Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KbKaHACXpZtHXgM9EZBE5nD4_xU.cer
File: KbKaHACXpZtHXgM9EZBE5nD4_xU.cer (raw, json)
Hash identifier: Avmg+dbY3Tgf2Da2ALWmi1xmaWdg8Ro0fLJDAGWpPDg=
Subject key identifier: 29:B2:9A:1C:00:97:A5:9B:47:5E:03:3D:11:90:44:E6:70:F8:FF:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99A951705A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/KbKaHACXpZtHXgM9EZBE5nD4_xU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:58:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 212.102.118.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659970682970 (0x99a951705a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29b29a1c0097a59b475e033d119044e670f8ff15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:d8:b7:d1:fd:9f:84:30:5d:56:17:aa:08:
18:a9:fa:25:ae:d0:11:5e:63:bb:0f:5f:84:ec:44:
b4:34:ec:67:7c:40:44:84:4c:61:9a:12:7d:e1:ba:
b7:31:22:24:e9:ae:7e:e1:06:bc:a6:ff:82:b8:32:
cd:2b:70:39:56:d4:08:5c:23:ed:26:93:a4:3d:d7:
b9:a6:fb:65:98:ab:39:6c:5e:be:04:16:4a:84:7e:
3f:ac:17:9d:d0:ec:07:8d:2b:69:89:40:21:6a:78:
f9:4e:fb:e5:89:7b:05:c0:3b:fc:f6:37:7c:a7:96:
49:4e:21:a7:01:36:2d:5e:37:1e:07:79:8e:38:74:
cc:85:c4:d4:19:10:23:d1:a3:4d:2f:c4:54:89:3f:
fc:d9:19:1c:47:50:b7:7d:9d:9f:31:3e:3a:97:2f:
99:79:9c:c8:00:82:27:84:c3:96:7e:50:94:4f:32:
94:d0:77:a6:45:3b:c6:04:cd:47:f1:31:8e:c0:83:
3a:cf:f8:6d:02:eb:f3:49:cc:83:28:0b:de:57:f8:
0e:e1:3b:23:b2:5f:86:0d:74:ea:70:3b:09:83:c7:
30:cc:43:d8:fc:c4:85:e8:71:2c:72:0e:7b:2b:d5:
f6:a0:98:17:c9:0f:90:b9:82:d8:ed:c5:c6:29:1d:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B2:9A:1C:00:97:A5:9B:47:5E:03:3D:11:90:44:E6:70:F8:FF:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/KbKaHACXpZtHXgM9EZBE5nD4_xU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.118.0/24
Signature Algorithm: sha256WithRSAEncryption
14:49:32:1b:c6:fd:9b:68:66:35:ee:4c:12:d3:b3:d3:49:a2:
25:0a:c4:8e:b2:7a:9e:9f:72:dd:53:ca:17:cb:c3:7c:9e:99:
ed:7b:4c:0b:3a:30:28:07:6d:2b:f4:27:63:6d:d4:f8:a9:db:
7e:04:98:95:bd:9c:27:d0:54:46:f2:4b:13:e6:f6:ec:ea:6a:
e3:91:70:bf:f6:85:67:ab:b3:ae:62:fd:05:e2:25:fd:6c:a1:
43:07:54:f4:ca:6b:8b:98:61:d2:af:17:02:ef:52:8e:ed:1e:
c8:e8:c1:f5:41:11:54:c2:30:80:8d:c7:7e:91:89:79:3c:3c:
7e:66:ff:ba:e7:46:73:c8:b9:bc:d3:89:24:d4:05:1a:bf:7e:
0b:18:12:cb:b8:17:c6:be:40:6d:7e:ff:32:4b:69:5e:44:27:
32:ac:26:fc:8b:6f:bc:80:be:75:7d:bb:29:41:96:7e:e7:96:
35:dd:54:f7:75:2f:50:67:c6:7e:92:66:5b:c1:10:53:36:8f:
88:89:ba:91:78:c6:5a:0a:72:69:24:03:db:9d:93:bd:4a:2a:
b1:55:a0:af:0a:9a:41:8e:28:eb:a9:d0:e5:01:1d:51:08:c6:
4b:e7:75:bc:5e:01:99:01:82:82:f9:f4:4c:39:a2:c5:b1:02:
2f:95:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:45 2025 by rpki-client