Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer
File: NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer (raw, json)
Hash identifier: 5uOpg871oplm8Ke/fV73kvT/38syiB0DXMsG704JQQw=
Subject key identifier: 36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A881516499
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/NlYC-KZ9oOC4EwGAR7eEenI7Of8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:59:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 201124
IP: 185.83.104.0/22
IP: 2a05:9980::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723724100761 (0xa881516499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=365602f8a67da0e0b813018047b7847a723b39ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:ab:ff:27:92:95:c5:c2:d1:9f:a2:66:2a:
f7:de:22:6f:df:5a:10:5d:32:d6:28:75:bc:c6:37:
bf:3c:1d:61:1a:5c:39:ec:32:8f:55:c9:67:9e:a2:
af:79:d7:45:9c:9c:af:9e:f6:77:7c:41:51:ed:5b:
41:da:12:64:5b:69:fb:96:62:45:93:7a:8e:db:62:
c4:f6:fe:06:5d:af:59:c4:a8:71:1a:3a:1a:9d:b9:
de:ec:bd:ac:36:2b:28:a7:e1:d6:4a:86:e4:5e:94:
08:83:50:00:94:b9:c9:58:cf:1b:cd:90:bb:cd:0b:
7b:aa:ab:e9:ee:b4:15:ff:0f:dc:cb:82:6f:c1:da:
0a:8a:68:0f:45:65:72:92:e4:85:dd:04:75:49:81:
8c:cd:2a:50:57:27:13:57:9c:80:53:97:be:68:3f:
2d:ae:a3:8d:01:4f:38:44:af:bc:d7:da:04:1f:3c:
8d:23:39:43:f5:24:f0:96:b2:27:5d:c4:77:09:99:
28:78:2e:17:c2:1c:cd:fa:53:11:0a:6c:9b:f8:c4:
08:8c:ed:f7:40:d7:e7:1b:37:65:6a:e6:66:50:82:
24:f1:01:0d:6f:8d:44:a6:ca:cd:72:e0:9e:aa:8c:
44:49:58:27:d7:ca:9d:7e:00:98:23:07:3b:53:28:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/NlYC-KZ9oOC4EwGAR7eEenI7Of8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.104.0/22
IPv6:
2a05:9980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201124
Signature Algorithm: sha256WithRSAEncryption
36:8f:6d:2c:db:78:a0:71:2a:e2:cb:26:96:c3:21:84:f1:fc:
5c:27:af:48:5a:db:87:cd:20:cc:7d:22:31:b9:73:32:3d:b5:
7b:65:6f:0b:0c:af:99:c9:08:66:ce:ce:78:36:a3:1a:fd:8b:
40:a0:af:63:b1:a4:fb:85:6c:cf:c7:46:fd:93:2a:2e:80:6b:
59:91:f5:3d:39:ae:62:1c:a5:b8:2f:5f:fc:72:b3:19:ae:2a:
69:22:3f:ef:e0:45:12:65:44:e6:87:0d:e8:7f:f3:70:a6:91:
68:43:a6:fd:3c:28:ad:97:4f:6c:1e:ce:f7:68:b9:d9:9e:4a:
b8:7f:b8:55:54:b1:e5:02:0b:e3:d3:cc:d5:f7:20:6e:e4:5b:
84:4b:21:0d:63:fb:29:3c:13:52:8f:cb:8b:97:13:df:ef:26:
15:50:d5:46:7c:9d:38:3a:81:77:63:8e:e4:0c:05:4e:36:11:
00:05:65:ab:d1:4a:06:ae:4a:87:60:69:2d:19:6f:ea:ed:f7:
8c:65:b3:67:6e:d4:9d:de:82:43:46:0d:5a:0f:2f:21:3f:b8:
43:d1:fb:37:fa:83:54:76:7f:e3:14:35:7f:e9:30:40:67:80:
04:7a:89:6a:6d:d1:d6:29:da:80:99:b5:37:df:a2:86:27:6d:
f4:b8:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:16 2025 by rpki-client