Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XAtF1U5f8vd5zyrRNplkLHRrpAw.cer
File: XAtF1U5f8vd5zyrRNplkLHRrpAw.cer (raw, json)
Hash identifier: OGe6Bn4FdeMOM53BytUYPbxxDpFeKcRN0+82/3YpIqY=
Subject key identifier: 5C:0B:45:D5:4E:5F:F2:F7:79:CF:2A:D1:36:99:64:2C:74:6B:A4:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AB488E5F0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/XAtF1U5f8vd5zyrRNplkLHRrpAw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 16:07:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34307
AS: 203379
IP: 193.201.147.64/27
IP: 193.201.148.192/26
IP: 193.239.116.0/22
IP: 194.246.39.224/27
IP: 2001:7f8:13::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735656697611 (0xab488e5f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c0b45d54e5ff2f779cf2ad13699642c746ba40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:cb:0f:5a:a1:1c:6e:e2:e8:99:4f:bf:17:
6e:0c:21:06:36:b3:e4:9d:09:7d:0f:ab:a7:cd:fa:
f3:43:3a:9d:94:24:84:f9:dd:b3:25:24:77:51:a4:
ce:68:7c:74:ea:d7:23:5c:0c:c0:d9:f6:0f:9c:1a:
35:27:bd:7e:9f:04:f5:22:0a:79:4b:19:7a:91:c6:
df:38:76:60:f6:38:5e:66:27:20:68:a0:6f:c5:5c:
53:91:c5:b2:c7:44:9c:59:19:2d:2f:63:a9:10:b7:
8d:1c:a9:2f:f5:8f:90:24:39:11:81:3f:7e:c9:03:
36:25:b8:ed:c9:6f:0e:13:5c:45:c0:2d:1b:bd:00:
02:f5:9f:89:fa:cd:64:28:bd:40:52:7b:94:6a:4c:
e3:cf:44:7f:2b:1a:55:1c:28:ac:d6:70:a6:f2:7a:
c9:aa:ba:4e:db:1d:de:7a:8d:55:23:0c:00:43:86:
75:eb:e3:76:2f:a1:7e:18:dc:e8:63:34:46:6d:0c:
8a:c3:25:36:5c:73:ca:7e:65:c3:06:72:3f:2d:79:
e5:a4:21:52:b8:5d:3c:71:20:64:17:e1:a8:dd:f1:
1b:da:5c:93:2b:63:0e:d5:58:49:d7:7d:5d:c7:7c:
45:4e:df:33:be:46:ff:ed:c8:da:ec:cf:29:76:50:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0B:45:D5:4E:5F:F2:F7:79:CF:2A:D1:36:99:64:2C:74:6B:A4:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/XAtF1U5f8vd5zyrRNplkLHRrpAw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.147.64/27
193.201.148.192/26
193.239.116.0/22
194.246.39.224/27
IPv6:
2001:7f8:13::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34307
203379
Signature Algorithm: sha256WithRSAEncryption
07:2c:a3:35:85:9f:7f:8c:1e:1a:d9:fc:c7:6f:69:bf:24:05:
42:16:d0:18:1a:8f:8f:0b:67:e1:30:6f:7f:de:11:2b:11:aa:
05:13:8e:f8:c2:86:26:a3:31:12:59:aa:fe:77:93:bb:b7:30:
b5:57:fe:41:da:4a:2d:d9:1b:b9:f1:a7:3c:eb:3a:ae:e8:2b:
60:b9:db:75:93:cb:ce:13:da:0f:75:46:7b:62:32:31:9b:1b:
88:8f:f0:67:51:74:2c:9f:0d:b1:fa:cf:a3:3a:c6:76:c3:02:
26:4f:f4:18:f7:42:fc:0b:b2:0a:14:c5:e8:52:07:19:ae:8c:
bb:fc:d0:2a:48:85:fa:b6:03:c1:80:4b:2f:02:e1:03:26:9b:
6f:4b:8a:6e:50:9e:8b:25:5a:c5:22:e1:6d:84:fb:37:41:2b:
31:3d:fe:78:c0:05:fc:5b:11:1c:ae:ac:98:a0:8f:16:ed:5c:
0a:3a:82:6a:50:93:4d:c7:9a:1c:5a:f3:84:81:32:1d:25:c1:
c3:a6:52:dd:b1:1a:cf:d3:41:b0:69:a7:8c:d9:09:f9:06:ef:
e3:12:60:c9:fc:8c:11:a0:c8:aa:f4:db:12:66:88:31:38:92:
45:ec:0e:f9:25:6c:ce:10:05:00:36:cd:1e:0f:cd:57:a0:77:
ff:8d:26:b2
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIGAKtIjl8LMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTYwNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1YzBiNDVkNTRl
NWZmMmY3NzljZjJhZDEzNjk5NjQyYzc0NmJhNDBjMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxv7LD1qhHG7i6JlPvxduDCEGNrPknQl9D6unzfrzQzqd
lCSE+d2zJSR3UaTOaHx06tcjXAzA2fYPnBo1J71+nwT1Igp5Sxl6kcbfOHZg9jhe
ZicgaKBvxVxTkcWyx0ScWRktL2OpELeNHKkv9Y+QJDkRgT9+yQM2JbjtyW8OE1xF
wC0bvQAC9Z+J+s1kKL1AUnuUakzjz0R/KxpVHCis1nCm8nrJqrpO2x3eeo1VIwwA
Q4Z16+N2L6F+GNzoYzRGbQyKwyU2XHPKfmXDBnI/LXnlpCFSuF08cSBkF+Go3fEb
2lyTK2MO1VhJ131dx3xFTt8zvkb/7cja7M8pdlCLXQIDAQABo4ICyzCCAscwHQYD
VR0OBBYEFFwLRdVOX/L3ec8q0TaZZCx0a6QMMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2M3ZThkMC00NGRmLTQwZjAt
YThjYi00MmI0MjhkZDRhYjMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYzdlOGQwLTQ0ZGYtNDBmMC1h
OGNiLTQyYjQyOGRkNGFiMy8xL1hBdEYxVTVmOHZkNXp5clJOcGxrTEhScnBBdy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAh
BAIAATAbAwUFwcmTQAMFBsHJlMADBALB73QDBQXC9ifgMA8EAgACMAkDBwAgAQf4
ABMwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAIYDAgMDGnMwDQYJKoZIhvcNAQEL
BQADggEBAAcsozWFn3+MHhrZ/Mdvab8kBUIW0Bgaj48LZ+Ewb3/eESsRqgUTjvjC
hiajMRJZqv53k7u3MLVX/kHaSi3ZG7nxpzzrOq7oK2C523WTy84T2g91RntiMjGb
G4iP8GdRdCyfDbH6z6M6xnbDAiZP9Bj3QvwLsgoUxehSBxmujLv80CpIhfq2A8GA
Sy8C4QMmm29Lim5QnoslWsUi4W2E+zdBKzE9/njABfxbERyurJigjxbtXAo6gmpQ
k03Hmhxa84SBMh0lwcOmUt2xGs/TQbBpp4zZCfkG7+MSYMn8jBGgyKr02xJmiDE4
kkXsDvklbM4QBQA2zR4PzVegd/+NJrI=
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:53:32 2025 by rpki-client