Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer
File: J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer (raw, json)
Hash identifier: cdrWbpc18uh3BSJMkSW+t3SAKmS88Nt9eu840K1z7dU=
Subject key identifier: 27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D7129C0A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:03:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34594
AS: 34748
IP: 5.39.128.0/19
IP: 5.43.160.0/19
IP: 37.60.128.0/21
IP: 37.205.96.0/20
IP: 80.80.48.0/20
IP: 85.114.32.0/19
IP: 89.17.0.0/19
IP: 89.201.128.0/17
IP: 95.178.128.0/17
IP: 151.252.208.0/21
IP: 151.252.224.0/19
IP: 176.222.32.0/20
IP: 185.10.40.0/22
IP: 185.18.60.0/22
IP: 2a02:ac8::/32
IP: 2a03:6100::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676208427168 (0x9d7129c0a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27aaf3bf54aff86f1fa86b643301e915ce8a8acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:4f:ba:1a:eb:d9:7c:29:13:77:af:15:36:
67:25:07:1b:d0:ad:1b:15:4b:62:7d:0d:07:35:26:
05:b7:38:a8:7a:38:d9:d8:5c:dc:83:26:64:b7:69:
81:5b:ca:77:6c:31:39:79:14:5a:04:ef:b8:73:91:
89:45:31:d4:4b:03:13:92:cb:b2:84:60:e5:49:6d:
82:51:ed:b2:c7:15:82:9b:7b:31:4f:2f:5e:4e:ad:
67:c1:00:70:05:67:03:7a:15:76:a2:1d:57:86:c7:
58:ac:c4:c9:f6:ec:7c:1f:3c:5f:14:68:12:61:19:
03:7e:96:ad:df:00:4f:1b:49:62:0e:6b:06:a6:41:
01:2b:99:4b:6b:f6:1e:b9:87:e6:ff:aa:95:1b:3d:
8b:d8:28:21:07:7f:af:f4:e8:81:67:6e:48:56:99:
a5:b9:33:c9:b8:f3:0c:35:0f:ec:f1:ae:c6:b8:c9:
18:a1:bf:d9:e4:10:76:4f:f9:17:00:9f:12:44:e9:
6e:ba:85:22:d2:b8:39:27:b1:5c:7f:8e:8f:e2:70:
ca:c3:5b:71:c4:7a:fe:ea:51:21:46:4b:98:72:50:
19:2c:33:87:6a:cf:08:09:44:da:b6:c6:ab:16:ce:
84:38:d3:39:84:ea:f0:30:74:23:2d:9d:ec:f5:78:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.128.0/19
5.43.160.0/19
37.60.128.0/21
37.205.96.0/20
80.80.48.0/20
85.114.32.0/19
89.17.0.0/19
89.201.128.0/17
95.178.128.0/17
151.252.208.0/21
151.252.224.0/19
176.222.32.0/20
185.10.40.0/22
185.18.60.0/22
IPv6:
2a02:ac8::/32
2a03:6100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34594
34748
Signature Algorithm: sha256WithRSAEncryption
27:c6:05:78:e7:e1:81:32:7a:ff:af:50:65:7d:92:c1:5f:e2:
62:5b:d9:c0:9f:b0:14:e9:1c:b7:70:0a:19:5d:60:02:f8:f3:
df:c8:93:45:5e:46:72:fe:ee:0c:b5:6b:67:77:cb:06:5a:da:
29:2c:66:1a:f0:40:cf:fc:23:e3:98:13:f7:70:b6:dd:87:93:
99:bf:d9:ea:c1:7d:e7:e3:96:4d:15:51:65:51:60:49:08:e0:
9c:3c:64:31:05:c3:62:07:cd:9d:61:cf:c1:b1:ea:0d:f6:c4:
c3:fa:ac:44:39:87:10:82:c6:19:35:40:6e:af:d0:58:cb:fd:
9b:4b:2a:f3:3f:59:b1:af:e9:ca:59:c6:0c:9b:52:f9:0d:64:
ad:d4:c6:37:ae:ca:55:cc:19:26:7d:68:71:05:41:b6:79:59:
81:95:15:d3:cd:a5:20:f1:7c:89:e2:21:90:87:86:70:74:6e:
8f:3b:25:6d:86:02:43:0d:ae:f1:19:f6:35:32:e3:73:91:4c:
c4:55:b3:04:47:af:c5:be:f6:3c:2e:fc:f3:24:3e:8d:88:bf:
16:c8:c7:4d:ba:0f:fc:e2:96:c5:30:b7:96:13:14:9c:ca:6c:
72:fe:74:37:97:92:7e:00:4f:86:19:15:7f:1e:39:8c:01:b9:
08:47:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:36 2025 by rpki-client