Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_k23pz74vfSf-8VCKu25Uk5WYOI.cer
File: _k23pz74vfSf-8VCKu25Uk5WYOI.cer (raw, json)
Hash identifier: rJ+qQSdzWto7l7fJi8791Vcg+52vRqpb1BaZLsLJvC4=
Subject key identifier: FE:4D:B7:A7:3E:F8:BD:F4:9F:FB:C5:42:2A:ED:B9:52:4E:56:60:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701DED9F3C31BDBD1A0A6D578F670832
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/_k23pz74vfSf-8VCKu25Uk5WYOI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.62.17.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1d:ed:9f:3c:31:bd:bd:1a:0a:6d:57:8f:67:08:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe4db7a73ef8bdf49ffbc5422aedb9524e5660e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:57:d7:e6:e1:2b:df:0c:e3:4e:6f:22:26:
d8:9c:a6:13:b2:f0:5a:28:4b:d9:84:ea:c5:14:a7:
5e:81:1b:df:6d:d6:82:09:78:3c:f0:37:83:4a:ae:
1d:86:08:a9:d7:cf:0c:ff:17:48:6f:1e:c2:cb:ac:
0d:1f:57:6e:18:33:d6:65:32:fb:a8:c1:d6:cf:38:
f6:a6:ab:37:4e:dc:6a:3a:cd:61:2e:91:86:45:29:
0e:eb:f3:a7:97:b3:f4:dd:c3:ce:86:8b:aa:1d:e4:
1e:e8:a5:c6:34:52:e8:30:ef:4b:60:45:e2:17:ce:
b9:5e:07:9e:45:87:35:ac:04:03:c9:50:ac:24:c2:
3e:9e:5d:e7:81:27:c0:89:87:85:e4:f9:0d:65:e1:
f8:8a:80:08:43:ba:b2:6d:6a:0c:7f:65:d3:3e:6a:
64:a3:a9:02:75:2b:c2:6d:98:59:ac:18:2d:d4:93:
8d:d2:d0:b7:e5:8a:9b:5e:f4:c4:1f:41:66:03:63:
f1:48:79:ea:f2:e3:28:4a:20:19:e5:2d:53:6a:0e:
6c:ff:c3:e6:65:bc:c5:da:3c:39:23:62:59:20:1d:
df:ae:d5:b2:3f:0c:0f:26:c6:97:21:60:48:c0:41:
e0:60:5f:f2:d9:7e:8d:b9:ff:74:8f:72:21:7d:c6:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:B7:A7:3E:F8:BD:F4:9F:FB:C5:42:2A:ED:B9:52:4E:56:60:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/_k23pz74vfSf-8VCKu25Uk5WYOI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.17.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5e:a3:8a:ea:db:00:d8:9f:ed:3d:b0:07:2d:44:71:84:8f:
c2:64:00:52:ff:86:b0:b8:45:90:00:b1:9d:b7:2e:eb:bf:3c:
ac:09:47:74:47:f0:24:2e:16:55:b7:7f:ca:9e:61:c4:f2:d3:
c2:c1:d2:21:f6:cd:31:1f:e8:ba:27:94:e5:b3:6c:f6:55:5e:
2d:1c:1c:08:a1:ca:bc:eb:79:08:c9:06:43:6f:05:0d:b2:c4:
77:e2:10:a4:91:f2:88:9f:1b:46:a1:1d:17:46:ca:27:9a:29:
f9:4d:18:10:b7:85:7d:c8:40:ab:7b:d3:a0:fa:5b:e3:2e:d0:
e4:3e:12:f5:65:b6:ff:1d:42:32:43:e2:1f:d5:9e:39:16:1f:
7e:6e:02:ea:60:19:7a:5b:ca:e5:96:86:af:2e:c1:6d:67:e1:
c2:01:54:82:f8:40:53:6e:7c:ab:23:a2:1a:07:55:fe:ae:9a:
6d:09:5a:53:d5:82:b0:8b:7a:ec:ae:bc:e8:bf:e3:31:61:77:
53:ed:10:f5:83:0e:ce:1a:6e:88:5b:11:86:3b:14:25:ed:ea:
94:d2:26:d7:f2:d0:49:87:7f:76:0a:96:3d:17:5b:9d:27:8f:
56:4d:f8:37:4a:b9:9a:c3:34:ad:18:5e:bd:a8:bd:1d:93:fe:
a1:2d:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:43 2025 by rpki-client