Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S8sc-KJ-ZJv9kdPgVSaS1djxhWc.cer
File: S8sc-KJ-ZJv9kdPgVSaS1djxhWc.cer (raw, json)
Hash identifier: N0RtKRbVq0lWyYPQV4h7PlTcY3aPe4yG3CkIxLaZLl0=
Subject key identifier: 4B:CB:1C:F8:A2:7E:64:9B:FD:91:D3:E0:55:26:92:D5:D8:F1:85:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD78C9BEDC6C5078FB10729195933E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/5f1b93-ab24-4bca-b88a-1ce11a86b2b0/1/S8sc-KJ-ZJv9kdPgVSaS1djxhWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/5f1b93-ab24-4bca-b88a-1ce11a86b2b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:33:06 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.95.184.0/22
IP: 2a0e:3840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:78:c9:be:dc:6c:50:78:fb:10:72:91:95:93:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bcb1cf8a27e649bfd91d3e0552692d5d8f18567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:71:ca:2e:77:c7:eb:d8:64:59:26:bd:04:
28:48:a1:28:4e:f6:2a:46:a0:83:12:62:4a:af:e2:
1e:e9:e2:74:ef:45:9d:a6:a7:43:3d:08:30:70:f7:
c6:33:1a:e8:f3:42:94:5e:5b:47:78:30:63:5d:a7:
e3:20:a1:c1:10:4b:30:ab:4e:0b:3e:99:a7:71:74:
21:22:8c:ba:7b:aa:4d:b8:a9:6a:e7:86:6e:93:7a:
99:ab:8d:5f:93:7e:28:39:2d:ad:59:e6:cb:ed:24:
0a:17:2a:17:03:f0:52:b7:ac:a3:79:b5:45:12:8e:
99:bb:d1:b3:06:1f:71:29:9f:3d:2b:04:06:89:67:
f5:25:5b:7d:6e:7e:40:1c:97:ba:0d:cc:0a:42:42:
76:80:cf:98:50:9a:54:d2:70:13:17:b3:1f:f3:54:
72:61:6c:46:30:86:86:01:fe:51:2c:fc:78:42:e0:
25:96:ce:a9:7d:bb:ab:dd:aa:7e:24:24:03:dc:b4:
5d:85:f0:1d:b5:3a:f7:18:d0:36:5d:b9:ab:b2:9b:
2b:e3:fd:60:dc:46:81:46:89:7d:ca:1c:37:76:d1:
7a:1c:23:66:7d:0b:61:3a:69:09:a7:a9:7b:d8:57:
ff:2c:24:2a:9d:60:3a:b1:8f:73:3f:ff:68:47:e2:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:1C:F8:A2:7E:64:9B:FD:91:D3:E0:55:26:92:D5:D8:F1:85:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5f1b93-ab24-4bca-b88a-1ce11a86b2b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5f1b93-ab24-4bca-b88a-1ce11a86b2b0/1/S8sc-KJ-ZJv9kdPgVSaS1djxhWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.184.0/22
IPv6:
2a0e:3840::/29
Signature Algorithm: sha256WithRSAEncryption
a2:17:3b:5b:f0:37:c7:20:7d:68:bb:03:3e:05:6f:74:b5:81:
34:a4:db:ed:0d:a1:4a:a0:07:7d:ab:81:b8:82:7c:fd:94:67:
8b:43:98:5f:13:b8:fb:26:00:9e:7f:23:55:b2:82:ce:83:0d:
c9:60:5c:0a:5a:1c:70:96:d5:ed:f7:60:7c:1e:76:1d:44:52:
fa:0b:d6:e4:ee:b7:7b:3a:7a:c7:5f:48:4f:49:7b:ea:fe:18:
54:f3:36:e1:bc:b1:de:68:f2:0b:d6:58:95:f7:c4:48:08:a1:
4a:8d:c1:6b:fe:89:15:3d:86:52:cc:29:7d:26:19:63:77:97:
4b:e6:3a:6f:b8:77:cd:0b:91:8b:8e:36:0e:26:96:00:b0:b0:
cb:fa:34:03:1e:7d:71:25:81:61:8b:60:84:a2:54:d4:cc:88:
1d:fe:ef:7d:37:2c:e3:dc:b7:a4:33:f9:56:b8:3d:4b:fc:b2:
93:48:9d:99:c7:66:d1:9f:74:13:a6:1b:09:cd:1d:c8:66:17:
77:27:0c:ff:af:7e:5f:a3:f4:7c:ee:6a:1f:59:0e:0d:af:70:
53:8a:41:b9:53:16:ef:6c:55:45:b8:f3:2d:59:b4:e5:95:9c:
a9:15:e3:ad:08:d0:f3:65:a1:36:9e:ef:ad:78:2b:1f:17:6d:
b8:3f:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:49:55 2025 by rpki-client