Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer
File: RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer (raw, json)
Hash identifier: W/pC0s4gaFRGwfpmrBLjRtaxlNiRNBmNH0M5+/Mxcpc=
Subject key identifier: 46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B63510CE1B1BE55283CA0674C493C9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/RkJmNgCVZ02VtwcwsxMmQjLAK6A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 93.157.105.0/24
IP: 2a11:7080::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:51:0c:e1:b1:be:55:28:3c:a0:67:4c:49:3c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=464266360095674d95b70730b313264232c02ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d0:59:e2:50:86:77:9f:0c:cf:35:b5:e0:20:
45:c9:a0:d5:23:97:b8:67:6f:bd:62:13:93:87:66:
5e:fa:77:13:7b:7b:6d:b4:62:71:8e:82:52:52:12:
60:aa:67:d3:77:ba:9f:cd:92:47:3f:ea:cc:75:f0:
52:0b:53:36:7f:71:4f:a3:57:07:1f:7b:ea:0e:2a:
6f:0e:25:e2:bc:1c:b8:e5:49:05:31:8e:7c:be:87:
9f:40:9d:a3:3b:d6:1f:1c:57:0b:fe:b7:e9:94:7a:
de:d4:32:cd:ae:f5:a4:9f:fa:35:59:aa:5b:a5:11:
5d:d4:39:7c:45:f2:46:2c:92:2c:d2:59:3f:ac:a0:
00:0a:e3:23:1d:13:78:86:f6:b0:31:1c:5d:6d:41:
31:67:2a:ff:6b:7a:4a:eb:f2:83:c1:19:74:27:54:
a9:3a:a6:c7:31:66:5c:af:2c:ef:4b:89:69:86:71:
c9:2f:6b:72:6a:fd:30:e4:4a:3f:f1:07:86:f5:9b:
aa:71:de:70:e3:b8:0c:8e:eb:13:b6:3a:18:af:4f:
72:3b:87:68:50:eb:33:62:c0:23:f6:79:58:5b:d3:
66:33:84:f7:a3:fb:ab:81:18:d3:72:41:14:20:54:
60:66:0a:5a:81:f9:a3:ed:38:f5:1c:52:c4:c4:5e:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/RkJmNgCVZ02VtwcwsxMmQjLAK6A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.105.0/24
IPv6:
2a11:7080::/29
Signature Algorithm: sha256WithRSAEncryption
94:7c:d1:de:80:5e:2a:f1:31:2e:18:a5:79:cc:46:87:95:c6:
05:f2:02:34:0c:0a:98:f1:f6:ef:c0:4c:90:af:ab:b1:e7:d7:
b7:17:17:9b:35:45:b8:91:8d:b2:8c:ed:b0:bf:5a:e8:31:3c:
b7:35:91:18:b3:8c:d9:cb:4c:0a:96:7d:2e:04:7d:71:ea:86:
c4:da:51:3c:a8:fe:49:3c:c5:5d:24:66:75:60:e1:63:fe:3b:
11:68:24:71:9a:aa:45:f7:6f:c8:38:3b:a8:ab:28:51:23:76:
6d:0c:51:cc:b2:45:34:3f:a0:21:eb:21:ff:e5:c2:d6:6c:4b:
b8:7a:31:d3:a5:e3:51:51:80:95:4d:59:bb:ce:9b:a1:88:fe:
24:6d:cb:e7:eb:9e:88:ae:9f:3d:84:16:88:40:40:aa:58:c7:
45:38:d0:fd:e9:7d:fa:28:7d:75:cb:a4:40:f4:c2:9f:45:5d:
dc:ed:54:21:53:33:5f:d8:fb:c3:27:c2:f8:1e:3a:8f:e7:d6:
73:03:f3:a3:dd:c4:5b:9e:27:a4:69:e3:e3:19:b7:23:a2:32:
f7:12:4d:36:89:92:36:a6:70:0c:c9:16:ac:52:b6:2a:c7:6d:
ac:5a:a5:2d:3f:e2:a9:0d:e1:bb:21:5c:82:1b:4b:d0:21:9a:
3d:86:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:59 2025 by rpki-client