Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YnuijDv0yVKrLNa0sn6RC8fCcik.cer
File: YnuijDv0yVKrLNa0sn6RC8fCcik.cer (raw, json)
Hash identifier: lYz5g1WNkqSnncrUxTWtyztd2GvbXZqCwrZ7Y4tjNd0=
Subject key identifier: 62:7B:A2:8C:3B:F4:C9:52:AB:2C:D6:B4:B2:7E:91:0B:C7:C2:72:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018510ADC584BCFC5DDFE3FBA0970F298B58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b08da-052e-40e7-bef0-d10199d7faee/1/YnuijDv0yVKrLNa0sn6RC8fCcik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b08da-052e-40e7-bef0-d10199d7faee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Dec 2022 12:48:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.187.188.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:ad:c5:84:bc:fc:5d:df:e3:fb:a0:97:0f:29:8b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 14 12:48:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=627ba28c3bf4c952ab2cd6b4b27e910bc7c27229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:3a:f5:30:0a:7b:30:82:ad:87:6b:56:f8:
28:53:8b:ce:91:5b:b7:d3:26:ff:21:18:e4:47:86:
fd:ac:c8:99:e7:ca:20:90:b8:83:01:ec:4c:c1:34:
1b:b2:86:c2:8c:fa:4f:df:e1:b4:8f:12:3e:48:59:
d6:8d:67:22:2a:88:39:6e:ba:9e:45:cb:1e:7f:4a:
d3:b7:69:d7:18:56:bd:28:88:5a:ac:77:91:84:3e:
64:0d:87:77:c3:f3:39:f4:e2:6c:95:b0:e1:d5:04:
3a:78:d2:91:85:af:37:4a:25:8a:a1:f1:bf:43:29:
ab:b1:7b:6c:f3:9b:56:51:40:f6:6d:c1:1d:4d:2c:
07:94:70:51:00:ff:08:6f:e1:8c:f9:0f:2c:64:2d:
53:d0:dc:d6:08:15:78:83:bd:27:5c:48:79:5e:79:
98:2d:26:5b:1c:48:ea:c1:33:58:8c:cf:56:a9:72:
2b:2e:72:55:78:2c:48:18:45:52:9d:96:bd:c1:00:
2d:16:17:4d:38:10:28:28:ae:b9:17:d3:38:3a:44:
25:90:20:e3:c1:80:19:42:da:27:9a:ed:da:5d:45:
e4:41:e8:9b:4a:a2:26:6b:33:4c:9f:ba:a9:a2:20:
f8:d3:6c:3a:a9:36:77:32:54:67:2f:1d:ca:a9:b0:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7B:A2:8C:3B:F4:C9:52:AB:2C:D6:B4:B2:7E:91:0B:C7:C2:72:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b08da-052e-40e7-bef0-d10199d7faee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b08da-052e-40e7-bef0-d10199d7faee/1/YnuijDv0yVKrLNa0sn6RC8fCcik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:92:b7:e1:de:57:26:0e:ca:d9:5d:98:fb:32:e5:0f:59:fa:
5c:5d:9f:5f:57:48:46:85:8c:50:4b:14:f9:f8:33:b2:c5:dc:
c3:b8:20:42:7a:9f:e7:d5:5b:92:fe:c4:73:a0:fc:d5:7c:94:
7f:fd:af:e9:fb:75:fd:a6:6b:db:94:78:f0:53:bf:2b:7d:14:
db:d7:c0:d5:3f:b6:01:6b:99:d5:46:11:5c:0d:fd:20:5b:bd:
74:49:cf:b3:2c:a9:5c:93:c7:7f:27:d1:01:51:38:d1:a7:ca:
9b:2b:2f:fd:2f:c6:2e:d1:ac:e4:59:e8:7a:0e:e0:08:5b:77:
bb:71:d1:8a:ae:ae:86:82:41:f8:88:7e:a5:9b:2e:bb:62:14:
30:8f:6a:89:31:fc:7f:8f:61:25:fd:f7:e4:46:16:ac:5a:a4:
14:8f:5e:84:b3:ed:c4:a0:c8:61:c1:88:e4:4b:64:2b:aa:15:
9b:8b:ed:7f:53:cd:fe:ae:00:03:1f:57:93:e3:d8:7d:39:1f:
05:2f:ac:bc:aa:0a:cb:d7:67:c4:86:bd:26:b4:ac:22:f2:b1:
85:87:9f:5b:4c:96:8e:1b:54:23:81:42:6f:f5:ba:2c:2f:a7:
f8:0a:4e:f4:4a:27:55:dc:fa:26:16:1b:08:a3:04:b7:b8:19:
11:30:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:30:13 2025 by rpki-client