D6608FB01056959AF0E6583E7B.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.176.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:37:dd:5d:8e:ad:3a:98:3a:52:7a:6e:d3:88:a8:b3:6e:62:
7d:c5:2f:fe:9a:01:df:d3:11:d5:ac:04:9e:04:44:35:d9:ab:
61:48:ff:e6:81:b7:39:b3:a0:d7:5e:22:e0:e7:e5:dd:3d:f0:
78:a3:df:51:05:9b:20:3a:52:c3:fe:88:d9:26:3b:85:ef:e5:
e3:d5:57:e7:a4:f6:88:0b:5b:b9:f7:b9:db:36:5d:1a:36:a8:
1d:a4:3b:6d:bf:91:0c:01:d5:76:c1:bc:54:de:7c:20:fc:f5:
0e:52:da:05:fe:2a:44:bc:50:fc:a4:dc:b7:a2:e0:a7:58:d8:
d4:15:7b:d9:42:eb:92:3d:35:d7:cd:e6:2d:0d:f8:8b:a7:41:
e7:e8:1a:01:a9:97:f5:32:cd:7e:e0:e5:7b:ba:49:ae:95:39:
9e:73:4b:01:ad:33:af:16:fc:02:06:da:8d:65:75:a1:4e:3f:
85:aa:55:58:08:4a:b9:3a:1d:57:cf:e6:14:dc:90:01:71:33:
d2:33:69:ea:b0:12:7d:68:b7:1b:f3:e8:4a:34:2a:ab:5f:2c:
62:b5:88:46:df:8d:a2:63:6f:48:e0:83:b6:3e:4b:af:b3:86:
2d:8d:86:04:0b:bb:5b:de:db:b3:a3:da:af:71:f9:27:de:d3:
48:b2:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:32:08 2025 by rpki-client