Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WbqZU4WRbiuPnksCzwI6im7MkNY.cer
File: WbqZU4WRbiuPnksCzwI6im7MkNY.cer (raw, json)
Hash identifier: yXlb3OhAt751TUaPn5xqsHfTGVU864VQTFwbyGxLP+w=
Subject key identifier: 59:BA:99:53:85:91:6E:2B:8F:9E:4B:02:CF:02:3A:8A:6E:CC:90:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01870D7315DC571707D65ECC7D568F188F42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/WbqZU4WRbiuPnksCzwI6im7MkNY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Mar 2023 07:50:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 208124
AS: 211627
AS: 212679
IP: 91.209.161.0/24
IP: 185.252.200.0/24
IP: 185.254.165.0/24
IP: 2a10:b240::/29
IP: 2a10:c4c0::/29
IP: 2a12:8840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:73:15:dc:57:17:07:d6:5e:cc:7d:56:8f:18:8f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 23 07:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59ba995385916e2b8f9e4b02cf023a8a6ecc90d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:42:05:d6:e7:0f:c9:90:9f:f6:dc:15:58:
e2:95:28:ab:b4:5c:6e:9e:88:82:12:c8:f3:06:b4:
45:48:32:6b:87:6f:6f:e0:65:0c:27:b8:01:93:21:
9d:77:0f:41:98:ee:d7:da:39:99:88:35:ca:ce:64:
ac:d4:b0:29:f5:d1:25:fa:26:63:7e:2b:0e:84:68:
da:77:ec:ca:25:c3:f2:e6:19:29:be:51:28:77:91:
0a:5f:4b:df:72:a5:6e:55:3d:ca:4d:3a:2d:e8:8f:
c9:14:07:ee:c0:e3:bc:a9:40:90:24:a0:4f:46:0b:
0a:bd:fc:9b:f5:bc:90:37:1e:c3:cb:80:7f:1b:c4:
21:13:2c:9b:8e:03:2c:04:75:ac:6c:24:c0:42:50:
71:02:c3:cd:4b:b7:74:ec:53:e3:02:b3:00:95:8d:
1b:e5:30:b1:77:22:62:9c:04:bd:68:9b:96:a9:49:
2e:81:79:a4:9b:05:4d:c1:d3:ab:09:da:df:b8:94:
0c:49:84:43:22:b7:fd:f2:5d:f6:86:16:68:2a:39:
37:c9:9c:9a:15:fa:0c:8a:b0:a8:cb:72:f8:6c:d9:
62:e1:71:2f:4c:ed:f1:e7:55:ce:33:73:48:93:1c:
18:5c:30:c0:44:cd:1e:be:4e:84:35:3b:07:13:c7:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:99:53:85:91:6E:2B:8F:9E:4B:02:CF:02:3A:8A:6E:CC:90:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/WbqZU4WRbiuPnksCzwI6im7MkNY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.161.0/24
185.252.200.0/24
185.254.165.0/24
IPv6:
2a10:b240::/29
2a10:c4c0::/29
2a12:8840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208124
211627
212679
Signature Algorithm: sha256WithRSAEncryption
0b:c8:ab:b9:db:fe:c3:37:92:aa:d8:60:28:a1:c0:20:de:d8:
f0:3e:d4:6d:4d:dd:12:a9:a0:79:48:a3:93:1f:45:aa:4e:1e:
15:2d:3d:a7:3b:36:fb:15:0e:06:39:43:01:0f:b1:1d:48:54:
ea:ff:eb:e1:38:ed:1d:58:3d:dd:a3:d4:63:69:06:b4:bf:e1:
32:8c:79:a6:ca:18:25:0e:42:10:e1:d1:f3:2b:be:cb:38:ee:
33:aa:cc:d4:21:61:85:0b:e0:2c:2d:08:32:93:bf:7c:3c:7c:
04:44:5a:62:2d:ea:87:1c:35:45:9e:07:05:6b:3f:40:0b:68:
c6:c0:8a:f2:e6:df:e3:61:80:9c:f2:e0:e6:44:28:98:91:af:
15:02:8b:69:40:c4:62:22:4e:46:c8:fa:a8:6f:75:61:36:31:
17:50:e2:56:19:01:6b:8f:d0:ca:bc:8c:82:fd:6b:78:12:59:
30:e4:f0:06:bd:9b:1f:35:80:2e:d0:aa:94:fc:a0:5c:91:19:
18:ea:5a:e8:2e:c2:fd:55:64:12:a5:2c:79:1a:84:7e:e4:a4:
d1:ae:1c:02:66:f8:6e:96:6d:68:5f:dd:9c:8d:08:4e:05:f7:
2b:30:ae:fc:a0:2e:30:e8:ed:c6:a4:ea:8e:76:aa:a0:bc:cd:
df:c1:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:10:55 2025 by rpki-client