Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XGDtjLR0YkWn6QFUmuE_DBBVLhU.cer
File: XGDtjLR0YkWn6QFUmuE_DBBVLhU.cer (raw, json)
Hash identifier: PYG6tKp6x39XFhoyiwpIVrU698n6hU7kEkSrLJSX5fE=
Subject key identifier: 5C:60:ED:8C:B4:74:62:45:A7:E9:01:54:9A:E1:3F:0C:10:55:2E:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018487D439B06B832F15545D567BA9A89CE9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/b103d1-4c6c-41ba-82a7-d03bc1512cc7/1/XGDtjLR0YkWn6QFUmuE_DBBVLhU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/b103d1-4c6c-41ba-82a7-d03bc1512cc7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Nov 2022 23:02:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209529
IP: 185.228.220.0/22
IP: 185.248.72.0/22
IP: 2a0e:70c0::/32
IP: 2a0e:a540::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:87:d4:39:b0:6b:83:2f:15:54:5d:56:7b:a9:a8:9c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 17 23:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c60ed8cb4746245a7e901549ae13f0c10552e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:36:57:db:f7:b6:2e:1a:e8:06:3a:97:0b:
d8:57:8d:49:1e:4d:f3:c4:04:49:e7:61:1f:b4:2b:
5b:61:3a:7a:7e:40:7d:0b:a0:f9:27:37:e7:40:c2:
35:5a:db:dd:86:20:6a:19:a2:fb:bd:a6:1e:34:e5:
0c:3f:a2:dd:14:98:6b:e1:67:93:61:99:03:63:54:
40:a8:e2:ca:d4:21:94:01:29:4a:dc:fc:df:9b:24:
14:4a:32:0c:6e:3b:a0:a6:be:b3:c3:fa:59:dd:b4:
fc:82:97:d7:20:f5:14:3a:ce:18:4c:c5:53:e9:6f:
02:5a:79:87:4f:fd:ed:3f:34:08:c3:10:21:03:b4:
5b:cf:50:e2:9a:46:90:95:d0:4c:9f:3a:47:c5:c7:
82:20:b5:88:cd:51:01:aa:c5:fc:de:3d:23:86:35:
51:87:0b:bf:40:a3:b9:65:61:2f:86:a9:50:88:42:
1c:67:11:0a:6b:46:52:c9:f3:be:4e:d7:9c:68:d9:
b3:13:dc:96:87:a3:b0:08:3e:c0:52:db:86:b2:3c:
09:88:38:dc:09:b2:ed:fd:ca:7b:10:0c:e5:a3:93:
bb:83:63:99:47:ec:6b:e6:44:5f:e7:a7:e6:26:61:
fa:4d:45:08:4d:3f:46:13:7c:fd:5d:77:a4:ef:11:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:60:ED:8C:B4:74:62:45:A7:E9:01:54:9A:E1:3F:0C:10:55:2E:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b103d1-4c6c-41ba-82a7-d03bc1512cc7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b103d1-4c6c-41ba-82a7-d03bc1512cc7/1/XGDtjLR0YkWn6QFUmuE_DBBVLhU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
185.248.72.0/22
IPv6:
2a0e:70c0::/32
2a0e:a540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209529
Signature Algorithm: sha256WithRSAEncryption
49:b4:57:60:3d:6a:c1:8e:97:b3:2a:7d:36:69:2f:0d:72:86:
f3:3f:be:34:ec:bd:b2:28:bf:d6:8a:75:0f:41:6b:d2:38:69:
02:7a:02:d5:f4:c9:b9:f6:93:91:55:7f:30:02:17:63:a3:96:
2f:59:b4:d3:49:4a:1a:9a:05:4c:7e:ce:19:ec:23:05:90:45:
9d:ab:71:d4:5c:64:f0:6d:19:e6:b7:2c:8d:26:cc:a4:83:0d:
c5:11:51:de:8e:8d:4c:56:e1:e0:72:01:1a:ef:27:bb:83:e6:
7b:a7:f6:9f:98:18:83:10:8f:e4:93:da:b3:35:1f:53:15:6c:
a9:88:05:ed:c0:0b:6a:bc:da:50:f8:a7:8c:97:9f:ec:57:43:
97:d0:9d:4e:97:f0:9b:04:1c:ef:ea:df:e2:fc:0c:b2:9d:b6:
43:29:f4:fe:11:2c:75:e1:b9:f5:d3:67:80:bd:0f:66:c9:89:
80:67:39:68:25:57:1e:29:5e:f1:0d:d6:4f:2d:c6:78:2b:92:
ea:6b:bc:ab:f0:9e:76:50:0b:34:54:57:3d:f2:3d:9d:73:8d:
40:bb:6b:b3:59:43:98:60:c8:90:1a:70:dc:87:3f:2f:ba:f3:
03:a5:be:ad:09:5d:18:a7:44:f1:3d:c0:1c:ce:ae:2c:b6:e9:
b6:d4:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:01 2025 by rpki-client