Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NqLELNolextma5OA-8KUkhBqcH8.cer
File: NqLELNolextma5OA-8KUkhBqcH8.cer (raw, json)
Hash identifier: hZoedQhEmV6SDEN1tQyOBdGd9l2pJU+oLwbcvydSjZU=
Subject key identifier: 36:A2:C4:2C:DA:25:7B:1B:66:6B:93:80:FB:C2:94:92:10:6A:70:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A343344BE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/ebfda0-b0e9-4090-b4c3-e44898aa5980/1/NqLELNolextma5OA-8KUkhBqcH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/ebfda0-b0e9-4090-b4c3-e44898aa5980/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:03:46 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 212.107.4.0/22
IP: 2a09:4400::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701207170019 (0xa343344be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36a2c42cda257b1b666b9380fbc29492106a707f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4f:d4:6d:ca:d6:4a:26:63:93:3b:f1:ce:72:
c4:69:9d:77:93:16:15:2f:f1:11:d2:b0:25:10:8e:
6a:10:48:ef:79:9e:a4:c8:3a:b2:82:47:bf:0e:61:
d7:14:bd:c3:f5:22:b3:29:f0:b8:27:ad:fe:42:3d:
32:1c:14:37:10:5f:b4:e0:fa:36:78:a6:71:6f:86:
9f:0e:31:3b:51:84:8b:88:ab:1a:a1:42:bb:ff:fa:
5c:fe:2d:d8:7a:c3:5c:20:a1:39:f4:7e:9f:e2:02:
31:1e:88:d9:3a:00:52:65:dd:8d:37:cd:a9:75:03:
a4:0e:02:39:c6:fd:8b:0a:fc:cc:f2:f7:06:4d:0c:
11:26:da:d1:f7:52:de:86:72:fc:f0:91:a4:51:c1:
13:9d:a9:4c:96:23:6a:6f:82:58:32:64:02:b9:08:
b7:1b:4c:ca:5f:78:4a:29:c6:42:51:f5:23:fd:4f:
b3:70:68:81:ff:8a:b8:0c:4a:65:69:a3:70:12:5c:
f4:c1:3d:b1:72:ca:1c:cc:de:e5:d2:27:aa:e4:98:
39:53:0c:7d:f1:09:bc:10:60:a3:e1:e3:b1:6d:9e:
28:fe:14:e7:f1:62:9c:a9:a5:63:98:0c:7b:4a:b4:
08:3b:5c:ad:76:50:48:a9:d9:56:8b:c5:ef:04:6b:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A2:C4:2C:DA:25:7B:1B:66:6B:93:80:FB:C2:94:92:10:6A:70:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ebfda0-b0e9-4090-b4c3-e44898aa5980/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ebfda0-b0e9-4090-b4c3-e44898aa5980/1/NqLELNolextma5OA-8KUkhBqcH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.4.0/22
IPv6:
2a09:4400::/29
Signature Algorithm: sha256WithRSAEncryption
a2:c4:65:19:8b:9e:4c:7c:b8:88:8a:b3:02:28:eb:95:47:04:
0d:7c:5c:73:72:2b:04:a5:43:bd:83:2f:9a:7a:a4:bc:40:eb:
ed:e2:86:e7:46:0a:80:07:80:6a:2c:41:71:78:da:59:d5:91:
6a:5e:a5:cf:a7:8a:77:14:3e:57:74:a1:ec:84:8e:c6:55:be:
16:13:fb:f1:42:4a:45:a5:76:ce:5d:ba:cf:9f:4c:86:b3:58:
79:e2:85:54:71:6a:98:d0:4e:c7:2a:70:46:ce:74:33:bd:08:
f0:2b:68:16:13:b2:77:2f:0e:8d:60:b6:ed:45:24:76:1d:b7:
7e:1b:54:aa:3e:9a:ba:d9:14:4c:17:bc:ed:43:f5:f3:0b:76:
bc:59:b6:97:c4:0b:82:e6:ef:62:15:28:52:5d:23:08:5f:1b:
e4:fc:2a:72:bf:e4:80:72:bf:78:15:07:b1:71:86:ac:4b:54:
2a:6a:47:3e:d3:d5:e9:e9:ff:6e:8b:06:59:f2:8d:e0:60:d0:
91:a5:03:ef:58:80:de:f0:19:6f:21:f9:31:fa:e9:66:b7:cb:
a7:c3:f8:61:c2:2d:ee:d2:82:ef:73:47:ac:02:a9:90:63:a5:
bb:90:cc:78:6d:0d:fd:90:a2:52:60:10:66:3c:4a:ef:9a:b0:
7e:26:a6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:18 2025 by rpki-client