Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_KFg3SpDDOp7W9VIjVGAcMblCAg.cer
File: _KFg3SpDDOp7W9VIjVGAcMblCAg.cer (raw, json)
Hash identifier: M0Ix4gatUMYGh7qc2yG6AzznooQfsomHHtF06VqWzI8=
Subject key identifier: FC:A1:60:DD:2A:43:0C:EA:7B:5B:D5:48:8D:51:80:70:C6:E5:08:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A321438380
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/_KFg3SpDDOp7W9VIjVGAcMblCAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:02:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 85.193.76.0/22
IP: 185.5.128.0/22
IP: 185.65.104.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700637741952 (0xa321438380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fca160dd2a430cea7b5bd5488d518070c6e50808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:d6:c2:28:6d:0d:bf:47:f9:f0:aa:e5:cd:
09:c9:51:8b:1f:e5:50:d7:a6:7c:a2:ca:ff:ae:16:
d6:1a:c6:a3:b9:6a:6f:89:61:d8:42:08:4d:1f:96:
27:4b:6a:df:50:c1:02:2d:9e:35:50:85:81:b5:45:
84:1f:12:b3:68:30:36:5b:6e:de:4c:b5:23:bf:f6:
37:41:3b:42:99:09:ec:7e:81:ef:b4:0e:12:f9:78:
ee:12:11:0a:85:e7:97:af:e2:5d:93:f8:18:fe:3e:
d5:b0:b7:0f:b5:e5:98:3c:ee:69:82:13:94:63:55:
84:d3:86:88:f1:36:1a:c6:3e:e4:58:cf:e5:d4:9b:
27:fe:53:fb:e9:e3:4f:16:b5:72:0c:82:59:42:96:
49:94:61:7d:af:a9:73:16:c1:92:44:75:a5:df:d8:
84:30:72:84:dc:c4:91:20:51:a5:37:22:7b:b3:72:
94:22:64:5c:bd:0c:f5:b1:10:30:db:0a:dd:87:c8:
6c:f1:24:f5:ac:ed:87:19:e7:ea:81:1d:82:8c:c8:
0b:d4:5c:5d:cb:f9:0a:17:a3:3a:09:49:d0:91:e5:
d6:3b:33:13:38:5c:b3:81:72:87:98:a7:92:c8:c5:
d5:3c:2d:ea:c3:6f:67:bc:10:06:ba:4c:04:58:47:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:60:DD:2A:43:0C:EA:7B:5B:D5:48:8D:51:80:70:C6:E5:08:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/_KFg3SpDDOp7W9VIjVGAcMblCAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.76.0/22
185.5.128.0/22
185.65.104.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:1f:f6:32:be:84:63:89:2c:58:c7:c2:36:e8:69:82:48:b0:
c6:4a:e9:09:fb:63:ed:c0:28:92:11:28:7e:c9:e9:6c:22:42:
8c:43:31:e5:58:14:af:a6:56:17:5d:dc:ff:ba:6a:b5:fc:49:
58:c8:cf:c5:f7:18:5f:26:85:ed:af:3a:8d:0f:d3:6f:f9:fc:
e9:32:03:a0:5e:59:e1:7d:b4:f8:79:3f:bf:52:6c:29:0f:a3:
12:97:ee:6b:1c:d9:06:6a:50:b0:d9:44:7e:8b:c9:1b:d0:fb:
0c:93:8b:2a:6f:8a:25:f9:5a:47:d3:43:5d:05:f7:d1:7c:a2:
08:bc:4c:eb:24:ed:52:40:b9:6a:89:8b:1a:1d:3b:56:6b:c6:
9a:ad:f2:56:0d:ac:26:45:fb:b6:e3:c9:ab:e4:6e:1b:c3:65:
ae:d1:b0:5b:58:e1:ff:d4:0f:ff:50:d4:fb:61:d4:01:bc:db:
fd:fa:80:9a:48:46:94:2b:e5:37:38:57:d9:43:89:7f:13:51:
f1:6d:f1:96:3d:40:e1:d7:62:80:ac:75:0e:01:2c:35:f3:01:
bc:8d:0b:cd:99:84:60:fc:75:d8:34:cc:47:7e:c4:df:f4:19:
cc:27:30:30:2e:e0:4c:08:9a:66:83:76:d4:02:56:23:ed:af:
0a:bd:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:51 2025 by rpki-client