Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JXxNYXV9pC_tQ7EiDj9ZUQT8shU.cer
File: JXxNYXV9pC_tQ7EiDj9ZUQT8shU.cer (raw, json)
Hash identifier: YEuKUDeNfRdnXdpgteY6tIgVZysGZjGbmpAdxOuZhWo=
Subject key identifier: 25:7C:4D:61:75:7D:A4:2F:ED:43:B1:22:0E:3F:59:51:04:FC:B2:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A71B7FA38E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/9e169d-8177-4009-89ea-27756023f76f/1/JXxNYXV9pC_tQ7EiDj9ZUQT8shU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/9e169d-8177-4009-89ea-27756023f76f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:56:04 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 197077
IP: 176.98.212.0/22
IP: 185.137.140.0/22
IP: 217.198.192.0/20
IP: 2a04:a450::/31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717720888206 (0xa71b7fa38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=257c4d61757da42fed43b1220e3f595104fcb215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:dc:00:41:a3:33:03:26:67:0f:b1:6b:5a:
26:82:2e:c2:13:13:5f:ef:d3:12:9c:53:68:d2:62:
7b:aa:19:fb:05:61:66:d6:f3:68:a6:0d:1f:a5:71:
e9:74:1e:55:90:10:e0:eb:af:3b:a9:cc:9e:a6:2d:
28:cf:09:0f:55:2f:a9:28:6b:95:dc:ca:85:42:65:
ce:c8:14:10:a5:85:44:2e:1c:2f:ab:c4:65:fb:4d:
e8:c4:2e:d8:c0:28:16:74:33:8f:05:9f:f1:61:9a:
88:0d:56:c2:2e:a7:55:7b:85:2d:af:0e:65:76:a6:
3c:0f:24:83:8c:49:39:cc:be:ae:bd:a8:88:97:2f:
34:79:b2:9b:a0:53:54:b0:82:55:e0:7c:c9:73:33:
42:df:c1:bc:16:77:c9:45:f7:54:d5:a7:20:04:00:
5a:5b:92:0d:35:29:47:be:c8:75:02:86:df:c6:8b:
6b:f7:27:41:ba:f4:a5:3f:68:b5:47:cf:34:8d:ff:
03:ff:09:ae:14:35:12:5b:45:3b:59:53:6e:9d:92:
32:b2:6e:f0:a9:8f:f6:fa:b8:b5:9b:d3:f9:82:ce:
b0:8a:53:ce:aa:ea:1d:67:1c:bd:3b:8a:66:bc:17:
19:2f:83:6f:05:43:30:bf:f6:12:0f:d3:fa:b6:25:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:4D:61:75:7D:A4:2F:ED:43:B1:22:0E:3F:59:51:04:FC:B2:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e169d-8177-4009-89ea-27756023f76f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e169d-8177-4009-89ea-27756023f76f/1/JXxNYXV9pC_tQ7EiDj9ZUQT8shU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.212.0/22
185.137.140.0/22
217.198.192.0/20
IPv6:
2a04:a450::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197077
Signature Algorithm: sha256WithRSAEncryption
ac:a7:d7:b4:98:3f:6b:db:fc:2c:35:9f:c5:06:43:30:4e:16:
84:fb:3d:9f:7e:dd:61:18:f2:cc:4f:a7:3a:40:e9:01:8e:ef:
63:6c:be:6f:c7:73:17:24:45:1e:4a:ec:52:a8:bc:4b:b4:90:
61:17:97:e0:27:66:a7:9b:f7:00:ef:77:6f:8b:3e:c3:f2:0b:
fe:9d:62:0d:1a:ce:3f:6a:9c:cf:2b:7d:91:37:dc:74:d8:54:
ad:8b:ec:61:b2:f1:71:d9:c6:ea:b8:0e:56:47:95:09:39:eb:
2f:ae:36:56:bd:a8:e9:7e:45:70:4c:25:77:4c:ab:eb:86:02:
94:1e:f6:0d:32:d4:f1:5d:39:d5:8c:4a:55:6e:c9:bd:b2:5b:
72:c6:3a:0b:16:ff:a6:59:7d:17:4a:87:ee:d0:fc:1f:50:e0:
18:8e:26:b5:c9:a4:14:e0:05:54:d2:61:e9:51:55:a2:2e:23:
b4:e1:0f:51:e7:bc:76:45:65:59:a0:42:13:c7:ff:42:e7:aa:
49:6c:b0:7a:56:31:ca:db:d4:66:6f:3a:c4:55:1d:be:27:9c:
24:7a:2b:cc:2d:99:92:23:e7:3e:7c:04:b1:86:9b:ce:b0:3a:
2e:9c:d1:f8:0b:9b:2f:ea:f9:ea:96:1d:9b:8e:08:04:6c:8e:
dc:ee:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:29:15 2025 by rpki-client