Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L_ePfqwznswzGONRmCQ3VAdu5t8.cer
File: L_ePfqwznswzGONRmCQ3VAdu5t8.cer (raw, json)
Hash identifier: DrOv6DtLag4zG4ZV0sWS28w0mMfZdoM0OmB0ChrwWSc=
Subject key identifier: 2F:F7:8F:7E:AC:33:9E:CC:33:18:E3:51:98:24:37:54:07:6E:E6:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D69D8D096
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/e17f24-70ca-43dd-84ce-ae6f35b8935b/1/L_ePfqwznswzGONRmCQ3VAdu5t8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/e17f24-70ca-43dd-84ce-ae6f35b8935b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:02:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34583
IP: 194.116.226.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676085682326 (0x9d69d8d096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ff78f7eac339ecc3318e35198243754076ee6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:86:04:88:35:ed:53:8e:48:58:52:e4:54:
a7:c6:55:00:a4:53:a4:2f:f2:64:07:4c:ac:3b:93:
eb:f1:79:52:53:64:c1:a9:ed:ba:e7:15:3b:97:8d:
46:bf:dc:e9:77:0a:0d:82:9e:94:de:f7:93:46:e1:
cd:ce:00:e6:55:38:37:ee:0c:6b:41:66:19:33:c7:
c8:a7:6f:24:78:16:f6:b2:cf:3a:42:fb:91:ea:8f:
73:c5:e8:ed:eb:47:a1:5d:74:7a:d4:9a:53:4f:73:
0a:82:88:db:31:87:fc:fa:d7:2d:8e:89:b1:94:14:
20:05:25:f8:80:a4:9c:85:c7:e1:bc:59:32:dd:79:
5e:a8:3b:46:fd:cf:92:af:e9:c0:02:1a:17:16:b3:
a4:91:6d:c4:03:83:3c:d8:af:3f:29:9c:02:8c:e0:
63:e8:b7:4b:17:9c:ed:09:78:c0:b4:55:f1:47:62:
93:85:cf:19:3a:b4:03:0a:d2:fb:cb:a8:67:8d:66:
0f:45:05:a5:6f:d2:ab:29:9d:db:f0:31:cc:2f:21:
6d:1e:2a:0a:1f:97:81:66:ae:77:82:c4:5c:03:04:
79:05:df:dd:65:0d:6c:6f:b0:80:b9:92:4c:50:52:
34:17:9b:3c:76:49:7f:0c:9c:14:a3:29:22:a6:65:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:8F:7E:AC:33:9E:CC:33:18:E3:51:98:24:37:54:07:6E:E6:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e17f24-70ca-43dd-84ce-ae6f35b8935b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e17f24-70ca-43dd-84ce-ae6f35b8935b/1/L_ePfqwznswzGONRmCQ3VAdu5t8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.226.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34583
Signature Algorithm: sha256WithRSAEncryption
9e:db:94:4b:4b:3e:57:e8:82:67:8a:69:7d:51:d3:fd:89:0a:
06:02:2f:d0:fd:72:3f:85:2c:ce:ae:d1:10:4f:9b:c4:e9:0a:
23:e7:3a:6d:35:99:eb:5c:af:a3:84:6a:0a:8c:b6:af:2c:73:
ad:d7:de:5e:6e:6f:6b:a4:f1:26:c1:45:d8:af:5c:28:cf:cf:
81:1c:78:89:db:85:35:b4:7f:81:3f:26:80:aa:2a:49:e9:15:
ad:de:e5:bc:1d:ad:56:e3:60:fd:cb:ec:26:2f:56:ef:86:ce:
33:ba:b0:8d:03:5c:e8:b8:b9:c3:f9:4c:f7:e1:ac:2a:30:95:
4f:c8:ce:d7:d5:9d:2c:a5:8f:32:8d:a2:f4:c8:49:b4:d5:46:
2e:c4:f1:47:ba:ec:fb:c6:f6:79:62:23:5d:59:de:a9:ba:b9:
ea:87:de:97:fd:d1:9d:bf:69:13:7a:5e:e2:60:3a:9a:42:91:
53:1b:50:06:ad:52:e0:73:bb:53:a3:64:5b:72:2e:41:ea:06:
8d:cd:50:0e:c4:04:b9:06:68:a1:f4:0d:3f:fd:58:fa:bf:7d:
5f:36:ff:77:07:c4:84:61:f7:e6:47:71:f2:49:54:3a:4e:50:
55:97:a8:88:26:37:63:32:4a:49:9b:21:87:20:a5:0c:3f:1b:
8d:3d:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:58:55 2025 by rpki-client