Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SmLi821fdMSBwIjMqucFH-vs_sU.cer
File: SmLi821fdMSBwIjMqucFH-vs_sU.cer (raw, json)
Hash identifier: 7KNjABHoGpbee3y/h+J+k5tw+UHCGJwxLtyOt6w8Two=
Subject key identifier: 4A:62:E2:F3:6D:5F:74:C4:81:C0:88:CC:AA:E7:05:1F:EB:EC:FE:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A04864B000
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/SmLi821fdMSBwIjMqucFH-vs_sU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:56:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.218.124.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688409325568 (0xa04864b000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a62e2f36d5f74c481c088ccaae7051febecfec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:50:5d:91:11:57:64:6f:e5:85:df:c8:0d:
b1:5b:3e:50:35:43:4e:e2:6a:4e:e3:08:73:1a:fb:
38:1c:e7:a1:b6:3f:07:d6:66:51:b8:97:54:61:de:
bd:ef:b2:63:e2:fd:ef:83:d9:0b:4e:06:55:32:6f:
bc:d6:8e:19:c9:f2:4e:d2:88:f4:e2:48:f2:b8:b4:
db:e7:62:20:19:cf:c4:db:1e:82:ea:1d:5b:62:10:
97:44:ab:c5:b5:ae:30:21:11:62:2f:21:78:1f:0f:
52:ad:7f:12:8a:aa:cf:27:1b:e3:78:cf:fb:b5:ab:
b7:ab:7a:e9:3e:b6:06:fa:68:b9:8e:48:20:82:8d:
17:fc:42:cb:79:e4:31:01:61:0e:d9:b2:1a:86:ce:
41:69:f5:00:77:9c:a3:34:a3:9f:89:e0:62:33:c2:
56:d1:83:d0:c0:c3:a7:5d:01:12:39:32:44:e0:d4:
2b:be:4d:ea:7b:11:7b:dd:92:19:89:17:21:7f:d5:
69:b4:63:d4:b3:05:d6:a6:fe:65:86:83:c6:cb:24:
a6:3d:93:c9:02:76:07:e3:fe:6c:2f:46:cf:b3:4c:
f0:db:59:d9:47:df:14:26:47:14:db:15:49:86:7f:
ba:ef:cc:4a:30:7b:52:1b:fb:da:06:af:16:88:f8:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:E2:F3:6D:5F:74:C4:81:C0:88:CC:AA:E7:05:1F:EB:EC:FE:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/SmLi821fdMSBwIjMqucFH-vs_sU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.124.0/23
Signature Algorithm: sha256WithRSAEncryption
68:af:45:3f:5f:17:78:04:e0:2a:1a:eb:11:27:ca:28:a8:c9:
be:9c:b7:84:46:56:39:90:d5:f7:f6:b0:9f:1d:4f:f8:63:e4:
82:09:64:0e:d8:b2:7f:9c:6b:6a:b4:c0:21:c7:ca:26:41:36:
d5:e9:f5:7d:26:d4:c6:76:b0:37:d3:fb:31:4d:75:fb:f0:2e:
e4:8d:aa:28:9b:6c:8f:60:a2:c8:12:f4:66:15:e1:8c:56:8a:
a0:d1:34:7f:1d:f3:f3:ef:ee:38:5a:92:5e:4a:8a:19:b6:ba:
3d:8f:84:61:ca:20:35:89:0e:b4:63:83:ae:c1:d7:4b:97:20:
9c:66:b9:00:66:e2:14:76:4d:d0:59:d6:fe:4f:cd:84:2e:c7:
0e:33:c4:54:98:8a:3b:2d:bc:60:e8:ae:b9:76:67:d0:fa:0d:
b5:67:45:2d:f9:b7:66:87:25:f3:38:d4:46:e9:0e:6c:62:62:
98:cd:29:3d:38:d4:04:65:7a:33:71:43:ba:35:b5:d7:59:ce:
d4:09:dd:15:6e:2e:ee:83:6b:02:01:c8:1f:f7:81:35:18:b9:
65:fa:b6:6b:a6:d4:f0:72:0c:ba:bb:48:97:83:73:be:48:99:
b9:84:62:61:b8:eb:18:db:9d:60:c5:ff:41:fa:4f:7e:43:45:
64:c2:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:05 2025 by rpki-client