Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KIeYp1TW2irKGPYX9j09XxQpe4E.cer
File: KIeYp1TW2irKGPYX9j09XxQpe4E.cer (raw, json)
Hash identifier: 7Fq7dDxwJklgJg88/ivIOILciqlmu6zeA9JOYkonILs=
Subject key identifier: 28:87:98:A7:54:D6:DA:2A:CA:18:F6:17:F6:3D:3D:5F:14:29:7B:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB0904F0F2FB08FAC09DDD1ED6759F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/KIeYp1TW2irKGPYX9j09XxQpe4E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.213.91.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:90:4f:0f:2f:b0:8f:ac:09:dd:d1:ed:67:59:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=288798a754d6da2aca18f617f63d3d5f14297b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:e9:95:c6:e3:8b:fe:bb:46:81:40:e7:ca:
28:3b:53:bf:7b:87:2b:48:c6:ab:ed:56:52:2a:72:
32:54:ec:68:98:e1:b5:4a:5c:86:82:c0:92:30:95:
fa:82:b6:e9:50:5a:04:93:f3:14:be:c2:17:2f:cb:
43:04:bb:16:cc:3d:f8:fc:6c:d1:c4:31:70:6f:9e:
73:20:a8:fe:cd:be:c8:8b:af:11:df:f0:b8:7d:f1:
e1:86:30:4e:47:53:b1:d9:b0:24:62:cd:4c:fc:ea:
9e:0e:b2:92:b7:cb:c4:04:f0:ec:82:40:47:af:f9:
c4:51:cc:63:b7:a0:9f:41:c5:51:88:fb:fa:3e:ed:
2b:43:fe:f5:3c:fb:4f:ce:de:a3:62:92:be:e9:5f:
f1:83:ae:b1:d8:1a:ae:18:10:bb:6b:8a:8a:20:af:
0b:af:38:53:f0:47:95:49:86:e2:fc:f9:aa:a4:a0:
40:57:64:f1:09:5e:d4:8e:5b:46:df:6e:2e:3f:c7:
63:a9:c1:f9:37:16:86:e0:ff:27:9e:8c:a9:ed:c6:
e0:99:f5:d5:93:e9:75:eb:21:f4:58:21:71:10:39:
29:52:7c:66:66:98:9c:96:04:51:ca:f3:a7:fe:12:
74:39:e7:ce:b6:65:d0:16:f5:f1:cc:06:d4:09:d4:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:87:98:A7:54:D6:DA:2A:CA:18:F6:17:F6:3D:3D:5F:14:29:7B:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/KIeYp1TW2irKGPYX9j09XxQpe4E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.91.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0b:0b:41:28:67:20:49:66:4a:f1:b7:c8:6b:16:46:4c:09:
e0:99:ec:e4:6b:01:c7:77:d4:2a:82:30:15:92:cc:22:4e:cb:
02:93:8d:91:57:50:d1:00:35:7f:ea:5d:99:23:a5:f7:23:d7:
e1:a7:4c:1f:18:e3:83:0d:16:be:e0:4d:b1:7a:eb:91:b9:4f:
a3:71:09:3c:86:9d:2d:ef:1a:2e:c3:10:00:e0:51:3e:d8:a8:
67:31:9d:c7:d7:ee:8c:eb:b6:40:6c:a1:f8:fe:59:fb:18:f5:
61:b2:42:a7:dc:47:2b:83:01:52:24:a4:54:28:e2:a5:77:0c:
09:46:3a:b2:00:42:15:38:45:a4:d4:20:b9:56:61:2d:da:1f:
17:f2:70:ca:b3:85:6a:27:f6:27:84:7a:d5:d6:c3:57:76:5c:
5c:21:8a:13:ca:40:7e:12:e3:71:88:11:e0:15:d5:06:46:2e:
c5:02:04:1d:f1:e4:09:6d:74:a7:cf:fa:df:89:2c:c4:ef:de:
22:8a:d1:f2:4f:1e:56:1b:35:b8:21:f5:26:cf:0a:dc:d2:5b:
b9:cf:f0:3d:27:59:3b:8d:66:c0:e7:32:75:16:05:6a:33:d1:
6c:88:e7:27:7d:c9:2c:f8:b7:b7:09:ee:51:e6:11:a0:4e:80:
46:f0:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 06:02:28 2025 by rpki-client