Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RRGXqQRuT7t-8icu5KjCXRXLMvo.cer
File: RRGXqQRuT7t-8icu5KjCXRXLMvo.cer (raw, json)
Hash identifier: HLEBPZi2gN2XgBt3tvunQeFpGrePDEFKBNULYIcLdYo=
Subject key identifier: 45:11:97:A9:04:6E:4F:BB:7E:F2:27:2E:E4:A8:C2:5D:15:CB:32:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701D6238426B6AD8769C24BAFF2CF89B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/5a94f4-c79b-46e9-97c9-4a6fa53c6607/1/RRGXqQRuT7t-8icu5KjCXRXLMvo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/5a94f4-c79b-46e9-97c9-4a6fa53c6607/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.132.40.0/22
IP: 2a0d:9f40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1d:62:38:42:6b:6a:d8:76:9c:24:ba:ff:2c:f8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=451197a9046e4fbb7ef2272ee4a8c25d15cb32fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:c8:8d:44:1c:38:3d:57:8c:0a:d4:22:54:
a6:6e:93:df:df:13:22:fc:db:e0:e8:c9:4a:b0:0d:
d0:4b:67:fb:0a:1b:2f:1e:67:da:9d:81:f2:8c:fa:
76:69:0b:56:bf:6e:8f:2d:9e:d6:d1:a9:ca:88:6d:
df:05:f6:4f:0a:15:db:86:4a:c2:7e:01:ef:cb:3f:
88:ff:ce:95:31:7a:6f:09:ce:ea:91:aa:4f:9a:b6:
9b:60:b3:4b:4d:d1:74:f7:c1:63:bc:40:01:77:86:
41:da:fe:12:ba:eb:05:80:f3:f6:1c:d3:e6:c6:ac:
50:41:6f:9c:dd:d5:2d:bd:93:a7:55:89:13:dd:6a:
a9:87:6c:9c:d5:3b:f6:c0:33:d8:a0:f0:a3:eb:ca:
51:35:9b:a7:fa:ae:30:84:a1:b0:a1:87:b9:6f:fe:
1b:58:39:b2:5c:c4:47:36:8b:61:1c:f5:bf:a0:40:
08:e0:6c:af:c6:12:47:82:59:99:1b:f3:17:99:63:
c1:e6:7b:7e:4d:cf:90:f1:f6:ab:30:30:15:11:86:
31:14:51:43:4c:bd:e9:8e:c9:3d:dd:df:b0:1d:fd:
1c:e3:8c:a9:cd:43:5a:06:87:95:7b:7a:fe:ca:2c:
ac:5c:9c:fb:e9:43:29:d5:cf:61:cd:59:78:f6:f3:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:97:A9:04:6E:4F:BB:7E:F2:27:2E:E4:A8:C2:5D:15:CB:32:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5a94f4-c79b-46e9-97c9-4a6fa53c6607/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5a94f4-c79b-46e9-97c9-4a6fa53c6607/1/RRGXqQRuT7t-8icu5KjCXRXLMvo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.40.0/22
IPv6:
2a0d:9f40::/29
Signature Algorithm: sha256WithRSAEncryption
5d:d7:b0:b0:35:6c:b1:52:e9:7a:b4:9f:36:af:2c:fd:3a:ad:
77:29:fe:f5:80:6c:d7:25:2a:71:4a:89:d8:77:7c:4d:2e:3c:
2e:66:c1:5a:30:a3:62:05:10:57:5c:f3:e6:35:34:ac:4a:86:
08:98:22:21:4b:2b:a4:23:20:13:06:6c:b4:73:01:35:58:4a:
c1:1c:f9:4a:cf:7e:9e:df:7d:1e:19:1f:09:8c:99:45:8e:96:
67:70:0b:77:85:5c:2f:69:e0:79:94:a6:e5:76:7e:8f:57:d6:
31:d4:b1:7d:1a:5f:1c:be:c8:35:f2:ee:b8:70:35:23:11:74:
84:32:11:e9:51:9c:8d:26:3c:28:d2:d5:5a:52:76:47:63:cb:
4c:20:fe:ba:79:71:f1:fa:f5:f6:7c:a1:03:6d:27:33:ee:2c:
bc:31:0c:8b:35:06:c7:87:ca:77:07:56:cb:24:74:a9:82:28:
5f:16:2d:22:07:49:fc:23:02:ae:d2:56:75:2c:e5:9e:2c:b5:
68:64:13:74:c3:74:24:f8:e0:43:a2:b7:1f:cd:c6:d7:1e:c5:
68:4a:e0:d0:f6:9b:93:c2:da:ca:82:f7:5a:6b:13:31:e1:c1:
21:4c:33:a0:98:73:b8:d7:5a:3e:dc:4e:1d:5a:9f:f3:80:4b:
4f:7a:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:34 2025 by rpki-client