Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab7k_ugF87i2jRueNQIAMRswYLE.cer
File: ab7k_ugF87i2jRueNQIAMRswYLE.cer (raw, json)
Hash identifier: CkSRexVB1r9oGi2afU+3lLqVDNPiUhH9Ke7YktA4NW4=
Subject key identifier: 69:BE:E4:FE:E8:05:F3:B8:B6:8D:1B:9E:35:02:00:31:1B:30:60:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E1E4968AB40480F736D97672AA07A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/bdb917-0c6a-415e-9869-7d744c0698a2/1/ab7k_ugF87i2jRueNQIAMRswYLE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/bdb917-0c6a-415e-9869-7d744c0698a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:35:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 95.130.227.0/24
IP: 2a11:8d80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:1e:49:68:ab:40:48:0f:73:6d:97:67:2a:a0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69bee4fee805f3b8b68d1b9e350200311b3060b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:a3:ba:58:25:7a:cd:b3:c3:b8:d5:fe:6b:
af:70:e5:a2:72:5b:da:e7:ef:35:30:9e:cf:0b:57:
f3:c8:0e:a1:c4:dc:1e:02:d5:47:75:6f:b9:a2:78:
c8:28:29:00:41:e7:9d:d2:58:63:8f:8f:4f:d9:ef:
b3:4b:d1:5f:5b:d4:82:ac:6b:32:3b:0f:0f:b3:e6:
fe:e0:62:4b:66:e2:7d:b6:78:3e:66:5a:b2:f7:4b:
fa:df:e2:25:f2:da:01:b5:96:91:3e:78:1c:f4:a6:
8d:80:64:54:1c:3e:25:9f:df:5d:35:5c:41:f6:4b:
ef:19:bc:42:3d:01:ae:1a:6b:de:95:d7:75:4e:8a:
f3:e7:f8:fc:56:83:2c:99:94:83:84:5d:83:f1:c7:
ae:02:ec:a9:07:2e:88:73:ed:23:72:ce:4d:49:b4:
55:ed:45:5a:f9:96:57:e7:b2:33:89:ff:dc:f9:5e:
74:2b:aa:c7:6f:c8:a3:55:23:8c:54:5c:ab:48:30:
7d:ea:6a:59:05:fd:c0:a1:57:81:9b:16:4a:d5:3e:
69:30:f0:27:8c:c5:63:08:07:21:ac:67:fd:b9:e0:
bf:ba:a2:c6:06:09:d2:47:19:59:e2:75:7b:dd:d1:
d2:fc:e6:e1:5d:f9:0c:d6:92:c1:5a:14:fe:87:3a:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BE:E4:FE:E8:05:F3:B8:B6:8D:1B:9E:35:02:00:31:1B:30:60:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdb917-0c6a-415e-9869-7d744c0698a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdb917-0c6a-415e-9869-7d744c0698a2/1/ab7k_ugF87i2jRueNQIAMRswYLE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.227.0/24
IPv6:
2a11:8d80::/29
Signature Algorithm: sha256WithRSAEncryption
55:8d:d4:4e:56:b1:5c:68:79:1a:45:4f:32:62:bc:df:fb:2d:
54:44:c7:25:29:00:98:26:af:c5:03:8e:82:b1:53:e5:73:c1:
c1:a2:4a:9a:33:4b:a3:b6:73:39:3f:55:6a:12:fe:03:df:d9:
f5:30:16:0a:41:37:41:20:a8:ec:5f:9a:08:4d:f8:46:1c:2f:
db:89:73:62:66:e9:70:03:2e:d5:5f:07:47:3b:c4:b1:10:de:
15:8d:e5:b9:27:5c:c0:ae:23:74:ff:d4:c6:9f:aa:4d:f4:79:
19:aa:74:88:05:fd:87:6b:4e:fb:51:13:a1:69:be:91:5b:cf:
08:bf:39:d4:a9:f0:ed:e3:be:b5:22:47:a8:50:51:2a:4d:7b:
76:f6:d2:c5:2a:63:2d:b4:c0:e2:65:fa:a3:87:67:c3:dc:ea:
00:40:68:79:5d:ae:71:a8:dd:7c:c3:36:eb:26:e6:a7:1d:39:
dc:18:ae:79:f5:5f:b9:b4:12:ee:f6:a0:9f:da:fd:21:b9:64:
dd:51:ec:a2:7b:b0:a9:25:e4:80:f4:24:3b:72:e8:af:8d:3c:
2c:a5:80:4f:97:30:ce:a8:08:4d:5a:d2:5d:2c:57:93:1f:2b:
95:14:c5:bc:95:51:da:f8:c3:25:4e:8b:82:60:b4:02:0b:2e:
36:d0:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:39 2025 by rpki-client