Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NOPOuvcMPtGnZYsiOtIhGYWX2Ts.cer
File: NOPOuvcMPtGnZYsiOtIhGYWX2Ts.cer (raw, json)
Hash identifier: SSCpoiLz/pkGvYxv/2MkkdqjH1boWQJsBLxmXkCSzso=
Subject key identifier: 34:E3:CE:BA:F7:0C:3E:D1:A7:65:8B:22:3A:D2:21:19:85:97:D9:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD13B107FF822E251D6161EF39D66F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/7728b2-971d-4d19-8bf7-03808c8f4375/1/NOPOuvcMPtGnZYsiOtIhGYWX2Ts.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/7728b2-971d-4d19-8bf7-03808c8f4375/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.120.0/24
IP: 2a12:b400::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:3b:10:7f:f8:22:e2:51:d6:16:1e:f3:9d:66:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34e3cebaf70c3ed1a7658b223ad221198597d93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:f1:d3:d5:14:eb:a5:ec:d3:cb:77:d9:f9:
85:09:c2:74:e6:90:9c:b6:20:43:b0:b7:c5:ad:c9:
cf:7b:fc:95:f3:15:73:2e:10:20:75:ab:4c:3c:be:
50:6e:c7:36:49:68:06:d9:34:5d:cc:2b:22:56:74:
6e:2e:9b:bd:3c:61:c6:a9:64:d0:c6:9a:c6:51:66:
81:30:04:42:20:af:c5:04:36:93:f3:63:cb:46:ce:
96:af:e5:de:f3:ab:fa:a1:5c:ae:11:a5:5a:6d:ad:
2c:6f:cc:a4:dc:ee:bf:9c:85:06:de:cd:19:3d:38:
37:1e:56:3c:ff:2c:b2:38:ea:22:66:e0:28:71:89:
03:ac:18:62:54:e2:c5:62:07:88:53:9e:f6:8e:4e:
00:45:5e:78:28:3f:43:83:8d:7a:ae:bb:22:a5:72:
59:49:f0:3f:19:2d:59:ef:f5:c4:53:8a:f0:78:63:
bd:74:94:ab:cd:c3:f8:fd:d0:08:ef:95:46:de:f8:
88:f3:b8:35:f2:62:e5:bb:2f:fb:a4:7d:80:de:f4:
a8:88:fe:c5:03:46:28:5c:f3:e7:a0:9c:22:56:c9:
b4:42:72:a3:6b:f6:b1:d1:d0:4b:83:61:5b:1f:1c:
be:ed:84:15:80:05:24:49:03:73:2f:6f:c6:ff:e4:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E3:CE:BA:F7:0C:3E:D1:A7:65:8B:22:3A:D2:21:19:85:97:D9:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7728b2-971d-4d19-8bf7-03808c8f4375/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7728b2-971d-4d19-8bf7-03808c8f4375/1/NOPOuvcMPtGnZYsiOtIhGYWX2Ts.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.120.0/24
IPv6:
2a12:b400::/29
Signature Algorithm: sha256WithRSAEncryption
a4:20:78:66:5d:13:2f:5a:69:2f:e0:25:87:e1:79:f5:b8:a8:
f2:50:86:15:f0:5c:73:1e:02:80:09:37:ed:d4:09:02:ba:23:
8a:a8:a2:d2:82:69:57:6f:89:25:0a:fa:f1:08:cd:74:60:8e:
43:a7:c4:57:54:72:51:ec:d2:e9:2b:37:2c:73:0d:3f:c0:ae:
91:2b:b8:6b:b2:14:58:e7:d0:d4:bb:94:79:bf:b1:d8:ac:b8:
89:f1:a1:57:aa:d5:dc:97:d3:9d:05:3a:a7:97:36:aa:f4:db:
9a:a2:db:27:b4:8d:7e:0d:3b:99:2a:98:b3:cb:74:cb:d0:fb:
a8:89:6c:12:b0:77:1b:f5:84:f2:ab:85:26:e5:83:e8:80:11:
b5:af:59:02:61:4f:5a:41:3f:f9:0a:41:7a:56:0d:5d:8e:90:
30:81:a1:d6:f0:71:b8:f6:de:91:f1:d2:6a:59:b2:07:3e:e6:
25:6d:42:8d:2b:20:5d:13:33:a2:13:89:1e:8e:00:18:e8:71:
ac:18:1e:c8:2c:3e:f6:04:7b:e5:28:c7:63:39:91:97:9b:c6:
99:a3:8a:fc:97:9d:bd:e1:2c:5a:9c:02:3a:4c:34:73:92:89:
a9:4b:ed:49:24:f3:df:56:b0:ec:27:4e:47:16:2a:4d:d1:07:
25:a3:0b:cf
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVr0TsQf/gi4lHWFh7znWbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGUzY2ViYWY3MGMzZWQxYTc2NThiMjIzYWQyMjExOTg1OTdkOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/vx09UU66Xs08t32fmFCcJ05pCc
tiBDsLfFrcnPe/yV8xVzLhAgdatMPL5Qbsc2SWgG2TRdzCsiVnRuLpu9PGHGqWTQ
xprGUWaBMARCIK/FBDaT82PLRs6Wr+Xe86v6oVyuEaVaba0sb8yk3O6/nIUG3s0Z
PTg3HlY8/yyyOOoiZuAocYkDrBhiVOLFYgeIU572jk4ARV54KD9Dg416rrsipXJZ
SfA/GS1Z7/XEU4rweGO9dJSrzcP4/dAI75VG3viI87g18mLluy/7pH2A3vSoiP7F
A0YoXPPnoJwiVsm0QnKja/ax0dBLg2FbHxy+7YQVgAUkSQNzL2/G/+SfzwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDTjzrr3DD7Rp2WLIjrSIRmFl9k7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5Lzc3Mjhi
Mi05NzFkLTRkMTktOGJmNy0wMzgwOGM4ZjQzNzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvNzcyOGIy
LTk3MWQtNGQxOS04YmY3LTAzODA4YzhmNDM3NS8xL05PUE91dmNNUHRHblpZc2lP
dEloR1lXWDJUcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1BJ4MA0EAgACMAcDBQMqErQAMA0GCSqGSIb3
DQEBCwUAA4IBAQCkIHhmXRMvWmkv4CWH4Xn1uKjyUIYV8FxzHgKACTft1AkCuiOK
qKLSgmlXb4klCvrxCM10YI5Dp8RXVHJR7NLpKzcscw0/wK6RK7hrshRY59DUu5R5
v7HYrLiJ8aFXqtXcl9OdBTqnlzaq9NuaotsntI1+DTuZKpizy3TL0PuoiWwSsHcb
9YTyq4Um5YPogBG1r1kCYU9aQT/5CkF6Vg1djpAwgaHW8HG49t6R8dJqWbIHPuYl
bUKNKyBdEzOiE4kejgAY6HGsGB7ILD72BHvlKMdjOZGXm8aZo4r8l5294SxanAI6
TDRzkompS+1JJPPfVrDsJ05HFipN0QclowvP
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:15 2025 by rpki-client