Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sl0LX9L80CI54EUs805DoGG46SU.cer
File: Sl0LX9L80CI54EUs805DoGG46SU.cer (raw, json)
Hash identifier: Rvfh2rzV95Vmk7WzjN5K2Xrdu8SgqT3PoKUZQXfUWVY=
Subject key identifier: 4A:5D:0B:5F:D2:FC:D0:22:39:E0:45:2C:F3:4E:43:A0:61:B8:E9:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A905F515A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/8dd2cb-ff29-42a8-bc10-c649480555e5/1/Sl0LX9L80CI54EUs805DoGG46SU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/8dd2cb-ff29-42a8-bc10-c649480555e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:07:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.87.62.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725949420964 (0xa905f515a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:07:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a5d0b5fd2fcd02239e0452cf34e43a061b8e925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:fe:18:6f:aa:30:0a:d8:f7:78:32:be:21:
ef:d7:04:92:19:ef:bd:52:34:7b:1c:65:e3:3b:75:
62:6c:9e:cf:1d:9a:34:71:18:65:33:b6:71:59:39:
fb:77:39:a4:a5:92:82:82:28:31:1c:0d:14:55:8f:
9f:9f:7a:1d:57:dc:03:5a:18:2c:a4:9e:71:90:49:
db:3e:35:1f:1b:8c:c9:60:96:c1:e3:b5:76:27:f7:
97:24:90:5a:74:72:87:14:09:77:82:3a:33:44:4a:
f7:d4:a2:f1:fa:2f:df:ed:de:af:25:e8:36:c9:f5:
e0:d1:cc:9b:4c:19:2a:f3:6d:ca:d1:c5:8e:14:a8:
12:29:f2:1f:a6:4a:a8:f1:85:2b:de:32:9c:b6:5e:
30:0b:4b:76:42:c1:dc:32:b0:84:17:2a:60:a0:48:
2e:8b:bc:5e:ae:ba:cb:7d:97:e4:bb:36:a4:0a:1b:
d2:c7:17:ae:fc:48:14:6d:03:cc:31:82:25:fe:86:
0b:06:eb:9a:7d:1d:33:ba:98:5d:30:58:88:18:d1:
56:e0:3f:34:17:93:9a:29:6d:14:6c:99:58:2c:ed:
9b:fa:84:40:de:54:fe:ed:e2:b8:0a:b0:96:35:02:
87:42:03:b7:43:cb:93:9c:70:49:dc:42:f3:52:a8:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:0B:5F:D2:FC:D0:22:39:E0:45:2C:F3:4E:43:A0:61:B8:E9:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8dd2cb-ff29-42a8-bc10-c649480555e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8dd2cb-ff29-42a8-bc10-c649480555e5/1/Sl0LX9L80CI54EUs805DoGG46SU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.62.0/24
Signature Algorithm: sha256WithRSAEncryption
13:dd:5b:c4:2c:97:f3:dc:7c:9a:0b:d7:b7:2c:9a:ee:ae:71:
ab:8a:a7:c4:e0:6f:0b:04:36:ee:d3:4c:fa:68:d2:5f:14:4a:
86:9f:9a:5f:b4:83:4a:ea:88:ee:5b:25:52:0b:db:66:7c:ca:
bb:db:9b:13:bf:43:ce:01:fc:c4:d4:7c:35:01:d9:7a:9a:0b:
77:e5:79:27:b9:7d:ab:b8:79:cf:5d:ea:97:00:70:78:ff:5e:
fe:6c:c0:2e:38:e6:25:8d:33:51:20:ab:ce:de:75:aa:c7:c9:
26:d6:c0:62:51:43:50:95:90:59:c3:ce:ea:c3:0d:8e:2a:98:
9d:89:29:34:ba:ea:f2:69:97:51:46:be:0d:8b:16:87:b8:c6:
03:b2:d4:62:c4:bd:98:48:11:63:e7:59:1d:4a:40:2d:98:c6:
e4:cb:f3:ec:3d:a6:9e:5b:2c:ef:ac:c9:51:6b:0b:4f:74:1a:
64:2d:b4:db:c3:13:31:2e:47:94:8b:74:b7:57:c8:0f:3e:70:
89:59:c7:63:79:b8:03:34:12:2c:e1:75:22:d3:cd:c6:f2:44:
6d:25:d9:7b:8c:72:6b:95:b8:7d:11:27:c9:e8:9c:47:fa:d0:
3c:78:66:03:9a:f8:a4:03:ab:35:d6:8e:1f:34:cd:9f:3e:9c:
53:52:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:23 2025 by rpki-client