Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NBy0b72E2QqEAb6yQZ67zvrFvCI.cer
File: NBy0b72E2QqEAb6yQZ67zvrFvCI.cer (raw, json)
Hash identifier: dqOfP/GxaQEGTYVk+JGF8gohWaEk8CMJlZ+SBJQV6Yk=
Subject key identifier: 34:1C:B4:6F:BD:84:D9:0A:84:01:BE:B2:41:9E:BB:CE:FA:C5:BC:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A40E907E68
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/bf6937-5b57-441f-b241-14d61d07763e/1/NBy0b72E2QqEAb6yQZ67zvrFvCI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/bf6937-5b57-441f-b241-14d61d07763e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:00:50 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39339
AS: 200738
IP: 93.114.240.0/22
IP: 176.100.208.0/21
IP: 176.100.224.0/20
IP: 185.97.168.0/22
IP: 188.215.8.0/22
IP: 2a06:6c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704618987112 (0xa40e907e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=341cb46fbd84d90a8401beb2419ebbcefac5bc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:30:6e:45:8a:14:aa:fe:d2:2d:9f:78:a8:
56:1a:5b:ee:06:d0:96:f1:9a:2b:52:18:21:85:ee:
c9:5a:4c:49:57:13:b7:7a:c7:8f:c0:00:4d:f0:1c:
0e:10:bb:2b:ab:d5:3a:16:5e:2c:43:c5:53:07:db:
c3:46:ee:b5:d8:59:ca:51:fe:b0:ad:ce:18:9f:07:
4e:33:f5:ec:d3:9c:e0:97:be:1b:e1:38:4b:ca:53:
72:ef:e2:1d:25:e7:7d:68:94:42:75:f4:38:6f:7c:
64:91:26:b7:b1:3d:65:a2:35:45:75:f8:8d:d4:17:
11:94:ff:5e:e4:40:c4:6f:a2:ec:e6:9f:1a:5d:f7:
03:01:a3:16:1b:df:e9:83:c8:ce:00:f4:93:4e:9e:
6e:d9:5e:9b:24:a0:07:d7:1f:bf:7f:31:ad:6d:15:
e0:fd:c6:73:ea:3d:6d:74:96:3e:15:86:91:f0:4f:
4e:c3:ae:d3:ab:de:6e:8d:2e:a7:74:40:c4:ae:c6:
ce:ac:e6:55:2f:45:8f:9c:3a:94:86:d9:45:64:10:
b5:aa:77:53:4f:38:ac:cc:24:3e:7d:b5:51:4a:27:
a8:af:65:56:bf:a0:01:d3:3f:f0:b1:85:da:82:2d:
2f:f3:b8:2a:44:c7:64:ec:32:c4:8b:4d:28:79:d5:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1C:B4:6F:BD:84:D9:0A:84:01:BE:B2:41:9E:BB:CE:FA:C5:BC:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bf6937-5b57-441f-b241-14d61d07763e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bf6937-5b57-441f-b241-14d61d07763e/1/NBy0b72E2QqEAb6yQZ67zvrFvCI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.240.0/22
176.100.208.0/21
176.100.224.0/20
185.97.168.0/22
188.215.8.0/22
IPv6:
2a06:6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39339
200738
Signature Algorithm: sha256WithRSAEncryption
a9:6d:44:95:4b:89:02:3b:39:e1:c5:8b:21:bf:df:97:32:e6:
2f:7f:16:82:43:06:ba:60:6b:71:9f:44:0f:39:3d:8b:9f:a2:
a0:05:d1:57:f6:59:a6:b8:45:43:17:73:e6:54:75:ac:fb:08:
9d:9d:1a:e1:ee:72:2d:f8:5b:d0:29:3f:4b:f0:16:1e:10:49:
f9:00:08:b5:18:7a:fb:b0:a9:9a:18:47:79:ed:6d:e8:5b:71:
c0:ff:27:0d:4d:67:8c:97:00:34:e3:31:ef:52:d0:3e:bf:94:
4b:9f:f7:92:2a:05:7a:26:b0:7e:d2:2f:39:a3:9d:76:d2:5c:
0c:d8:55:5c:74:99:3c:92:6d:ea:de:6f:17:7a:89:cb:fb:fc:
e7:5e:b5:1d:52:3d:a5:8e:63:e5:72:b9:05:9d:57:83:79:f2:
d1:60:21:5a:35:cf:26:94:cc:8a:95:fb:33:19:e2:ed:30:23:
2f:a5:0f:1e:ff:6f:b5:35:2c:1c:40:cf:68:80:dd:48:53:e8:
3f:12:a0:0a:61:64:6e:b9:50:a9:f7:42:88:0e:b5:33:00:22:
1c:46:2d:04:40:58:75:35:9c:a3:69:0f:3d:24:70:b1:70:2c:
2d:2e:a5:86:f5:d9:35:d7:49:1b:37:cc:ef:73:22:f4:17:6b:
7e:b6:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:10 2025 by rpki-client