Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S12I5UjO6qYnwA1xjaBP1mfSxdE.cer
File: S12I5UjO6qYnwA1xjaBP1mfSxdE.cer (raw, json)
Hash identifier: /ZfmhUWJaNdhPu6xxeWQovs/GcEFhRZ1XMu1eU669P0=
Subject key identifier: 4B:5D:88:E5:48:CE:EA:A6:27:C0:0D:71:8D:A0:4F:D6:67:D2:C5:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708A64550F7965D3615C42827938A1EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/968e74-8315-4056-a81d-04fd81c1080a/1/S12I5UjO6qYnwA1xjaBP1mfSxdE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/968e74-8315-4056-a81d-04fd81c1080a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:33:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.236.140.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8a:64:55:0f:79:65:d3:61:5c:42:82:79:38:a1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b5d88e548ceeaa627c00d718da04fd667d2c5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:22:0a:02:1a:c2:82:66:09:24:65:a8:37:
5b:3a:aa:6e:e1:49:ad:b2:ef:e4:a1:cc:20:68:11:
94:ee:d4:4d:4c:d3:8e:6f:1d:99:72:54:27:8d:37:
7f:3c:eb:bf:13:30:b8:05:67:5e:64:bc:62:a5:04:
18:79:3b:84:b3:47:bd:70:5b:00:09:92:66:89:6b:
f9:a1:35:a0:0b:00:2b:f5:69:fd:75:d6:77:d3:c8:
c1:e7:3f:25:70:d1:47:93:d7:46:2d:7f:ca:88:ae:
52:a9:53:c9:8f:46:3b:b9:90:04:3f:b3:6e:04:bd:
d5:a8:82:3a:3c:b3:c2:e3:32:91:63:73:27:0a:63:
c4:6d:b3:ca:b7:d8:d4:6b:55:37:1f:88:cf:a1:fa:
11:42:68:41:7b:e7:68:66:d3:db:c2:37:ee:5e:23:
f5:e2:27:1b:1e:2f:10:78:cd:73:51:33:a6:c6:7b:
ea:f3:27:65:fb:48:d7:fd:c0:44:3e:7c:09:51:73:
59:b1:2f:23:63:d3:3e:9f:c7:b0:b8:50:7b:c0:dc:
86:e3:cc:7f:53:73:2d:9e:71:4b:8d:cd:4c:79:f4:
fb:b0:98:fc:e7:e1:35:93:c0:fd:7f:d0:1d:06:d3:
ef:7c:b1:4d:e7:64:39:82:6c:90:d6:ad:b3:23:4f:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5D:88:E5:48:CE:EA:A6:27:C0:0D:71:8D:A0:4F:D6:67:D2:C5:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/968e74-8315-4056-a81d-04fd81c1080a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/968e74-8315-4056-a81d-04fd81c1080a/1/S12I5UjO6qYnwA1xjaBP1mfSxdE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.140.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0f:31:0a:8d:77:ea:24:27:cd:84:ee:61:78:da:5d:52:11:
21:fa:d3:88:dc:e2:a0:7a:0e:ee:c4:7a:75:be:e6:55:6c:2d:
5f:5e:52:20:f1:9b:12:12:a3:cd:42:71:4f:db:24:93:d8:78:
e6:aa:84:70:25:95:e2:85:a0:41:cd:5f:8e:11:ef:fc:c8:5d:
67:be:76:38:60:32:dd:94:b8:7c:5f:e5:d7:9f:b8:40:c1:ae:
c2:c3:5d:3b:21:f6:f8:0a:d6:49:43:c4:6d:b9:1d:65:aa:4f:
b4:03:b6:9b:d4:d7:4c:3e:ad:53:01:ae:d3:13:16:c2:64:24:
44:9b:89:aa:5b:fa:ba:4d:9f:a7:f7:5e:6c:27:f6:d0:e0:2c:
1a:63:43:92:a6:ec:97:8a:f4:9f:d8:b3:41:6d:19:8f:5d:71:
5e:95:ba:e5:ca:aa:9f:a3:49:2d:f5:09:88:80:55:e6:9a:cb:
69:95:49:f4:49:88:29:40:04:ed:7a:18:c2:f2:b2:69:4e:ca:
81:67:ff:3a:ec:a7:76:56:4d:8d:b9:a8:a4:ca:9a:e6:ad:4c:
59:bb:8b:fe:14:e4:dc:9e:b2:f2:70:15:82:50:e8:3f:72:4e:
67:ce:24:72:e3:ac:92:00:64:ab:2d:ae:11:bc:0c:55:ee:a1:
0b:13:ee:01
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVwimRVD3ll02FcQoJ5OKHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjVkODhlNTQ4Y2VlYWE2MjdjMDBkNzE4ZGEwNGZkNjY3ZDJjNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxIiCgIawoJmCSRlqDdbOqpu4Umt
su/kocwgaBGU7tRNTNOObx2ZclQnjTd/POu/EzC4BWdeZLxipQQYeTuEs0e9cFsA
CZJmiWv5oTWgCwAr9Wn9ddZ308jB5z8lcNFHk9dGLX/KiK5SqVPJj0Y7uZAEP7Nu
BL3VqII6PLPC4zKRY3MnCmPEbbPKt9jUa1U3H4jPofoRQmhBe+doZtPbwjfuXiP1
4icbHi8QeM1zUTOmxnvq8ydl+0jX/cBEPnwJUXNZsS8jY9M+n8ewuFB7wNyG48x/
U3MtnnFLjc1MefT7sJj85+E1k8D9f9AdBtPvfLFN52Q5gmyQ1q2zI09D5QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEtdiOVIzuqmJ8ANcY2gT9Zn0sXRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4Lzk2OGU3
NC04MzE1LTQwNTYtYTgxZC0wNGZkODFjMTA4MGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvOTY4ZTc0
LTgzMTUtNDA1Ni1hODFkLTA0ZmQ4MWMxMDgwYS8xL1MxMkk1VWpPNnFZbndBMXhq
YUJQMW1mU3hkRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAueyMMA0GCSqGSIb3DQEBCwUAA4IBAQAhDzEK
jXfqJCfNhO5heNpdUhEh+tOI3OKgeg7uxHp1vuZVbC1fXlIg8ZsSEqPNQnFP2yST
2HjmqoRwJZXihaBBzV+OEe/8yF1nvnY4YDLdlLh8X+XXn7hAwa7Cw107Ifb4CtZJ
Q8RtuR1lqk+0A7ab1NdMPq1TAa7TExbCZCREm4mqW/q6TZ+n915sJ/bQ4CwaY0OS
puyXivSf2LNBbRmPXXFelbrlyqqfo0kt9QmIgFXmmstplUn0SYgpQATtehjC8rJp
TsqBZ/867Kd2Vk2NuaikyprmrUxZu4v+FOTcnrLycBWCUOg/ck5nziRy46ySAGSr
La4RvAxV7qELE+4B
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:51:52 2025 by rpki-client