Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NaCsMLXi8EkCklZNeP_rGhWJpM0.cer
File: NaCsMLXi8EkCklZNeP_rGhWJpM0.cer (raw, json)
Hash identifier: 6tN5gBW/rbmIAdB8mYAKX1fA9tEE5MhCSNQxo4f30xY=
Subject key identifier: 35:A0:AC:30:B5:E2:F0:49:02:92:56:4D:78:FF:EB:1A:15:89:A4:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AB443818E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/0f04c4-45f4-4eb8-8686-65b323f37523/1/NaCsMLXi8EkCklZNeP_rGhWJpM0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/0f04c4-45f4-4eb8-8686-65b323f37523/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 16:06:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 61346
IP: 193.141.226.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735583934693 (0xab443818e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35a0ac30b5e2f0490292564d78ffeb1a1589a4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:44:0d:02:ac:41:6a:44:0c:04:09:eb:b2:
58:11:f6:c1:54:7a:a3:bc:06:c9:07:a5:69:ae:0f:
e4:7d:f3:f8:67:31:54:a5:bc:85:3a:23:09:1a:b2:
e1:42:51:42:1c:d4:ea:4d:73:a0:99:53:82:02:f7:
52:c2:a9:28:45:90:20:2f:07:50:b5:1a:0f:bc:64:
0f:d2:32:f7:bf:c9:32:06:4c:35:b8:58:82:8c:83:
79:e8:94:cb:38:2a:0b:64:26:c5:d5:5d:27:bb:ba:
c0:3e:8d:27:e6:2d:00:df:a4:2c:44:31:fa:5a:6f:
76:8a:88:fe:80:f0:04:31:1e:2b:69:b8:f7:a8:1d:
3f:3e:04:04:5d:e6:5e:60:5c:39:d6:fc:41:87:c3:
19:e4:9e:b8:5d:f9:73:0a:a5:31:cf:02:b8:63:88:
8b:72:93:fe:46:3a:94:ad:84:b3:a0:e3:ab:44:07:
41:e7:bf:23:cf:57:f2:1b:ef:c9:74:97:39:74:f3:
3a:4e:e9:a0:21:b0:32:ff:4d:13:ad:77:2c:bd:ae:
b2:4a:68:43:72:0a:2c:00:ef:e9:fe:44:b7:75:65:
09:dc:e1:2d:47:39:5c:46:e2:b5:9b:f0:f9:e6:71:
c8:90:60:e4:a4:8b:01:4a:d5:ff:4d:7d:b3:b9:7e:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A0:AC:30:B5:E2:F0:49:02:92:56:4D:78:FF:EB:1A:15:89:A4:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0f04c4-45f4-4eb8-8686-65b323f37523/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0f04c4-45f4-4eb8-8686-65b323f37523/1/NaCsMLXi8EkCklZNeP_rGhWJpM0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.226.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61346
Signature Algorithm: sha256WithRSAEncryption
32:b8:1f:5a:64:d5:83:2a:6b:8a:3b:01:8b:3a:6c:0e:e0:fb:
59:e6:a1:e3:21:df:2a:6e:6a:8d:ed:6b:e9:d3:90:49:73:ee:
02:d2:7a:07:c4:ca:4c:6b:cc:05:ea:31:93:a1:23:07:5e:24:
d9:8e:97:41:5c:7a:66:1b:cc:5a:35:24:6a:3b:05:c1:ab:d6:
24:65:c3:19:31:ef:25:26:0c:45:e0:0b:82:15:35:8d:af:aa:
d7:ee:5a:7b:d2:f0:25:37:76:a7:ac:ec:d7:28:b0:29:e8:5c:
72:33:cc:36:ae:95:c2:23:c7:69:90:63:53:fe:5f:58:8c:57:
f8:74:d2:c0:dd:b5:17:1e:41:0b:07:6a:79:f0:7a:88:ba:51:
4f:3e:d4:61:ec:2c:1c:16:57:9d:21:a7:94:14:58:ac:eb:f8:
25:72:13:a1:8c:a0:7f:ff:f2:cd:9d:80:64:ed:40:a0:99:ba:
b9:87:25:fe:ef:42:1a:2a:20:8d:30:51:af:31:93:0a:bd:cf:
25:59:2f:1a:ca:c9:96:cd:62:b8:87:43:84:73:20:ef:88:9e:
d6:80:99:e6:63:a2:a4:bb:6b:5c:43:c0:5b:ff:e5:36:85:a2:
df:92:4c:ea:a5:b7:5f:ca:e2:26:99:59:12:cf:ff:a3:f3:58:
bd:a0:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:28 2025 by rpki-client