Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeWX86zlFtbPV87_Fga77ao4IVE.cer
File: ZeWX86zlFtbPV87_Fga77ao4IVE.cer (raw, json)
Hash identifier: y0uib/YlwalmCEjIiXvC3GghK0BS9HZyXXReRQgXcEo=
Subject key identifier: 65:E5:97:F3:AC:E5:16:D6:CF:57:CE:FF:16:06:BB:ED:AA:38:21:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857167EF66738022C93256ADA16E62BA96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/ZeWX86zlFtbPV87_Fga77ao4IVE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.218.3.0/24
IP: 2a11:3800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:67:ef:66:73:80:22:c9:32:56:ad:a1:6e:62:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e597f3ace516d6cf57ceff1606bbedaa382151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:17:23:b5:fa:4d:3f:b1:63:6c:a0:60:d5:
2b:b7:cc:d7:19:93:91:d1:89:a2:4e:48:70:60:a7:
c8:62:f8:97:38:46:3b:8e:43:a0:69:9f:bb:88:8d:
d2:5a:6f:d7:e1:1e:9c:90:20:24:aa:05:73:1c:4c:
c2:80:f9:1c:97:14:ca:7d:22:05:86:34:c7:29:a6:
03:70:a5:7f:f2:12:71:47:de:cd:72:74:d6:9f:a2:
53:33:3b:ef:7b:10:76:4f:5b:20:9d:25:59:ce:90:
45:3d:c9:ec:e4:e0:d3:2f:47:04:ad:7e:1a:b5:e3:
cf:72:13:a4:5b:a9:2a:98:d0:d5:39:1c:7c:31:46:
7b:30:8d:d8:f1:ca:5e:29:dd:6a:9a:00:72:41:99:
aa:e5:a1:51:da:58:3e:73:33:ef:07:82:e1:e1:25:
51:78:b4:dc:8e:bd:7e:e2:e7:5c:25:ef:31:c2:78:
10:02:74:a0:7e:f4:b8:0c:2a:43:09:be:58:3d:58:
55:8f:3f:28:0a:14:20:f6:22:a4:c8:d7:d4:6e:d4:
b9:61:f4:32:c5:20:d8:80:7b:5f:70:4b:2d:17:cf:
94:7c:24:3b:81:65:37:45:2f:54:df:b9:4b:f0:4a:
52:40:0b:c2:a5:1b:52:60:c1:6f:b1:3f:6a:89:cf:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:97:F3:AC:E5:16:D6:CF:57:CE:FF:16:06:BB:ED:AA:38:21:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/ZeWX86zlFtbPV87_Fga77ao4IVE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.3.0/24
IPv6:
2a11:3800::/29
Signature Algorithm: sha256WithRSAEncryption
07:ce:f4:49:c1:bc:d8:a0:b9:32:ac:8a:5d:90:de:e2:94:80:
01:24:11:34:e7:ab:7a:c3:3c:2d:73:bf:49:69:a5:9b:2f:4d:
82:9e:c6:b5:65:80:8a:ea:d6:c3:00:18:4c:20:df:44:1a:4e:
a9:ff:2d:1b:2e:58:5a:9b:01:a2:9c:92:84:e0:88:aa:dc:c3:
54:c0:ad:78:a9:bc:ae:a5:7d:fd:0f:ab:b7:44:e2:4a:93:23:
f7:74:eb:98:1f:9a:09:29:ae:c4:9e:bf:0e:34:7b:1b:8a:1f:
4c:e9:85:f9:73:21:35:53:11:5b:51:02:9a:b5:64:8c:2e:6c:
62:5b:f8:8f:b7:86:64:f8:7f:ec:0c:d2:5d:74:2e:bc:1d:d0:
77:a6:60:78:33:89:4d:80:e7:57:c8:01:34:f5:08:84:85:8c:
84:e5:a0:6f:d4:d8:ac:7f:ab:8a:87:7f:79:b8:2e:0a:02:8f:
69:da:5c:bf:1f:bd:8f:28:82:6f:7d:9b:ee:e1:03:8d:8e:b2:
43:6f:b2:cf:a7:42:22:c2:8c:67:06:bc:1f:f2:25:ce:18:3b:
38:18:37:8c:7f:5a:7b:15:35:68:ff:6c:99:e0:fa:c9:80:70:
b4:95:ad:00:6e:dc:76:b2:a0:ef:8f:11:f4:27:9a:3a:29:cd:
61:4f:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:40:48 2025 by rpki-client