Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SKU4BWhwr1oNJ9gAWpC_9vJHKO8.cer
File: SKU4BWhwr1oNJ9gAWpC_9vJHKO8.cer (raw, json)
Hash identifier: pf0D3u4bCpUBattQ/msOUXs1r6BY/VxSgUjMS2zR/ZA=
Subject key identifier: 48:A5:38:05:68:70:AF:5A:0D:27:D8:00:5A:90:BF:F6:F2:47:28:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AF023411C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/b0b36d-4f2e-477a-b111-a3302b455a0f/1/SKU4BWhwr1oNJ9gAWpC_9vJHKO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/b0b36d-4f2e-477a-b111-a3302b455a0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Mar 2022 16:34:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 151.216.64.0/19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751656243652 (0xaf023411c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 23 16:34:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48a538056870af5a0d27d8005a90bff6f24728ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:d6:7d:e6:ab:91:7d:42:85:e5:96:62:5f:
4c:fe:8d:4f:16:7b:3b:c0:d5:1a:ec:67:6b:f6:16:
2f:99:ff:bb:86:af:c9:53:92:ab:09:43:df:47:86:
f2:83:f5:ad:a4:8e:c7:76:71:e4:a8:d2:f0:96:80:
5c:38:c8:68:53:45:78:35:aa:cd:b6:80:10:76:1f:
34:53:56:8f:b4:cd:aa:c9:df:35:f6:26:48:ad:fc:
a1:aa:4f:d6:9d:de:ff:a0:c6:5c:20:a8:c1:0a:83:
58:87:12:4a:b4:3c:29:f8:ef:ba:e8:35:fc:cf:9b:
48:38:57:13:fb:7f:44:ac:cf:56:09:f1:69:a6:32:
87:29:86:9b:f4:9f:cd:cf:92:e9:c0:55:08:37:be:
22:4d:21:4f:3f:e9:b8:66:44:c6:fa:f2:69:7c:1f:
ac:0e:b3:c2:f4:b3:a3:98:a6:04:db:6c:63:92:01:
9c:72:a3:a8:ad:bd:1a:c1:f6:da:60:61:df:16:b7:
35:01:99:08:20:cc:da:e0:e5:f0:d4:c6:38:53:17:
08:fc:1e:50:bd:be:25:fd:09:d1:74:8b:5a:99:76:
16:c0:e1:65:2d:4d:dd:22:45:39:62:46:49:35:17:
70:a1:49:2d:f1:01:e1:fa:65:20:46:91:4e:a4:b7:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A5:38:05:68:70:AF:5A:0D:27:D8:00:5A:90:BF:F6:F2:47:28:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b0b36d-4f2e-477a-b111-a3302b455a0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b0b36d-4f2e-477a-b111-a3302b455a0f/1/SKU4BWhwr1oNJ9gAWpC_9vJHKO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.64.0/19
Signature Algorithm: sha256WithRSAEncryption
30:43:77:e4:e9:6f:90:ef:c2:13:e5:47:21:c4:33:e0:78:5c:
24:ef:a4:1b:9a:c5:a1:1e:1f:56:15:db:4f:f1:8c:81:fa:d3:
a1:6b:c2:91:9e:82:15:d3:81:96:ad:e4:96:46:9c:c8:83:6d:
f5:b8:27:ab:7e:a5:06:25:a0:d7:e4:bf:a7:3f:13:e1:8f:4f:
d4:ae:12:6e:8d:6f:67:ea:0a:93:7f:f9:54:6e:8b:aa:03:a2:
a1:c3:8b:59:43:26:07:69:27:bd:29:33:46:98:27:55:57:6e:
9b:1c:f5:0c:ce:73:f6:fa:98:91:db:54:11:d7:b5:b4:3a:b4:
3f:27:6a:36:88:96:31:24:4c:0e:ee:2a:ef:a4:8b:23:9e:77:
ae:0e:5a:16:5b:a4:08:ed:3e:b2:d8:25:67:2c:7b:43:ff:aa:
7b:73:aa:ae:e5:50:af:47:3a:04:b5:9a:05:5d:1b:ee:a0:ee:
4e:23:57:af:37:c8:5f:f3:19:aa:b7:1a:44:99:96:7b:75:c3:
ef:e5:ab:3c:b8:6d:d7:12:1a:05:aa:1d:6f:77:a1:17:4b:46:
03:57:18:6e:dd:76:b4:02:80:83:b3:ff:80:89:ea:3f:55:bf:
e5:3f:ef:a2:45:d3:4c:a7:5b:fc:32:1d:aa:05:57:bc:7b:05:
d8:c3:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:40:53 2025 by rpki-client