Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JuzYNI6YKNBDwhWCosUVi_TYlQ0.cer
File: JuzYNI6YKNBDwhWCosUVi_TYlQ0.cer (raw, json)
Hash identifier: dCLCo6HMXfVObMb1n+HTD1xZ7d+Oo1qlyMYPU0SnUME=
Subject key identifier: 26:EC:D8:34:8E:98:28:D0:43:C2:15:82:A2:C5:15:8B:F4:D8:95:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245CCBBFC239F4A4B0FA6B36207A0C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/JuzYNI6YKNBDwhWCosUVi_TYlQ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.212.226.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:cc:bb:fc:23:9f:4a:4b:0f:a6:b3:62:07:a0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26ecd8348e9828d043c21582a2c5158bf4d8950d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:34:b6:74:58:f3:b9:8d:54:8e:5b:03:c6:
74:cd:c4:6a:25:20:14:83:3f:f1:0b:d1:bc:2b:e4:
c1:e8:c9:c5:cb:b2:60:b6:5b:d4:73:73:68:dc:a2:
e6:2b:85:d6:1b:65:03:77:fb:ad:3d:cb:8b:f7:b2:
47:cd:45:ab:79:80:94:f0:bf:36:de:6f:89:62:2c:
4b:89:71:29:d1:31:ec:9d:9c:24:52:6c:98:95:71:
92:62:b0:e8:24:b5:f3:1e:c6:bc:09:30:dd:ff:a5:
9b:21:34:33:29:4a:8c:cf:a3:08:cb:51:40:3d:e4:
8a:c8:de:e9:7f:44:67:45:2e:15:9a:b8:aa:09:e7:
54:f5:60:0d:3a:4e:af:43:4a:fc:47:fd:cc:1b:0a:
5e:5a:f5:82:56:8b:1c:f1:4e:ba:88:3e:d0:e8:5c:
af:56:45:28:f3:8e:0b:06:b8:4a:93:bc:0e:53:f4:
25:3d:1b:97:03:61:98:4e:8c:9f:ac:d9:88:ff:8e:
ac:fc:8e:c3:1b:e6:9a:f0:53:15:1c:41:cb:54:f2:
d6:a5:62:f8:02:12:9f:51:be:fe:47:12:60:d7:96:
f3:19:11:cd:ee:1b:35:d6:15:2f:fa:f7:86:d9:26:
85:af:04:9e:c4:ab:6d:61:65:9d:9a:b5:bb:0a:47:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EC:D8:34:8E:98:28:D0:43:C2:15:82:A2:C5:15:8B:F4:D8:95:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/JuzYNI6YKNBDwhWCosUVi_TYlQ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.226.0/24
Signature Algorithm: sha256WithRSAEncryption
39:32:7b:81:db:ef:c9:2c:2e:7e:37:81:f1:97:dc:53:f2:bf:
6e:1d:9c:19:4d:78:54:8e:a9:4e:00:d7:4a:92:d5:9b:d7:dd:
b2:88:22:c6:84:21:60:92:b5:f1:6f:10:93:27:bb:a7:f9:48:
d3:2d:a4:e0:f9:82:37:d7:f7:26:54:14:3e:2e:fc:da:d9:10:
f7:d7:22:b0:89:ef:a5:ad:3a:dd:68:16:22:88:4d:cd:c7:df:
7e:fa:21:54:ef:cf:fd:4f:c6:0d:d5:00:d9:20:f1:e8:94:bb:
12:5c:81:43:a8:df:f7:ae:35:9b:80:cf:e8:57:d4:9f:b7:00:
ec:8c:3e:01:d6:e1:cd:c0:1e:47:d4:e7:41:0f:dd:1e:ff:e1:
b5:03:e4:88:4f:a7:8c:2c:de:53:ce:94:88:40:5c:11:e0:26:
37:06:37:c6:e7:82:80:9f:3c:52:ef:bf:9d:d5:49:0a:8a:f1:
ab:31:56:34:24:33:d9:28:c8:3a:0c:39:85:6c:eb:54:9f:73:
2b:81:4f:5c:4d:11:d0:7e:2a:98:63:27:06:be:c6:bb:f5:a9:
79:5d:b6:95:9a:cc:1a:4d:97:39:fa:82:3c:ae:66:9d:03:8b:
1f:2f:7a:a5:b3:10:d5:28:aa:bd:85:fa:99:f0:27:c5:dd:4e:
cc:68:14:f2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVyRcy7/COfSksPprNiB6DBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMTEzNzM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmVjZDgzNDhlOTgyOGQwNDNjMjE1ODJhMmM1MTU4YmY0ZDg5NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArek0tnRY87mNVI5bA8Z0zcRqJSAU
gz/xC9G8K+TB6MnFy7JgtlvUc3No3KLmK4XWG2UDd/utPcuL97JHzUWreYCU8L82
3m+JYixLiXEp0THsnZwkUmyYlXGSYrDoJLXzHsa8CTDd/6WbITQzKUqMz6MIy1FA
PeSKyN7pf0RnRS4VmriqCedU9WANOk6vQ0r8R/3MGwpeWvWCVosc8U66iD7Q6Fyv
VkUo844LBrhKk7wOU/QlPRuXA2GYToyfrNmI/46s/I7DG+aa8FMVHEHLVPLWpWL4
AhKfUb7+RxJg15bzGRHN7hs11hUv+veG2SaFrwSexKttYWWdmrW7CkeOpQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCbs2DSOmCjQQ8IVgqLFFYv02JUNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzFjZjE2
OC05ZDAyLTQ4MTgtOTBmYS1jZjFhODhkMjI3YWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvMWNmMTY4
LTlkMDItNDgxOC05MGZhLWNmMWE4OGQyMjdhYy8xL0p1ellOSTZZS05CRHdoV0Nv
c1VWaV9UWWxRMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAstTiMA0GCSqGSIb3DQEBCwUAA4IBAQA5MnuB
2+/JLC5+N4Hxl9xT8r9uHZwZTXhUjqlOANdKktWb192yiCLGhCFgkrXxbxCTJ7un
+UjTLaTg+YI31/cmVBQ+Lvza2RD31yKwie+lrTrdaBYiiE3Nx99++iFU78/9T8YN
1QDZIPHolLsSXIFDqN/3rjWbgM/oV9SftwDsjD4B1uHNwB5H1OdBD90e/+G1A+SI
T6eMLN5TzpSIQFwR4CY3BjfG54KAnzxS77+d1UkKivGrMVY0JDPZKMg6DDmFbOtU
n3MrgU9cTRHQfiqYYycGvsa79al5XbaVmswaTZc5+oI8rmadA4sfL3qlsxDVKKq9
hfqZ8CfF3U7MaBTy
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:12:49 2025 by rpki-client