Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NANb92Ycu1JJACZPQyKH_Q97n7E.cer
File: NANb92Ycu1JJACZPQyKH_Q97n7E.cer (raw, json)
Hash identifier: mG59SPdb/4ePsc0sFowh9Q893g6JgefXaN3tURbO1pQ=
Subject key identifier: 34:03:5B:F7:66:1C:BB:52:49:00:26:4F:43:22:87:FD:0F:7B:9F:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A231F99EA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/NANb92Ycu1JJACZPQyKH_Q97n7E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:06:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.93.99.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696623144617 (0xa231f99ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34035bf7661cbb524900264f432287fd0f7b9fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:41:ca:1f:b7:70:1b:5a:4e:4c:65:14:8c:
2e:ef:e2:be:30:fa:e9:24:a8:d7:9e:ba:8f:28:88:
d9:74:f3:e1:39:e1:d2:ba:6f:fc:47:89:d2:9a:50:
13:5a:20:88:67:ce:6c:7d:2a:d4:f3:ec:1e:66:ca:
b5:7f:23:6b:b0:1a:49:99:81:4d:4b:8c:7f:93:bb:
ac:08:09:d6:6f:30:3e:42:f6:37:e8:dc:d2:96:ef:
84:62:ee:b9:44:17:11:29:72:7c:8b:f9:90:51:08:
8a:72:4c:61:ec:e8:69:5f:97:64:9e:89:4f:65:c8:
de:21:1f:c9:14:16:ff:61:02:ca:3b:54:82:fa:39:
23:8d:88:c3:1f:0d:78:ed:e7:92:52:26:3a:4c:08:
c2:3a:c3:fc:0a:b9:0f:16:0d:6d:bb:98:56:c6:dd:
d6:ad:ff:9a:45:76:df:9f:bc:28:70:ed:4a:70:02:
42:85:f2:9f:d5:06:4d:65:cd:c1:f9:52:4b:76:30:
bf:ea:1d:b5:f9:fe:5f:0e:c3:a1:af:27:25:98:0d:
72:50:6f:be:c9:70:07:0e:2e:1a:90:84:24:e5:b6:
f1:47:ff:76:be:c9:c5:9c:d9:21:21:08:e9:fe:e3:
c9:3a:cd:be:96:78:dd:e0:19:8a:ee:b2:7b:f6:09:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:5B:F7:66:1C:BB:52:49:00:26:4F:43:22:87:FD:0F:7B:9F:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/NANb92Ycu1JJACZPQyKH_Q97n7E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6c:15:03:38:54:fb:12:10:c5:45:11:d5:c2:6a:f8:13:ec:
56:b3:70:be:ba:41:01:ef:d9:2e:d5:d8:b2:84:08:a3:0e:46:
bf:1d:38:4a:7e:b4:10:98:ac:81:99:63:ef:75:c9:ff:2b:63:
13:ce:00:2d:84:b3:e0:c7:cc:78:b5:bd:f9:68:99:49:5e:51:
f1:71:bf:d1:b1:5f:e0:b9:c1:4d:b9:a5:29:68:f0:97:87:41:
54:d3:32:0a:ae:4d:9f:60:1b:b8:e7:54:44:2d:15:4f:92:0c:
8e:a6:c6:18:b4:5f:4d:dc:c6:b4:fe:d6:a4:b7:1a:4d:a2:6c:
be:68:f8:65:0c:16:23:cb:44:15:76:70:27:db:14:c6:53:15:
91:e2:8d:26:41:a7:74:b3:c9:31:b3:e9:34:7f:41:0a:22:39:
b0:8c:71:fe:75:d4:2b:0c:23:61:a2:4a:b1:ca:c1:43:27:18:
5e:3d:09:68:ac:e5:94:94:e2:01:1a:72:05:e9:5a:f3:bb:58:
36:ab:5a:de:ba:7d:3e:cd:f6:e9:0f:4b:1b:f1:b3:8a:37:2b:
d8:40:b0:fe:76:62:4d:22:0d:6f:70:f9:6a:cf:85:f7:c0:a7:
40:ce:90:58:84:88:4e:83:ad:e8:9b:bf:69:19:34:16:00:e6:
54:03:c5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:32:53 2025 by rpki-client