Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SwmP2Sy9h0NLoRKBE8NGhcBtyfw.cer
File: SwmP2Sy9h0NLoRKBE8NGhcBtyfw.cer (raw, json)
Hash identifier: PnMNFgwKkrykr30jwfoQudUUNfkf9lAkO4CabbOyexU=
Subject key identifier: 4B:09:8F:D9:2C:BD:87:43:4B:A1:12:81:13:C3:46:85:C0:6D:C9:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4D26A9ADE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/620cd0-89b5-4372-a9b9-72017434dfd8/1/SwmP2Sy9h0NLoRKBE8NGhcBtyfw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/620cd0-89b5-4372-a9b9-72017434dfd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:55:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 208513
IP: 45.132.52.0/22
IP: 2a0e:6840::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707904838366 (0xa4d26a9ade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b098fd92cbd87434ba1128113c34685c06dc9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:5c:bb:11:0b:b7:d9:ef:f2:24:5c:7e:da:
96:27:fa:e9:b2:be:fc:78:ca:bf:54:d6:53:40:35:
e2:66:94:3f:f9:92:53:25:1a:aa:e1:27:f9:eb:c1:
8b:ba:e8:89:40:57:59:7e:d9:7b:69:78:78:1b:52:
60:00:fd:8f:c0:bf:5e:40:6b:d9:33:42:8a:39:30:
1f:94:63:3a:44:c3:77:2e:42:4f:ca:4a:91:5c:aa:
fc:e3:b7:24:e7:e6:ba:18:17:e6:ff:9d:96:dd:46:
36:c6:c6:cb:a2:e0:7d:e1:79:3b:47:40:2c:d4:9f:
92:a1:cd:59:09:2a:b2:21:63:49:d4:e0:e0:e2:46:
c3:81:a0:e2:a8:56:46:ad:60:78:9c:89:4f:ff:f0:
76:7b:d7:21:a9:d6:c5:cc:04:bc:b5:85:08:de:92:
88:2c:aa:28:b3:6b:f7:85:64:13:38:f1:52:ed:15:
98:72:09:24:63:fe:84:e2:d1:d2:84:62:97:2e:df:
8b:b9:e3:fe:08:e2:1c:cb:52:d7:96:d9:b1:47:f8:
91:e9:1b:da:bf:c1:f4:68:ef:f1:bd:8c:15:92:cf:
f9:ce:35:c5:47:2a:ea:d1:a5:a4:d0:20:b2:fa:c1:
91:7c:39:55:a8:61:4e:c0:65:fc:ac:ed:b1:41:ff:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:09:8F:D9:2C:BD:87:43:4B:A1:12:81:13:C3:46:85:C0:6D:C9:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/620cd0-89b5-4372-a9b9-72017434dfd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/620cd0-89b5-4372-a9b9-72017434dfd8/1/SwmP2Sy9h0NLoRKBE8NGhcBtyfw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.52.0/22
IPv6:
2a0e:6840::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208513
Signature Algorithm: sha256WithRSAEncryption
b0:0b:c9:73:e8:07:6b:7c:14:e3:d2:1f:6f:77:b8:1e:52:ad:
73:01:74:1f:3b:32:2b:47:bc:32:cf:4a:d7:f3:25:5d:55:a3:
fc:80:0e:27:bf:0e:b3:dc:6f:8d:66:6d:6e:f7:fe:10:d3:35:
87:e0:a3:eb:4a:3d:a8:77:87:89:79:79:7f:47:61:a7:67:3e:
6c:7f:a7:f1:34:84:c4:03:3e:de:fc:7b:6b:07:bf:ee:bd:38:
68:2a:54:75:c5:95:ec:a1:65:9c:46:60:fe:ed:6e:52:0a:37:
c3:a2:5e:c3:4c:ed:0d:f8:39:0b:a7:db:11:6e:db:44:53:c2:
bb:1c:af:3d:ef:13:a0:6c:7c:e7:54:0e:25:fc:8e:3b:0b:79:
0b:c8:aa:27:b4:b8:c8:26:79:d2:1b:bb:2e:b8:b2:23:26:f7:
04:aa:e9:fd:57:5a:77:9a:27:c2:81:14:43:5c:53:e6:f4:4e:
e3:f1:13:82:53:82:41:92:db:f9:d7:6d:69:af:d3:0e:c2:27:
01:52:aa:21:1c:1e:e4:ad:0e:81:f9:24:2c:be:c2:15:95:1c:
e5:eb:41:bc:1a:95:05:a1:84:0e:60:23:17:9d:d7:04:ba:4f:
45:af:b6:7a:5b:8e:40:24:9d:38:91:39:24:3d:c2:29:f7:07:
86:c0:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:10:39 2025 by rpki-client