Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.cer
File: ZA4tuMXg_Sxyawq0eA2XgRhDrXA.cer (raw, json)
Hash identifier: 713kmYZO1KFAu/58rPuvAvQRZ5kmhMwWBY9KWUdB4d0=
Subject key identifier: 64:0E:2D:B8:C5:E0:FD:2C:72:6B:0A:B4:78:0D:97:81:18:43:AD:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAC89019AA7B723111389F59DE1FC91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:04 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.145.237.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ac:89:01:9a:a7:b7:23:11:13:89:f5:9d:e1:fc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=640e2db8c5e0fd2c726b0ab4780d97811843ad70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:11:fa:a4:f0:3d:20:a8:44:5f:9f:32:23:
6d:df:75:8d:f5:37:94:0a:a4:3e:ca:89:31:8b:e1:
ee:a6:2c:5d:26:88:14:43:29:63:4d:ee:73:92:ce:
0f:24:22:21:fb:64:86:e6:a2:88:fa:6e:54:cc:6e:
2e:0c:07:cb:f6:d3:d0:31:ab:48:de:5a:b3:de:17:
da:6d:f2:6e:0e:35:38:c4:d6:47:35:a7:06:0a:66:
42:72:ed:4c:4f:1f:a7:00:83:f7:c1:2f:25:06:0a:
cd:41:10:74:26:03:14:8c:cc:cc:17:9d:e1:f9:df:
fb:39:61:58:28:98:78:90:77:0d:09:87:cd:4f:74:
2a:28:b4:63:12:c2:c6:42:cc:71:38:86:25:87:49:
5f:a2:15:f9:39:5d:62:c2:8a:de:98:3d:f0:ac:8d:
8d:46:22:dc:fa:3b:68:96:3b:7a:3a:de:40:cf:51:
f7:6b:58:c1:cc:87:20:69:51:53:11:8c:c5:db:cc:
45:a8:83:67:19:dc:74:b5:b3:15:95:31:aa:ca:1f:
dc:64:79:ef:e5:4e:06:05:e7:4d:13:d6:d1:00:d6:
08:62:ac:27:2c:f0:50:e1:ef:dd:a5:22:61:ea:63:
2d:3f:84:f8:28:b5:52:30:19:26:86:4a:47:b9:f4:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0E:2D:B8:C5:E0:FD:2C:72:6B:0A:B4:78:0D:97:81:18:43:AD:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
50:dc:7f:6f:66:2d:2b:b0:2e:dc:b7:08:8b:07:c6:4b:d8:07:
b5:83:e0:1f:45:b3:db:86:8f:73:ec:62:de:17:e5:ad:92:cc:
c2:54:27:b8:d8:97:cc:8e:fb:3b:22:da:37:65:4a:a4:38:10:
6f:7c:03:0d:4b:d2:6d:5a:57:60:3e:ef:63:aa:1b:64:8b:84:
41:3e:92:90:c7:b8:d2:4a:24:22:c0:b6:89:27:02:1b:2a:61:
82:1e:a0:3c:80:cd:a9:20:fd:74:a8:2a:79:d4:b4:97:5d:cc:
61:79:d0:99:c7:b7:e8:93:e0:70:35:95:54:97:b8:a7:d6:fc:
a7:31:db:b8:74:04:ac:5c:ee:3a:d1:70:46:a4:31:80:3f:17:
51:12:1c:56:12:2f:91:7c:35:94:64:64:a0:9d:fb:21:39:ae:
8c:eb:7f:c8:06:c9:d5:04:cc:42:de:97:7c:a4:bd:3a:5c:df:
0f:50:2e:68:f1:a0:db:8a:31:1e:c1:31:b4:8c:61:4f:66:b9:
5e:b9:35:35:ec:00:5e:2d:d1:0f:50:38:c5:f6:aa:d1:cf:96:
20:bf:03:3b:68:e0:0b:b8:a2:c3:50:8a:cb:89:d0:64:a5:c8:
a6:12:40:7a:0c:53:60:a3:7e:a5:e7:48:21:f5:cd:f0:25:98:
ff:a4:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:31:12 2025 by rpki-client