Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RB435qD5VRG1iMzTz-m4bcPrx1Y.cer
File: RB435qD5VRG1iMzTz-m4bcPrx1Y.cer (raw, json)
Hash identifier: 3rfkFIjl66IuVUWp3Kys81WhpR6FuFOHHP9lsG1oPME=
Subject key identifier: 44:1E:37:E6:A0:F9:55:11:B5:88:CC:D3:CF:E9:B8:6D:C3:EB:C7:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A189B84470
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/d7fd79-76d3-45fc-971f-a8fb254d9def/1/RB435qD5VRG1iMzTz-m4bcPrx1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/d7fd79-76d3-45fc-971f-a8fb254d9def/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:57:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44942
IP: 92.63.224.0/20
IP: 92.246.104.0/21
IP: 185.157.216.0/22
IP: 2a06:ec40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693800289392 (0xa189b84470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=441e37e6a0f95511b588ccd3cfe9b86dc3ebc756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:e8:50:a1:69:24:87:f9:e4:74:0a:e8:90:
16:dc:66:39:ce:a3:d3:92:e0:4e:63:c2:33:4f:7c:
41:71:1d:e8:32:a2:65:c1:47:65:83:2f:b1:8c:ee:
0a:ad:ad:24:b7:7c:c9:b7:73:14:41:1c:44:0b:e5:
85:6d:77:ff:56:9c:86:83:6a:6d:ab:6f:41:83:af:
5b:80:6a:e5:9a:ea:eb:7b:17:11:4f:f6:cb:54:fb:
b1:31:67:cd:16:c0:4a:8f:f1:b6:57:92:1b:60:0a:
51:6d:df:92:13:ef:d9:44:9b:2b:cb:e0:93:f3:f4:
bb:68:69:4e:dd:47:8d:dc:34:17:c2:a1:7b:93:94:
7c:00:3c:2b:b1:8d:d3:cc:85:d8:7d:82:4f:75:3a:
4a:51:ea:56:ab:89:44:83:c7:43:e9:27:6b:41:f9:
cb:27:e9:a9:5e:3b:05:1b:54:11:01:cf:1a:6a:54:
c5:55:55:ba:de:97:0f:b9:d5:d3:f8:17:74:f7:54:
5c:de:2f:44:68:15:b0:91:ce:dc:db:36:00:55:84:
87:ad:0c:a7:b0:99:c4:27:43:c9:45:1f:1d:24:15:
1c:f6:6d:c1:1a:45:be:a4:86:c1:40:3b:ff:13:b3:
2c:02:6e:64:bc:30:4f:e2:b5:ea:52:17:50:12:ea:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1E:37:E6:A0:F9:55:11:B5:88:CC:D3:CF:E9:B8:6D:C3:EB:C7:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d7fd79-76d3-45fc-971f-a8fb254d9def/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d7fd79-76d3-45fc-971f-a8fb254d9def/1/RB435qD5VRG1iMzTz-m4bcPrx1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.224.0/20
92.246.104.0/21
185.157.216.0/22
IPv6:
2a06:ec40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44942
Signature Algorithm: sha256WithRSAEncryption
8d:4b:b0:49:8b:61:9f:31:a2:c1:e1:ff:e8:79:fb:66:a4:e9:
9a:b1:32:90:aa:ba:3c:29:0a:57:63:ba:57:e1:2c:86:30:3f:
65:42:ac:42:78:77:36:8e:d6:b4:28:03:93:20:d1:c1:ba:e4:
6b:3e:ee:a5:1b:7f:28:ec:d7:99:18:e0:97:b9:24:53:9c:a1:
77:85:bb:f1:64:ca:79:b5:1f:0c:b9:b3:ff:51:ea:79:8d:67:
8a:9d:b2:cf:94:15:3f:15:54:00:e6:36:db:66:fd:68:6c:ca:
93:24:fc:56:b9:10:52:01:dd:ed:2c:7d:ae:f9:11:ff:db:47:
b1:6f:2b:07:86:2b:a3:f3:c7:e1:de:58:43:c5:dd:4c:48:e9:
2c:e9:a9:9b:26:c8:4b:4c:1a:4c:ef:7d:ec:d0:da:48:47:45:
f0:12:a6:e5:75:b7:07:36:0b:8e:c9:27:bb:26:2b:cd:99:3d:
7c:ed:a5:dc:d1:2a:23:e3:fd:e1:80:a2:0f:69:9e:38:7b:32:
91:1e:fb:cb:19:b3:90:16:44:0f:49:82:a8:29:c7:f2:fc:8c:
b7:64:17:7d:cd:83:53:bd:9b:42:f2:c2:50:42:3f:16:c9:e3:
bc:c4:9e:1f:22:e7:56:d7:4c:67:80:75:95:88:d7:f4:46:a1:
19:b4:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:21 2025 by rpki-client