Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TPu6QuVNXC6430lF99AVlmoLcA4.cer
File: TPu6QuVNXC6430lF99AVlmoLcA4.cer (raw, json)
Hash identifier: 6Nn+fE2mfmQfp0rXovkyQ5KySgr/TOedDC7vixdZipM=
Subject key identifier: 4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB873B5D7A3700D0B6B36E050587B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/TPu6QuVNXC6430lF99AVlmoLcA4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.92.184.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:87:3b:5d:7a:37:00:d0:b6:b3:6e:05:05:87:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cfbba42e54d5c2eb8df4945f7d015966a0b700e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:be:f1:d9:62:af:df:27:40:62:0a:97:52:
11:22:cb:99:4d:d6:4c:ef:6c:95:85:dc:3c:40:5d:
a0:6f:3e:1c:52:fa:62:f8:76:c0:e1:42:62:d5:4f:
7b:b1:c8:84:fa:14:c9:a8:44:40:bc:ce:a8:f0:44:
bc:b7:63:11:84:b3:98:ee:a7:fe:5b:6c:5a:7a:dc:
39:21:00:ba:98:9c:51:26:3d:d7:39:a0:e9:f6:65:
54:20:6b:70:af:0c:3f:ca:4c:d5:0d:df:d5:84:f3:
89:44:4b:90:9d:89:52:f8:e7:f3:73:75:60:55:ef:
0e:7b:c2:c4:30:87:6c:8f:02:92:f1:c7:dd:06:5f:
7e:c0:da:7f:ed:7e:a8:6d:47:b0:c0:27:bf:47:ce:
08:76:6b:39:c3:c6:ec:55:f2:80:bc:e5:fd:a2:50:
93:f0:d4:58:b2:10:5d:d8:dd:4e:63:42:19:99:bb:
d2:bd:e7:15:ae:9f:08:04:a2:e0:21:a2:0b:00:bd:
52:01:71:d1:5e:80:4f:a7:b6:9e:a5:de:eb:33:8b:
57:de:5e:5f:23:72:6a:5e:a3:a1:87:86:40:dc:eb:
44:39:d7:b3:c7:7d:db:90:6f:95:78:ca:94:98:58:
f9:c7:4c:29:a2:02:ad:ee:94:25:43:ee:77:e5:18:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/TPu6QuVNXC6430lF99AVlmoLcA4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.184.0/22
Signature Algorithm: sha256WithRSAEncryption
83:e2:f7:9d:7d:99:be:77:1c:42:fd:56:ff:5e:e2:81:74:b7:
c3:73:79:42:e4:2f:b6:6d:8a:35:1c:4c:e2:ca:3a:3f:f1:18:
68:71:f6:4b:01:ac:8c:95:6e:68:33:8a:0f:df:44:b0:3d:49:
91:e3:51:68:57:68:22:30:4c:e1:5e:be:6d:d4:10:dd:dd:29:
47:66:c0:58:96:a1:f6:c1:7c:a6:bd:35:72:d3:90:a1:9e:04:
d5:68:16:9e:8b:f6:dc:03:18:2d:07:34:13:a5:ea:35:ad:23:
94:08:fd:93:e6:69:93:6d:dc:d7:83:4a:5e:5a:a4:e8:ac:f8:
dc:43:e0:d2:8c:6c:56:67:dd:be:97:25:8d:02:58:79:76:7e:
08:fc:1c:90:d1:65:8a:a6:da:5c:0d:ad:62:f1:d2:ac:a9:e4:
a5:f8:b5:55:7d:d8:6a:7f:55:4e:92:29:14:18:47:5b:5d:2a:
86:c8:76:d5:87:32:98:df:f5:fa:72:47:d4:f5:44:82:f1:24:
a3:2a:b1:89:e1:e8:0d:c4:14:ef:db:3e:05:3c:48:0c:dd:5b:
a9:59:67:ca:7b:37:f4:c0:33:ba:16:97:0f:a0:26:32:63:da:
54:d5:16:6d:37:4d:ae:a4:17:84:62:36:77:75:45:a6:89:ad:
7c:50:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:41:26 2025 by rpki-client