Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_c-UyDAz9HKmNacFN9mh3DXe4LY.cer
File: _c-UyDAz9HKmNacFN9mh3DXe4LY.cer (raw, json)
Hash identifier: V3QZas9ZFRBkTQkqfSfDEePPJSRpwD6lZGDUWm2rfDg=
Subject key identifier: FD:CF:94:C8:30:33:F4:72:A6:35:A7:05:37:D9:A1:DC:35:DE:E0:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3E632113FE24066BBB392B4D3D5E51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/dd91f9-319b-4fa6-a560-a91716ae7a79/1/_c-UyDAz9HKmNacFN9mh3DXe4LY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/dd91f9-319b-4fa6-a560-a91716ae7a79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:31:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.3.4.0/22
IP: 2a02:c340::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3e:63:21:13:fe:24:06:6b:bb:39:2b:4d:3d:5e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:31:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdcf94c83033f472a635a70537d9a1dc35dee0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:aa:13:33:6e:77:12:cd:75:33:06:91:6e:
e6:83:96:34:41:6d:fb:2f:7d:df:69:a1:19:c0:80:
1a:9b:70:48:88:ea:f7:67:93:25:65:c7:02:c0:26:
f6:e5:7a:64:e6:be:1e:60:cc:fe:37:67:bf:7a:ff:
82:80:98:90:9c:21:a7:22:95:5d:0a:ef:90:10:c2:
46:82:d8:3a:0e:fa:ff:15:36:50:2a:d2:5e:cc:9e:
c9:36:ac:47:c4:96:d7:4e:eb:be:b0:29:2b:55:c3:
b1:3a:32:b0:45:50:4d:1b:2a:41:5a:df:1b:0f:5c:
6c:85:3d:2d:1d:4d:df:f1:88:da:8a:a5:ad:bd:1c:
f2:41:9d:46:e6:7a:be:be:f4:1f:ef:e8:78:16:30:
5d:62:53:e0:93:7f:43:2e:08:9e:d6:43:e3:54:3a:
3b:5b:c8:b3:89:17:af:4b:20:70:ab:88:96:58:c9:
24:ba:34:21:0d:77:b3:47:d0:b8:7b:c7:cd:78:6b:
13:41:22:87:fc:71:bc:9e:90:6d:62:80:9f:03:2b:
31:dd:54:16:4f:2d:ef:2d:e3:25:26:61:44:61:ac:
ae:f7:40:09:56:31:d0:04:90:4f:78:8e:60:e6:a4:
b1:ce:2d:3e:2c:7e:a7:67:26:f2:7e:20:76:98:03:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:94:C8:30:33:F4:72:A6:35:A7:05:37:D9:A1:DC:35:DE:E0:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dd91f9-319b-4fa6-a560-a91716ae7a79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dd91f9-319b-4fa6-a560-a91716ae7a79/1/_c-UyDAz9HKmNacFN9mh3DXe4LY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.4.0/22
IPv6:
2a02:c340::/29
Signature Algorithm: sha256WithRSAEncryption
b1:06:6f:52:45:f6:52:79:d3:a2:c1:89:74:83:ac:8b:4f:40:
12:a9:22:71:4f:d7:c8:cb:cd:b6:e9:28:8d:9e:9d:74:09:34:
91:69:a7:70:19:5e:21:c4:bf:ba:ce:97:5f:29:55:44:10:42:
34:d1:ce:95:b4:68:c5:79:42:3c:d4:25:92:cf:d8:18:9d:65:
b1:6b:5e:b8:f0:d5:e2:7c:29:87:3b:0f:dd:a1:5b:51:78:34:
d8:c5:e8:15:61:22:ee:15:f6:8d:01:d8:35:dc:c0:8a:78:2f:
d4:c8:e4:a0:fa:a7:36:01:7e:a3:38:41:74:5f:97:4e:38:de:
ff:27:3d:45:cf:32:95:5b:19:c4:35:27:23:e6:77:22:fa:4f:
9a:8a:1c:e3:de:a5:a6:54:c7:48:4d:e4:81:92:e0:3d:5b:d5:
96:65:da:c5:48:e8:51:d0:b6:04:fe:e1:01:58:fd:47:c4:8d:
ad:65:40:94:e9:25:be:c2:d0:8c:90:ea:c2:94:a6:65:b0:c6:
df:ba:51:09:7a:98:7a:27:17:7d:05:a5:4c:11:09:00:75:e7:
58:0a:87:f8:c3:15:d6:76:03:52:d3:97:0a:70:f8:7b:b6:e9:
1f:61:c0:4a:61:b2:22:3f:2b:6a:a4:4c:cf:a7:3e:5e:ed:e0:
39:1c:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:55 2025 by rpki-client