Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N-H6QBP6uF0yN7HDX6oOTvC5uBc.cer
File: N-H6QBP6uF0yN7HDX6oOTvC5uBc.cer (raw, json)
Hash identifier: noxg7MrrVJ6cn+ALynNPazrewpW5KInr1C/wrZ3Cv5c=
Subject key identifier: 37:E1:FA:40:13:FA:B8:5D:32:37:B1:C3:5F:AA:0E:4E:F0:B9:B8:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B606181A7F73F0CC5C487C7BA0EF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/N-H6QBP6uF0yN7HDX6oOTvC5uBc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 59492
IP: 193.142.213.0/24
IP: 193.187.76.0/22
IP: 195.182.7.0/24
IP: 2001:67c:538::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:60:61:81:a7:f7:3f:0c:c5:c4:87:c7:ba:0e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37e1fa4013fab85d3237b1c35faa0e4ef0b9b817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:21:ff:75:d3:ac:b5:f5:39:3b:f6:c8:08:
54:8b:bb:bc:d7:3f:44:3b:c8:00:fe:4b:51:41:54:
71:b9:2d:15:3b:86:0c:02:33:03:b1:67:60:d4:89:
2a:3d:d1:d4:6f:ca:b1:61:55:b5:c0:8b:43:24:d6:
5f:b2:dd:f5:0b:ce:59:21:a7:26:5f:48:2d:a6:6f:
9f:ef:2c:9a:b5:df:f0:b5:ae:98:69:f6:19:ab:1c:
2a:77:67:b8:21:3e:8c:41:de:e1:37:5d:84:49:44:
82:41:4a:56:c0:e9:88:60:4e:eb:4a:98:c1:20:b8:
72:b0:98:62:ef:33:48:ce:59:cd:fc:eb:d1:aa:28:
1b:61:f8:d1:82:9c:8a:cd:58:74:89:55:35:95:41:
e3:42:7d:6f:39:8b:59:f7:a0:62:ba:68:94:44:d6:
3e:d5:ef:31:b1:e7:aa:42:60:9a:5c:c6:75:24:ab:
e9:a9:ef:76:5b:53:87:02:37:7a:d0:85:ad:c9:f5:
8b:00:92:df:37:e2:e2:71:82:03:0a:20:f3:a6:4f:
a5:bd:45:2a:65:a3:a5:5b:c5:3d:b6:09:6f:a6:86:
6e:81:cd:3c:13:c0:45:1e:95:aa:78:a1:bd:31:d8:
e5:e0:e9:36:67:d3:ee:79:a3:f0:1f:55:aa:ff:ea:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:FA:40:13:FA:B8:5D:32:37:B1:C3:5F:AA:0E:4E:F0:B9:B8:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/N-H6QBP6uF0yN7HDX6oOTvC5uBc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.213.0/24
193.187.76.0/22
195.182.7.0/24
IPv6:
2001:67c:538::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59492
Signature Algorithm: sha256WithRSAEncryption
27:44:50:af:03:d8:92:8e:da:cb:a4:66:a6:25:10:05:e8:e0:
b2:6d:02:1c:b6:71:23:77:8b:ae:24:40:d3:1c:ee:43:8a:03:
b4:c0:3f:f3:c3:09:38:a3:a2:f6:a1:63:f1:05:60:19:a1:69:
9b:89:cf:fb:c1:49:21:4e:46:1d:85:8e:87:39:58:6a:cd:40:
93:6a:c3:1f:e7:de:64:2e:b1:e5:d8:31:3d:ca:ed:22:60:3a:
f4:3f:6d:ef:0e:58:05:b6:81:7a:b0:53:97:15:e2:68:8c:08:
c2:d5:09:8e:82:23:b1:94:9b:a7:4a:8a:cb:ad:d6:a3:88:35:
13:83:c3:49:8d:14:bb:8d:ef:65:f4:eb:94:30:4d:e1:8b:8d:
64:69:67:33:b7:80:17:bd:b1:34:5b:f1:fe:b0:bb:ed:86:e5:
71:7d:77:1f:b9:f5:a6:90:26:36:f0:39:d8:cc:67:6e:e7:9f:
50:d7:a9:ae:bd:cd:50:5f:8e:5c:1c:7e:12:27:c4:0a:99:04:
2c:66:0a:12:5d:9c:08:28:5f:c5:be:fb:29:80:8b:36:27:17:
65:0d:82:61:2e:f0:ff:99:da:0c:77:b5:63:75:0c:40:26:d3:
64:a3:70:74:df:75:6a:26:53:fa:5d:90:f3:11:65:9a:ac:0e:
75:42:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:13 2025 by rpki-client