Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.cer
File: Nfi8CE0GmHV8gv1GHpm5fBQr-yI.cer (raw, json)
Hash identifier: m4aEI0ubqvA6pvhWbw5lZ/8GZOF9i+kpC/4jfuSkAVw=
Subject key identifier: 35:F8:BC:08:4D:06:98:75:7C:82:FD:46:1E:99:B9:7C:14:2B:FB:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A60EF3A9CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:57:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 109.71.77.0/24
IP: 2a10:53c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713215420874 (0xa60ef3a9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35f8bc084d0698757c82fd461e99b97c142bfb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:c7:4b:69:f5:bd:2a:68:25:53:81:0a:a5:
e6:6a:c9:c9:4d:b1:b4:bb:90:f8:9f:e8:08:d1:33:
9a:d2:4e:cf:f1:26:d3:8d:a4:a3:06:08:25:5f:9a:
ac:74:4a:38:b5:fa:4c:12:3a:25:ed:10:96:54:49:
43:ce:c3:04:6c:d9:89:ba:ea:32:a2:56:27:7c:21:
99:60:c8:94:81:31:d3:6e:a6:7f:29:64:74:53:3e:
be:34:bc:f5:74:fe:e7:38:2d:ad:cb:30:8c:48:2c:
6b:2a:ba:b8:fa:57:ed:c3:8f:6d:5f:b6:c0:26:40:
6d:28:d1:c4:85:f0:41:4f:60:36:39:11:f4:4a:91:
4b:da:1e:1d:83:b9:53:91:65:2e:8b:28:4a:31:f8:
1d:a0:80:9c:2e:65:a8:f1:70:f0:19:d9:f0:34:55:
f0:5b:d0:21:a3:f6:23:42:c2:e9:a8:ea:77:cc:7e:
6e:36:bf:7a:50:30:91:96:31:05:25:98:ac:9e:b3:
f1:fb:46:d7:3f:a5:f4:4a:79:cb:e4:dd:c7:69:e7:
0c:0e:d7:91:4a:cd:05:b7:1e:07:94:24:e6:eb:3c:
3a:50:3c:05:93:c1:de:09:e1:cf:95:47:da:ef:49:
b5:46:29:f6:f8:d3:14:17:f0:fe:87:de:f3:23:53:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F8:BC:08:4D:06:98:75:7C:82:FD:46:1E:99:B9:7C:14:2B:FB:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.77.0/24
IPv6:
2a10:53c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:29:3c:42:de:8c:fb:55:e8:e2:47:d7:3d:80:d0:e3:89:19:
c2:2a:00:71:43:f2:3c:75:94:79:8d:d0:06:9f:2a:f8:4b:c0:
32:3b:b1:3a:ed:1d:43:c8:ee:a4:eb:4a:3a:ba:40:6a:ec:73:
7f:26:d1:ba:12:b6:03:2e:40:7d:8f:0d:2c:64:34:87:5e:1c:
2d:2d:94:47:a9:4f:27:c2:0b:a2:c7:48:86:9d:c8:fe:71:f0:
5d:53:76:0a:57:1e:01:eb:e1:6a:ef:9a:69:5e:50:0c:92:bb:
c7:fe:54:0f:6e:e0:b8:b0:27:aa:3e:51:b8:d0:26:e2:bd:d0:
66:7f:44:2a:61:9b:c0:a9:83:c2:19:e0:87:d4:ce:94:fa:b1:
f1:53:35:4c:41:a7:76:23:b2:2d:c1:23:b1:79:ec:af:c0:cb:
23:65:a9:5e:a8:9a:92:ad:9b:71:3b:b6:99:a4:b2:2d:32:30:
5f:e2:ab:dc:e7:3f:57:b9:37:f5:4e:70:3e:b5:c3:31:52:3e:
20:87:b8:53:fb:79:80:fc:49:27:b6:e9:d4:46:9d:ec:fb:cf:
88:e9:bc:d5:50:4b:0e:72:93:69:74:31:e6:6d:64:0d:de:80:
7d:0f:30:e9:7e:a1:bc:76:2e:d2:60:3b:ab:a9:13:c3:bd:57:
75:09:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:21 2025 by rpki-client