Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J44AJa65Chc3NMpFhBwMKQpWTTo.cer
File: J44AJa65Chc3NMpFhBwMKQpWTTo.cer (raw, json)
Hash identifier: 2R33MaOiNvMTCHSPqblnnAMtUrqxFZPT7foy00TbSGk=
Subject key identifier: 27:8E:00:25:AE:B9:0A:17:37:34:CA:45:84:1C:0C:29:0A:56:4D:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAF2866A9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/4bf892-22ec-46dd-8b9c-ae27cee54fae/1/J44AJa65Chc3NMpFhBwMKQpWTTo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/4bf892-22ec-46dd-8b9c-ae27cee54fae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 16:02:50 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.105.248.0/22
IP: 2a06:3a40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734213335706 (0xaaf2866a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=278e0025aeb90a173734ca45841c0c290a564d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:cb:4c:49:2e:d5:6a:38:a6:9b:c7:79:07:
52:b3:fc:92:32:e2:91:b8:80:cc:66:df:c8:ae:2f:
a6:8a:52:26:75:50:9e:8c:f2:42:17:ca:77:76:96:
cd:00:09:fe:85:07:a9:79:42:71:57:0c:f1:bc:d0:
32:bd:07:6f:ae:b5:f6:fc:b9:21:ad:11:5f:9d:4f:
ff:b1:dd:f5:6d:d3:ff:fe:d3:d3:21:6a:77:20:d6:
a7:15:1f:4b:d3:f4:a4:28:d2:9b:eb:36:a9:a3:e4:
2a:69:65:69:07:36:d5:46:0f:1d:c9:26:71:81:75:
4d:f7:ae:fb:b5:d7:7e:4e:27:d9:3e:c2:fa:7b:f2:
c5:78:2d:15:3e:3d:20:6b:fe:43:a9:c4:b7:ed:91:
b6:a1:65:e9:dc:c5:53:7b:f5:6a:2b:61:35:5b:cc:
48:a3:4d:ef:03:e2:3e:fd:aa:53:0d:f0:0f:3e:48:
3c:96:1c:ff:86:5d:3d:f9:4f:dd:50:f3:bb:96:f1:
f4:cd:08:27:82:5d:da:16:5c:72:6e:a6:5d:5b:cb:
de:aa:c6:26:b2:b4:41:a4:e3:56:57:23:0f:a1:16:
51:be:f3:d6:71:ee:5d:30:1a:ae:8a:39:99:53:bc:
0c:2b:8d:ee:e0:28:f5:b7:f8:db:87:fe:a9:2f:92:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:00:25:AE:B9:0A:17:37:34:CA:45:84:1C:0C:29:0A:56:4D:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4bf892-22ec-46dd-8b9c-ae27cee54fae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4bf892-22ec-46dd-8b9c-ae27cee54fae/1/J44AJa65Chc3NMpFhBwMKQpWTTo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.248.0/22
IPv6:
2a06:3a40::/29
Signature Algorithm: sha256WithRSAEncryption
1e:81:04:30:f1:d3:b0:b2:e8:5f:62:29:4f:e6:db:11:c7:18:
5d:0e:7f:c1:b4:f2:2e:84:84:02:f2:d6:1a:90:94:33:45:c7:
b6:48:1c:f2:b7:ae:5a:f4:a2:c8:6a:64:41:4a:66:e9:e4:d6:
df:53:2c:f8:d8:29:97:d6:70:c6:dd:9c:4c:7c:2f:64:81:5d:
84:b9:3b:89:11:a5:d2:70:6a:35:ef:b6:2d:8a:a9:20:d1:fc:
de:60:84:ad:7d:6a:d6:a1:ef:2b:44:35:e0:1b:b8:e9:dd:fd:
5d:ea:25:0f:b5:6f:0a:da:3b:d9:c1:7d:d6:11:53:68:d6:41:
50:be:3a:f3:96:ad:21:77:c5:4a:4b:af:8b:a8:76:e2:fe:64:
26:0f:e1:8c:91:fc:91:2b:4a:05:c9:af:53:59:64:c1:e3:73:
05:2f:47:ed:e9:f0:ca:a6:00:46:43:59:ae:1c:41:e1:c4:7f:
b4:b2:00:f0:93:53:6d:41:cd:c3:b9:78:54:77:74:0d:a5:fc:
52:4b:2b:69:ba:9f:2a:a9:c4:fc:4f:f0:98:66:2d:b9:90:2d:
17:1c:7c:23:99:13:c2:81:ee:11:59:c2:bb:e2:54:1d:b9:93:
11:ba:32:9f:e5:40:08:a3:48:e5:f5:ef:7f:26:34:ab:a2:66:
67:c0:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:06 2025 by rpki-client