Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UCD71VfD5YlMMt2AHw76SDvRTZo.cer
File: UCD71VfD5YlMMt2AHw76SDvRTZo.cer (raw, json)
Hash identifier: o7UmteVSw/AycTZiA7FH/tv9aUMr7++VPfUh/J+N1EQ=
Subject key identifier: 50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1ABB47DB302E6C7BFCBC48BB87C79A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/UCD71VfD5YlMMt2AHw76SDvRTZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.71.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:bb:47:db:30:2e:6c:7b:fc:bc:48:bb:87:c7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5020fbd557c3e5894c32dd801f0efa483bd14d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:2e:ce:7b:05:cf:34:03:89:83:0b:bc:a1:
fc:ee:44:cd:cb:6e:2f:69:8c:e6:18:7a:f5:7e:27:
2b:f1:ca:5e:25:8b:5c:4a:c3:51:31:30:e9:ea:3d:
7c:c5:f1:eb:f1:dd:35:2a:75:69:9f:e6:41:01:d9:
5a:92:a2:dd:df:20:d4:17:bc:b8:66:90:20:b5:d9:
a4:1f:75:a5:e3:7e:c3:78:3a:3a:91:40:12:94:78:
87:31:e6:25:55:47:bc:85:bf:93:33:bb:10:01:f4:
95:3b:a5:32:37:19:29:b8:ae:6f:e5:a2:de:87:f2:
de:6a:a8:16:8f:5f:c3:86:58:9f:41:e1:31:91:43:
fd:fd:c8:e9:23:7e:91:a9:84:d6:af:20:ef:8e:e4:
b8:16:b5:79:92:4c:bf:51:9a:67:29:c0:41:fb:29:
7e:71:44:12:c1:2f:d6:9f:81:2b:39:77:d6:4d:2b:
6e:ee:27:73:91:52:8f:85:30:b1:88:f4:6d:b1:9f:
69:bc:97:08:c2:c5:5b:f2:7e:af:d1:e0:fa:d9:da:
9b:43:47:a8:4b:38:81:1f:03:ac:4b:fc:f5:9f:c2:
ea:fe:57:1a:c7:b4:89:0b:74:f7:8b:2e:52:ef:78:
a0:2c:d2:e8:f4:d1:fd:2a:5e:ca:08:65:6c:23:67:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/UCD71VfD5YlMMt2AHw76SDvRTZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.71.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fd:8e:ee:24:e3:b4:44:29:64:1d:ad:a4:1f:f0:28:7c:df:
99:56:91:ee:c7:3c:a2:5a:71:d5:02:32:2f:71:34:4e:5d:38:
04:c7:09:be:7a:f5:7a:1c:1f:1a:af:54:64:16:e7:e9:75:8c:
c5:e1:5e:dc:f8:71:f1:a9:51:10:5e:f3:7f:4f:fa:1b:99:b3:
93:5c:a4:ca:72:46:a3:1e:a0:b0:73:27:9b:af:1b:f1:3d:dc:
4d:fd:d0:23:e6:30:ab:68:3c:07:dd:b8:97:c1:43:cd:ec:a6:
55:74:da:03:24:69:52:fe:9b:ee:f1:91:38:7f:a0:d3:b2:40:
43:59:cc:5c:3a:69:99:6b:ac:42:60:82:af:1d:dd:05:e3:39:
21:a8:43:de:75:d4:41:1a:cb:1e:36:6c:33:fd:f0:08:dd:ca:
56:6a:b9:fa:85:16:64:f0:e8:0f:9a:00:62:3b:f1:21:9a:50:
8e:05:81:7c:1c:5f:b1:6f:40:66:ea:34:1c:b9:c9:63:76:eb:
8b:2c:62:d4:fb:46:01:29:b5:f4:4d:d2:91:95:47:20:cd:80:
1a:45:45:34:e7:f1:48:5e:97:73:1e:60:6e:31:c1:d0:79:4d:
80:3f:a3:25:f2:24:70:6e:f3:04:b8:fe:d1:81:48:14:de:2c:
1c:6a:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:53:19 2025 by rpki-client