Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
File: U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer (raw, json)
Hash identifier: oXiABWXRtc2zx8O/wFgEqdi579+ETOc50SFyYcrqG1I=
Subject key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C913105846D194C2775782289C10B8FBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 22 Dec 2023 11:02:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.70.36.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:31:05:84:6d:19:4c:27:75:78:22:89:c1:0b:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 22 11:02:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:5e:db:6c:14:63:42:83:bd:29:0d:c4:b4:
fc:38:8d:ae:79:33:2a:f4:f8:7a:43:43:2d:f2:34:
de:1e:d6:14:53:c6:93:b9:60:2e:7c:32:96:25:e0:
f2:bb:37:0d:48:aa:bb:6c:74:d5:35:64:90:82:9a:
26:2e:b8:d8:f0:cd:b0:5a:30:1a:de:c5:a1:17:9e:
05:f7:be:57:65:62:c6:58:db:81:b7:88:62:93:9a:
07:4d:66:30:3b:e3:04:85:56:a6:73:1d:90:75:a1:
33:67:13:34:af:5b:58:50:db:57:8b:cd:98:24:f9:
3d:82:f2:c8:68:ae:dd:85:d5:59:c8:6c:e7:56:17:
51:d8:de:bd:2d:6d:0c:86:4b:4b:1d:94:76:64:92:
b6:2f:3e:02:d6:8c:5c:52:a2:e9:be:d8:0d:2a:ea:
71:be:42:e0:8e:fd:67:b1:1f:55:01:90:65:aa:62:
f5:82:f7:68:f7:88:d8:89:d1:5b:72:d8:1f:e6:7e:
e7:31:94:4e:db:81:eb:34:33:cc:97:f8:29:b0:63:
68:b3:06:96:f6:65:19:63:e2:3e:ab:09:ac:2d:6b:
c8:08:0f:11:0b:d2:7b:a1:25:53:49:48:f9:b7:c5:
fd:6e:d3:97:53:83:c6:de:8a:54:05:1a:c1:1f:39:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.70.36.0/24
Signature Algorithm: sha256WithRSAEncryption
16:52:7b:7b:63:16:17:4c:8f:48:1f:5b:fb:ef:b2:cf:ff:ab:
1a:18:64:dc:e2:5d:e9:d4:81:6a:71:0f:72:5a:2b:2d:3b:5e:
04:50:5c:7a:eb:90:98:69:49:e3:b1:28:ea:5f:55:c7:04:30:
b0:ed:ed:d7:a5:7a:6d:a0:8d:e2:67:4a:57:2b:b6:39:84:a7:
7f:1b:46:9f:86:8d:45:a2:85:23:b6:2c:7e:57:b7:0c:5f:35:
67:86:80:0e:53:6a:81:e6:2b:73:fd:29:9b:08:54:eb:7e:c7:
0e:9e:0a:e2:63:83:dc:29:36:74:59:96:0a:ec:5e:4c:31:4d:
53:36:ca:a0:35:df:e0:ee:7a:fd:bc:f8:1e:d5:05:0c:4a:78:
53:de:3c:7f:2e:8e:03:3b:2b:04:ed:05:5a:6a:72:26:6f:57:
47:c8:aa:f1:aa:b1:0d:55:93:19:c2:76:28:42:1d:be:86:84:
71:37:45:52:73:fb:bc:de:0b:dd:6a:64:b6:c4:fd:9e:7a:da:
3c:bb:49:33:18:c7:6a:6f:8c:9a:30:a9:87:7f:28:1a:ae:d5:
42:57:fb:1c:ad:11:15:75:df:9d:2d:39:53:4e:f2:09:d4:73:
74:d0:76:6d:d8:06:f2:27:3d:27:9f:a5:1f:0b:19:c0:27:22:
db:6d:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:30 2025 by rpki-client