Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JnmadZ7rI52ugmf3RwF5LGGMzJA.cer
File: JnmadZ7rI52ugmf3RwF5LGGMzJA.cer (raw, json)
Hash identifier: Mqov/HQFXWQcF6yNy6BM2/kvANDr7nyNseJHQUXoap8=
Subject key identifier: 26:79:9A:75:9E:EB:23:9D:AE:82:67:F7:47:01:79:2C:61:8C:CC:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A92B068C0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/e6607a-b0de-4b79-8161-46a39cd53100/1/JnmadZ7rI52ugmf3RwF5LGGMzJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/e6607a-b0de-4b79-8161-46a39cd53100/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:08:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.210.128.0/22
IP: 2a0b:57c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726571322379 (0xa92b068c0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:08:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26799a759eeb239dae8267f74701792c618ccc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:a1:b1:c1:53:f5:8b:92:13:7d:52:bd:8f:
58:fe:c6:f4:b2:59:30:5c:ed:2d:f3:89:63:19:26:
a3:e4:be:df:63:f6:a3:e8:02:5a:f2:cb:ba:a6:f5:
04:56:0d:94:fc:b9:e2:ad:69:5e:0f:d9:1b:3d:8e:
c6:c9:ae:f6:11:f9:2d:be:d4:e5:0a:d9:9f:13:47:
81:20:03:34:67:93:12:2f:b4:ec:ef:44:b1:41:00:
f2:61:ab:ef:7c:d4:1d:f2:53:a4:b1:9e:d4:b0:ea:
6d:cc:f9:56:c6:5f:2e:e1:3d:96:fe:de:cf:bd:e8:
f4:7a:f4:63:f6:2f:40:06:33:5a:df:5c:8a:52:fa:
4a:d2:94:06:22:51:4e:99:97:08:67:f9:a5:45:d3:
e1:41:b2:5e:f2:01:41:bf:07:65:88:0c:f6:fe:13:
f8:88:7f:a9:8a:a7:b8:28:a7:b8:f2:b4:4a:e7:4a:
c0:d5:94:7e:33:2e:d9:95:86:88:5d:e2:18:0e:a4:
83:f4:7c:91:79:64:5a:8c:8c:71:25:85:0f:7f:05:
fe:5f:1d:32:33:0a:8f:e4:22:54:58:e2:24:c3:a9:
cf:ce:18:6b:7c:b8:50:f6:15:57:e2:25:b2:70:6c:
0d:f9:22:ff:3b:2c:47:c2:cf:40:ff:6d:55:19:b0:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:9A:75:9E:EB:23:9D:AE:82:67:F7:47:01:79:2C:61:8C:CC:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6607a-b0de-4b79-8161-46a39cd53100/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6607a-b0de-4b79-8161-46a39cd53100/1/JnmadZ7rI52ugmf3RwF5LGGMzJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.128.0/22
IPv6:
2a0b:57c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:60:7a:ae:bb:a6:28:9c:ca:df:61:e8:46:e7:c3:c6:9c:ed:
e7:c3:27:d8:e5:7c:74:5c:c3:9e:2d:4b:a5:28:d7:f9:b5:51:
98:76:45:4b:96:34:e4:31:5c:d0:ae:48:42:0c:e4:a1:03:01:
ac:9f:10:49:9b:28:b1:71:3e:ed:9a:af:0a:10:8b:b4:a2:d3:
98:97:b1:3b:a8:b4:d6:9f:a2:12:b5:c2:fc:4d:ca:0a:6b:cd:
61:b3:df:68:cf:69:c6:80:c8:ee:0f:1c:84:f8:3e:a3:0f:c3:
29:5e:0d:f6:c7:48:d6:2e:f8:49:c7:02:94:b5:87:13:91:13:
b3:4d:01:99:e1:0a:15:ff:66:a6:e2:2c:7a:f9:bd:56:a8:f4:
14:a8:17:76:8d:a7:97:1c:d9:1d:78:8c:1a:d7:79:1d:5b:3e:
9a:3d:47:57:50:9a:83:e3:e4:92:23:e2:48:53:8a:97:aa:35:
d0:c4:8f:2f:92:68:e7:e0:87:25:b0:2d:20:ea:7c:9d:08:3e:
62:5e:6d:7a:28:de:b9:4b:e7:26:16:7b:bc:e9:cd:01:b4:f0:
5e:93:0a:7f:03:1d:22:cd:3e:93:a3:fb:f7:f3:11:c6:67:54:
a0:95:fa:0d:ca:02:cf:b8:cf:8c:4d:4b:d0:92:64:bb:93:ab:
9b:ea:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:43 2025 by rpki-client