Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J1jKBNQK6JpPgspgLK8-93edhf0.cer
File: J1jKBNQK6JpPgspgLK8-93edhf0.cer (raw, json)
Hash identifier: Il7tRebv7rt3gHthGZwrAsN5Ia7lquRBl5+XExeS4UE=
Subject key identifier: 27:58:CA:04:D4:0A:E8:9A:4F:82:CA:60:2C:AF:3E:F7:77:9D:85:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ABC4E6FE3F08BFD474E5A39105AC16392
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/c25dea-ead2-4b70-aaf6-58dda37deee4/1/J1jKBNQK6JpPgspgLK8-93edhf0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/c25dea-ead2-4b70-aaf6-58dda37deee4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 22 Sep 2023 09:52:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.124.149.0/24
IP: 2a04:3440::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:4e:6f:e3:f0:8b:fd:47:4e:5a:39:10:5a:c1:63:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 09:52:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2758ca04d40ae89a4f82ca602caf3ef7779d85fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:53:23:31:e7:bb:25:69:ff:b9:0e:b9:c1:
00:d3:ee:07:9c:53:31:a3:09:01:2c:ee:39:1a:f9:
f6:7b:34:fd:81:26:2b:41:fa:3c:5c:c7:1b:dc:8f:
8f:2d:83:41:58:83:10:66:c6:25:c1:fc:d8:8c:1f:
34:a5:3c:9f:89:6c:26:63:9d:12:26:e0:8d:8a:95:
86:20:eb:e9:15:5a:da:ad:74:91:49:7d:4d:38:71:
a0:41:c8:ca:e2:21:c4:d5:e4:57:5a:13:10:3f:c9:
d7:33:cf:9a:14:76:2f:8e:b1:ae:df:ad:f4:63:96:
da:45:d5:34:9e:ed:f9:a3:d6:ee:9d:d9:e1:42:fd:
21:4b:1a:97:b2:60:9f:61:2f:70:12:a1:af:e5:98:
3b:44:10:ba:66:19:69:ce:27:75:4a:93:03:5e:7f:
46:ae:88:c6:39:34:07:b4:e5:f3:14:5f:7e:56:c2:
32:7c:9d:a2:e4:9c:3b:f5:d1:b4:e0:0b:c2:e7:9b:
6a:30:96:11:7d:e2:c6:9f:26:4c:03:d1:53:bf:20:
16:e6:78:03:d9:3f:9f:f9:92:6c:81:af:1c:c4:1d:
4b:24:a8:3d:ce:13:d6:28:b6:30:b2:52:af:46:4c:
0a:7f:d7:5c:c7:17:83:f5:e9:8c:f1:f9:80:05:f3:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:CA:04:D4:0A:E8:9A:4F:82:CA:60:2C:AF:3E:F7:77:9D:85:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c25dea-ead2-4b70-aaf6-58dda37deee4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c25dea-ead2-4b70-aaf6-58dda37deee4/1/J1jKBNQK6JpPgspgLK8-93edhf0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.149.0/24
IPv6:
2a04:3440::/29
Signature Algorithm: sha256WithRSAEncryption
75:a7:6d:a5:99:99:55:2d:53:d4:79:ad:01:8d:da:fa:28:69:
27:89:83:47:5c:a1:40:91:37:af:83:5d:ab:99:e3:59:d3:09:
4a:45:3c:31:d4:9f:43:84:0c:50:70:5e:07:70:6c:f1:e8:ae:
4c:26:57:92:4e:f5:0b:3b:33:b0:21:63:8d:a1:92:a7:cb:7f:
65:4a:52:bc:0d:47:f4:e5:ff:1f:96:70:ef:05:de:5a:1b:2e:
f6:89:b3:b9:00:ae:4e:88:f1:08:b5:11:03:67:03:7a:5c:87:
f2:9e:b8:e0:8b:36:d2:bb:8b:7e:71:b5:1e:88:5a:76:fe:7a:
dd:94:d0:4b:8c:53:78:f6:94:f3:98:63:a6:9a:74:48:00:97:
7c:9d:eb:c6:b5:35:c4:4a:f8:31:6f:d4:3b:2a:1a:55:1d:2d:
6c:2e:67:b3:a5:80:bc:56:8c:58:39:d7:5a:93:b3:cf:c6:24:
1f:d1:8f:7c:1e:4d:0c:65:eb:02:64:3c:9c:2b:51:48:a2:3b:
4d:6b:85:68:91:dc:d9:98:9d:08:81:2c:22:d0:e0:ba:57:0e:
3a:6b:25:af:ac:07:99:e3:7c:9d:64:e9:49:59:41:2a:76:77:
3a:85:08:67:99:40:8f:e7:8f:3c:d3:79:74:41:fa:2f:f8:09:
f1:45:be:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:29 2025 by rpki-client