Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SsUZPReKOsc1nG6cr8s8oDEp_To.cer
File: SsUZPReKOsc1nG6cr8s8oDEp_To.cer (raw, json)
Hash identifier: PLMK6Qcr88KqHYnM8fQpZg07wpKCIOXpAPYlE3DeLxY=
Subject key identifier: 4A:C5:19:3D:17:8A:3A:C7:35:9C:6E:9C:AF:CB:3C:A0:31:29:FD:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED40DA7E035486375248A717B5354C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/SsUZPReKOsc1nG6cr8s8oDEp_To.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.128.9.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:0d:a7:e0:35:48:63:75:24:8a:71:7b:53:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ac5193d178a3ac7359c6e9cafcb3ca03129fd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:b2:54:c9:e6:5c:71:ac:d0:c4:d8:53:61:
7c:0a:45:d4:6f:d8:16:f0:8a:5f:f9:3b:d4:d1:db:
a8:44:8a:f7:7b:73:dd:2d:a8:02:e2:20:77:ef:45:
3b:f5:9f:66:08:c7:13:de:8d:1b:79:97:d8:6d:74:
59:f9:7d:9e:9c:01:5a:ff:71:be:b7:38:c2:c7:7d:
87:db:e1:f1:fb:9e:ed:c8:b2:f7:72:21:cc:48:8a:
da:aa:b1:13:09:d3:4d:57:76:15:46:d2:75:f3:47:
22:93:85:e7:3e:1a:5c:be:6d:40:13:30:d9:e8:90:
5e:39:e1:58:23:8a:7d:5b:31:17:a4:2a:5f:c9:5f:
37:ae:e3:06:43:e8:14:e4:47:61:8e:92:1e:59:49:
ca:06:14:cc:e7:26:6b:da:5e:f0:6c:73:94:9c:68:
82:0c:49:8e:cb:57:e3:07:b6:8d:1f:7a:85:3c:26:
4d:35:d2:81:4c:b8:12:0b:8f:1e:f9:44:40:82:f4:
e6:99:47:94:6a:e4:9d:53:0f:04:97:52:64:42:85:
69:d4:e0:64:90:ba:fa:fd:77:b9:fa:de:2c:08:61:
ba:b5:c4:25:72:6f:3f:5d:88:08:e7:07:67:4b:30:
67:01:97:90:32:83:6e:a8:eb:ab:f8:75:1c:e3:76:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:19:3D:17:8A:3A:C7:35:9C:6E:9C:AF:CB:3C:A0:31:29:FD:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/SsUZPReKOsc1nG6cr8s8oDEp_To.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.9.0/24
Signature Algorithm: sha256WithRSAEncryption
38:70:3d:15:06:10:16:48:86:2d:9d:2d:ea:6a:4f:04:fa:45:
45:e2:f2:d6:4a:20:9e:29:17:af:e1:95:ec:ff:c7:d3:33:00:
ab:ca:a0:cb:72:5f:62:d4:9a:1e:60:52:28:f8:12:57:74:1e:
1b:74:98:cd:01:07:7b:29:a2:8b:0b:34:84:05:a0:30:7a:ea:
b5:c0:16:fd:f7:82:33:97:d3:0e:c4:0c:c2:b8:8e:ac:53:44:
ea:bf:ce:f4:7a:b6:14:96:7c:28:ee:27:71:c3:4e:8e:36:56:
71:62:84:26:04:70:40:2b:f9:6e:5c:ad:0b:33:90:55:57:73:
fc:f3:c7:d6:22:e7:c8:e5:71:3f:13:3c:da:65:36:8f:04:ce:
66:7f:46:9d:77:cf:43:da:b4:23:68:a8:a7:d5:fc:d0:dd:8a:
22:82:d0:80:98:60:9a:64:e5:d5:f6:26:da:f1:aa:c1:57:ca:
da:90:13:03:ed:4f:5c:71:07:8c:93:a5:76:7d:c4:5f:b7:76:
a5:13:39:e3:d4:d7:e3:49:a9:6e:f0:ea:a7:38:42:31:c4:94:
0e:26:7a:02:2a:66:09:15:20:33:3a:53:80:fe:81:3c:78:3d:
18:93:17:45:7f:fa:28:42:07:ae:be:3d:9d:73:a2:ce:d4:dd:
3e:8d:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:37 2025 by rpki-client