Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RcFgc4HhyS11Ma9zoH8LnwOMI6I.cer
File: RcFgc4HhyS11Ma9zoH8LnwOMI6I.cer (raw, json)
Hash identifier: K7Ibtrn/FMpn7TsQYY60IaKCrgw3a+yHgS3N9W5FfQw=
Subject key identifier: 45:C1:60:73:81:E1:C9:2D:75:31:AF:73:A0:7F:0B:9F:03:8C:23:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FA6DF1F3D2D4AB537C5DD3919CA6E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/a6ef94-6fa7-4af8-aeec-c97449bebadf/1/RcFgc4HhyS11Ma9zoH8LnwOMI6I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/a6ef94-6fa7-4af8-aeec-c97449bebadf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:35:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 217.20.252.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:6d:f1:f3:d2:d4:ab:53:7c:5d:d3:91:9c:a6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:35:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45c1607381e1c92d7531af73a07f0b9f038c23a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:49:89:67:61:37:07:37:be:24:6e:05:2a:
93:56:cf:d7:c2:0c:a6:b7:04:ea:d8:96:58:eb:02:
01:db:86:6f:7f:4f:39:12:dd:33:56:7d:e6:e2:41:
c3:9e:f9:14:d3:39:69:6e:02:9f:f1:9a:d5:7f:27:
e7:49:b9:73:93:90:09:e3:53:b0:c8:2c:cf:c5:54:
9e:b9:5a:6b:ba:8b:95:35:6a:93:31:7a:2d:9c:20:
3d:45:f8:20:e1:04:95:a9:15:2f:6b:86:96:4c:01:
a0:2f:e1:0e:ab:93:d8:ce:b8:83:91:ca:a1:41:29:
e4:46:f9:be:f0:1b:a2:4d:cb:ef:11:08:a6:eb:95:
32:d1:10:e3:c9:ed:d3:21:27:a2:50:0f:88:f2:4c:
e6:6b:05:0b:58:a4:60:ca:9b:46:4d:e7:d4:81:51:
c7:0c:91:85:da:0b:0d:25:60:2b:fd:d4:5a:18:03:
5d:ec:d7:40:9c:10:3f:ea:4d:98:6a:4e:bf:e8:b7:
23:c2:0c:95:c1:9c:c4:ee:f5:3d:9b:36:87:1a:b2:
b6:71:69:e8:c4:95:71:0c:2f:ed:fb:3d:13:19:4c:
d9:02:79:96:41:5b:ad:40:81:ea:21:e9:32:1a:e0:
3d:fe:8a:0c:3f:b6:01:73:f1:f5:bb:fc:cc:d4:6e:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:60:73:81:E1:C9:2D:75:31:AF:73:A0:7F:0B:9F:03:8C:23:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a6ef94-6fa7-4af8-aeec-c97449bebadf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a6ef94-6fa7-4af8-aeec-c97449bebadf/1/RcFgc4HhyS11Ma9zoH8LnwOMI6I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.20.252.0/22
Signature Algorithm: sha256WithRSAEncryption
61:23:f7:e4:2d:7d:bf:63:28:ca:4b:6a:83:47:b0:40:e9:42:
1b:10:5b:ea:7e:2c:88:b7:fa:17:8e:4b:60:8c:11:dc:a8:2a:
57:62:f7:f0:f7:61:e0:b4:72:07:3e:4c:d6:37:84:c2:b8:03:
6f:dc:00:18:6e:73:c3:22:eb:ea:a8:2a:f8:a7:ec:99:34:a8:
25:7c:4e:cd:33:e2:7a:c1:da:62:9f:2c:1d:6f:50:96:ea:4c:
ae:1d:29:7b:15:91:9d:91:e1:e6:63:d5:9e:fd:84:d1:f9:fb:
b5:47:54:4a:40:ed:8e:b2:b2:0a:72:e2:15:e8:0b:32:de:b8:
5c:1d:5d:ee:37:a8:2d:44:c5:9f:6b:c5:ce:bd:78:f9:59:d9:
99:65:96:88:9f:37:82:e9:f2:64:9a:e3:1f:a1:53:be:e8:d1:
3c:12:eb:cf:8b:c3:c7:1f:0f:ba:db:ef:79:8d:3f:53:1a:74:
b0:3a:ff:09:96:6b:f5:17:b2:4b:ab:8b:59:05:29:75:af:65:
2f:07:9f:ce:54:ac:03:22:82:12:f2:3a:0a:ad:41:0d:3e:9f:
60:0a:cd:6b:12:64:2c:2c:22:ec:9b:87:8d:4d:21:01:c7:ab:
6f:34:ff:19:4a:94:f6:ef:79:dd:1d:6e:f4:62:e4:34:f8:02:
75:7f:41:e6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVw+m3x89LUq1N8XdORnKbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWMxNjA3MzgxZTFjOTJkNzUzMWFmNzNhMDdmMGI5ZjAzOGMyM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD9JiWdhNwc3viRuBSqTVs/Xwgym
twTq2JZY6wIB24Zvf085Et0zVn3m4kHDnvkU0zlpbgKf8ZrVfyfnSblzk5AJ41Ow
yCzPxVSeuVpruouVNWqTMXotnCA9Rfgg4QSVqRUva4aWTAGgL+EOq5PYzriDkcqh
QSnkRvm+8BuiTcvvEQim65Uy0RDjye3TISeiUA+I8kzmawULWKRgyptGTefUgVHH
DJGF2gsNJWAr/dRaGANd7NdAnBA/6k2Yak6/6LcjwgyVwZzE7vU9mzaHGrK2cWno
xJVxDC/t+z0TGUzZAnmWQVutQIHqIekyGuA9/ooMP7YBc/H1u/zM1G66jwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEXBYHOB4cktdTGvc6B/C58DjCOiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwL2E2ZWY5
NC02ZmE3LTRhZjgtYWVlYy1jOTc0NDliZWJhZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvYTZlZjk0
LTZmYTctNGFmOC1hZWVjLWM5NzQ0OWJlYmFkZi8xL1JjRmdjNEhoeVMxMU1hOXpv
SDhMbndPTUk2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQC2RT8MA0GCSqGSIb3DQEBCwUAA4IBAQBhI/fk
LX2/YyjKS2qDR7BA6UIbEFvqfiyIt/oXjktgjBHcqCpXYvfw92HgtHIHPkzWN4TC
uANv3AAYbnPDIuvqqCr4p+yZNKglfE7NM+J6wdpinywdb1CW6kyuHSl7FZGdkeHm
Y9We/YTR+fu1R1RKQO2OsrIKcuIV6Asy3rhcHV3uN6gtRMWfa8XOvXj5WdmZZZaI
nzeC6fJkmuMfoVO+6NE8EuvPi8PHHw+62+95jT9TGnSwOv8Jlmv1F7JLq4tZBSl1
r2UvB5/OVKwDIoIS8joKrUENPp9gCs1rEmQsLCLsm4eNTSEBx6tvNP8ZSpT273nd
HW70YuQ0+AJ1f0Hm
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:16 2025 by rpki-client