Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UHudIqUBdsQgUjV0YYaR5SVWD9Y.cer
File: UHudIqUBdsQgUjV0YYaR5SVWD9Y.cer (raw, json)
Hash identifier: BUWYJIGtaY5SGK2qlAXNBuk6KTghZHnK8hEJjYztJpk=
Subject key identifier: 50:7B:9D:22:A5:01:76:C4:20:52:35:74:61:86:91:E5:25:56:0F:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98B8354504
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/32/507B9D22A50176C420523574618691E525560FD6.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/32/
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:01:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.133.116.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655925527812 (0x98b8354504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=507b9d22a50176c420523574618691e525560fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:94:0c:2d:46:c3:ea:b9:be:e0:b9:8f:df:
cf:1a:42:48:f2:46:6b:cc:56:5b:97:7f:d4:b6:6d:
bd:2c:e2:61:fd:1c:41:23:f5:a1:fc:76:d4:01:5e:
80:a9:51:df:10:ce:75:48:0d:12:a1:57:9c:fa:1b:
f1:08:e3:49:8a:e9:53:17:85:70:a1:4b:b9:09:0d:
ed:bf:5c:96:d3:fc:86:72:35:1f:48:2c:5e:e5:8d:
e0:0c:49:02:98:16:88:22:27:a0:72:d3:93:da:ec:
d6:57:0f:b3:d0:fa:a0:2c:85:a1:17:9b:eb:b7:5d:
e2:74:46:09:e4:87:2d:53:d4:75:26:03:cf:99:d1:
15:69:eb:b3:05:6b:61:5e:67:51:eb:2a:be:60:5b:
c0:e8:04:ef:70:d5:60:81:2d:0b:1b:37:85:c2:87:
5d:b2:ff:fc:41:de:f2:ba:ca:0b:59:59:eb:7c:6f:
7f:1e:a8:0b:96:23:e4:7a:86:55:b8:01:fb:c1:70:
f3:42:c5:c5:7f:3a:66:36:0d:6f:81:e4:9b:5f:0b:
0d:02:07:a6:8d:27:5c:1c:62:41:ae:77:4b:8c:63:
08:13:33:0c:2f:75:9f:9e:56:15:07:b8:0a:58:0e:
d9:01:95:a7:b1:70:cf:47:b2:48:58:bf:e0:9c:b6:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:9D:22:A5:01:76:C4:20:52:35:74:61:86:91:E5:25:56:0F:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/32
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/32/507B9D22A50176C420523574618691E525560FD6.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:e5:ea:23:e3:e2:53:8a:9b:e9:bb:06:0b:a2:18:da:2a:ee:
3d:cf:cb:f7:79:1f:b5:59:aa:10:ff:a9:93:74:60:ba:ed:1f:
cd:0e:7f:e5:e2:e8:1b:97:39:f7:e8:f8:2c:ba:d8:a8:e5:4e:
73:1b:2d:83:de:e2:21:89:03:a0:78:63:ca:9c:be:33:4d:e8:
11:bf:45:ff:99:91:54:b4:27:fd:f6:76:52:67:6d:61:11:b4:
b8:34:e5:3f:c5:35:19:56:b1:1f:8b:9a:3c:db:21:34:87:ca:
c8:55:be:4c:e9:81:d2:dc:44:ea:c6:3b:b7:17:87:a3:35:77:
1f:9d:f6:c7:22:be:de:f2:1d:64:18:cb:9f:5a:11:c1:9e:ba:
18:5e:c4:e0:8b:09:ee:5c:0d:7c:98:76:15:90:30:b5:b0:53:
b2:f3:b7:17:b2:ce:20:c0:92:68:40:2c:b0:6f:55:5b:d1:fa:
14:3f:04:3d:4e:2a:e7:61:2a:d7:1d:2b:8f:19:9c:8a:dc:04:
1a:d7:35:e3:2d:af:4f:b0:2d:82:92:50:03:26:de:9a:64:93:
9f:20:dc:25:38:04:ec:08:4e:08:09:8f:de:75:31:16:7d:2a:
8f:7f:84:37:54:e3:09:94:57:e7:4b:1e:ad:ce:8a:4c:3f:c5:
63:33:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:44 2025 by rpki-client