Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
File: WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer (raw, json)
Hash identifier: 9VephoRjwSajmmSdIDmZYYaRpfnFjVS7RLqajk7hjDI=
Subject key identifier: 59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D89974809D748619F2AD76CBAA8AD79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.4.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:97:48:09:d7:48:61:9f:2a:d7:6c:ba:a8:ad:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:e8:9a:95:f8:3c:67:9b:8f:b3:eb:2f:ae:
e4:30:47:d9:3c:2f:0f:d2:f9:17:69:61:c8:7c:ba:
f5:0e:8c:44:2c:83:25:33:c7:7c:91:8a:2d:8c:46:
53:26:f4:90:e9:fc:a7:54:6f:49:c2:90:22:82:78:
20:0f:46:38:d3:28:72:64:ef:5e:59:ef:4f:46:f2:
47:a4:63:d0:5a:d1:2b:bd:55:0f:1d:dc:28:08:07:
73:37:aa:00:52:56:8b:d0:3f:49:6e:88:7b:7d:ae:
9a:e0:ee:77:35:54:4d:56:86:d8:bb:ee:c5:02:62:
bf:92:44:8e:4a:b7:dc:f8:34:32:b1:42:9b:91:4e:
ec:ad:62:38:f6:c0:15:31:54:05:95:27:12:9d:71:
8c:55:d5:b0:19:46:97:a8:02:44:79:07:fa:df:eb:
83:a4:11:d7:db:2c:3f:26:d1:72:f5:87:6c:d6:5b:
74:9a:bb:2c:d7:fa:03:54:27:a7:97:ef:be:fc:46:
0f:a9:32:a7:88:2f:4a:74:af:bf:ea:a7:34:15:84:
9b:8f:4f:25:6d:b0:d9:d6:b6:87:c2:b3:91:62:d0:
2f:0f:84:7b:22:fd:ec:0a:3d:52:fe:89:13:72:05:
e4:80:22:ad:c4:de:df:a3:39:3a:b4:54:6d:d1:4b:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a2:7b:65:30:0a:d8:01:87:bd:24:6e:45:34:3f:5e:53:c0:
61:7c:46:c5:16:8d:ca:8a:5d:5f:5b:fc:13:16:27:30:df:9c:
04:4b:d1:06:23:c7:49:b3:50:f6:d3:5c:28:86:d8:90:30:f1:
0c:d0:c2:31:e4:43:3e:0d:14:1c:8b:b3:e0:d8:79:a7:33:80:
f5:29:57:bf:db:19:a8:6a:fc:b7:2a:8a:f2:39:b4:1f:9a:b1:
93:f7:18:7a:d0:a0:53:9e:5e:60:7e:17:05:1c:3f:a3:3c:17:
e9:b5:49:62:9b:c5:b2:4b:af:fd:f0:3e:c1:f5:f9:0b:c2:95:
a2:47:81:6e:bf:1a:b3:66:ce:94:12:84:cf:ce:ee:05:b2:54:
9f:9f:1c:91:97:b6:e6:cf:95:67:ef:f0:97:13:61:58:29:dd:
ff:07:bb:9e:27:95:79:8c:e7:d9:c3:2b:ff:ac:73:1a:ca:4f:
3c:ad:8e:2a:d8:cf:1e:9e:60:ff:af:e8:d7:a2:cc:6c:31:5f:
4b:5b:42:8d:e0:01:d5:be:79:dd:48:e4:34:2a:07:60:e8:0c:
50:94:23:13:f3:4f:fc:b5:5e:bd:ed:1b:32:ac:66:bf:78:d6:
6e:74:5d:3c:9b:f6:e3:35:a3:d0:05:39:4a:93:a2:44:b0:d9:
fd:82:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:07:52 2025 by rpki-client