Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RFVxH7AI5HtM42z2O5avIbxoDlI.cer
File: RFVxH7AI5HtM42z2O5avIbxoDlI.cer (raw, json)
Hash identifier: gtvUXMxyAgxNkGmRlip/EleNSl9peTL8fExyZR9jOII=
Subject key identifier: 44:55:71:1F:B0:08:E4:7B:4C:E3:6C:F6:3B:96:AF:21:BC:68:0E:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6310A0ABBFC08DFD952D8BE7753D83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/e2e901-4c51-4563-b76c-ff259bfc6778/1/RFVxH7AI5HtM42z2O5avIbxoDlI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/e2e901-4c51-4563-b76c-ff259bfc6778/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.161.79.0/24
IP: 2a12:4580::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:10:a0:ab:bf:c0:8d:fd:95:2d:8b:e7:75:3d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4455711fb008e47b4ce36cf63b96af21bc680e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:15:14:c3:7b:e3:de:b3:30:7c:91:21:7c:
fc:69:2f:7f:33:3a:35:0f:bb:36:9f:ca:ec:01:97:
04:37:23:3a:a2:b2:82:b3:7b:7c:62:57:3e:b9:dc:
15:8b:bd:bb:ac:66:1c:e5:c4:c4:58:5f:a4:60:89:
e1:45:be:0a:69:73:06:1d:32:16:05:da:46:f9:6e:
da:a4:ad:bd:27:15:a4:93:4b:cb:7e:f8:92:5a:9a:
c2:7d:2a:92:68:29:47:35:d1:e4:8b:2b:de:f6:be:
f2:63:19:54:bd:ea:f4:ef:47:83:a4:64:53:2a:e4:
0c:8f:cf:b0:fb:c8:e5:fe:48:19:51:26:b7:84:4c:
95:3f:a5:87:3d:46:4c:67:26:df:ed:73:e1:db:b3:
ce:22:52:34:e6:e3:27:8b:b2:bd:06:4e:d1:9b:e8:
c5:96:82:96:68:37:7f:4a:33:22:41:d3:b7:45:90:
4a:75:4b:c7:e1:80:05:6a:2a:5d:e1:fe:1a:3a:26:
bc:f2:5e:58:d4:73:a6:38:38:d0:b5:79:5b:4a:56:
1d:26:26:9d:c8:0c:39:38:dc:5a:bd:78:98:0e:a2:
32:0b:85:40:80:31:72:8a:fa:cd:f2:b4:c9:74:85:
c9:cb:c5:ae:a5:fe:11:f2:90:5a:dc:47:e4:d6:fe:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:55:71:1F:B0:08:E4:7B:4C:E3:6C:F6:3B:96:AF:21:BC:68:0E:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e2e901-4c51-4563-b76c-ff259bfc6778/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e2e901-4c51-4563-b76c-ff259bfc6778/1/RFVxH7AI5HtM42z2O5avIbxoDlI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.79.0/24
IPv6:
2a12:4580::/29
Signature Algorithm: sha256WithRSAEncryption
93:51:8c:04:35:fd:c8:44:0a:83:68:9f:c9:2a:33:08:46:8f:
19:a1:f7:a7:8e:be:7c:91:80:9d:73:2c:72:40:47:fa:f6:83:
10:3b:9d:cb:82:30:f4:88:e1:b2:84:ee:45:f8:30:a6:bc:6a:
86:65:06:95:7e:1d:fb:4b:04:c8:a7:32:a9:38:8d:6f:a1:b5:
d4:33:17:b9:53:8d:b9:23:fe:a6:36:7f:8d:a1:bc:53:4a:3e:
a8:a8:2d:ba:80:b6:b8:05:d1:2c:8b:d8:7e:b6:bd:8f:4b:a8:
4c:36:45:79:56:9b:05:2e:74:f5:bc:a7:5d:62:2c:2d:b9:d4:
2a:e9:0f:e7:f3:ff:13:1d:cd:a8:be:c5:12:7c:a4:c1:1a:39:
89:9f:e1:ec:f8:12:69:7b:84:59:bc:15:57:4c:2f:90:28:b1:
42:4b:52:01:35:01:57:4f:bd:8d:af:da:5d:36:a0:5c:b6:2e:
80:80:f9:5f:43:cf:98:80:a3:76:7a:32:ab:11:8c:c9:42:f9:
fe:06:da:64:7f:22:44:c0:e3:5f:52:96:00:65:41:d9:99:23:
9b:ab:53:b0:a3:c2:d8:ad:e5:91:16:44:04:a6:31:c8:a6:f6:
8b:d0:b8:01:c0:de:d9:ad:4d:4a:dc:8e:97:2f:fd:27:22:02:
48:2e:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:11 2025 by rpki-client