Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ao52TAV-Idl-bLg-2w7lKECwRLs.cer
File: ao52TAV-Idl-bLg-2w7lKECwRLs.cer (raw, json)
Hash identifier: EzqYfdKrNIoAx01bnY0b64HyYWR83SXtJAW8TzD8DGA=
Subject key identifier: 6A:8E:76:4C:05:7E:21:D9:7E:6C:B8:3E:DB:0E:E5:28:40:B0:44:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F410551D271D1F2AE36955A5F53C2D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ao52TAV-Idl-bLg-2w7lKECwRLs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:33:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.233.44.0/24
IP: 2a11:a040::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:05:51:d2:71:d1:f2:ae:36:95:5a:5f:53:c2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:33:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a8e764c057e21d97e6cb83edb0ee52840b044bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:2e:78:e1:8d:1a:0c:d2:cd:2d:68:3d:10:
d5:f8:29:35:81:44:8d:62:c5:43:3a:5b:9b:82:49:
2f:c9:19:78:e5:5f:84:a5:44:42:be:92:75:75:a5:
8c:d7:e9:fc:dc:7b:42:1e:36:80:39:12:f9:b0:de:
55:cb:a7:58:f4:44:7a:0b:4c:e3:2d:88:d7:50:57:
78:3a:ff:52:9e:0d:e3:8d:14:18:97:aa:73:3a:49:
72:d8:6e:f3:a9:3b:e2:4d:2e:f0:9e:fa:6e:b6:1c:
dd:d1:48:d4:a5:f0:a7:3f:3e:d1:de:4d:53:cf:17:
4e:87:a8:90:58:df:05:e7:e9:9c:78:a6:4b:5b:34:
69:a3:3c:fd:2f:62:48:e9:20:22:c3:4e:05:f7:00:
cf:10:72:71:1f:12:00:36:46:fb:13:71:c9:92:5b:
9c:9c:30:e4:95:f1:6d:27:27:11:8c:20:69:c0:25:
0b:f1:74:1e:ef:d2:55:c7:b4:13:ea:9e:65:33:f9:
f1:20:9a:53:e1:24:0b:a9:8f:e1:39:e0:20:37:0e:
0d:5d:95:cd:8e:62:4a:1c:69:8f:fa:0f:41:cc:5d:
ce:0c:e4:d4:14:52:41:1a:d5:a6:cc:3e:38:f6:22:
11:14:13:dc:0c:54:be:81:da:c9:d9:4d:ba:65:31:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:76:4C:05:7E:21:D9:7E:6C:B8:3E:DB:0E:E5:28:40:B0:44:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ao52TAV-Idl-bLg-2w7lKECwRLs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.44.0/24
IPv6:
2a11:a040::/29
Signature Algorithm: sha256WithRSAEncryption
73:2c:a6:94:d2:37:80:98:cb:b1:04:ca:81:81:77:23:4b:e2:
5c:bc:a8:f0:1a:71:1c:c5:bf:f3:4c:8e:75:c5:04:b0:22:dd:
37:ac:a8:fe:aa:f3:f0:18:9c:4a:3a:9d:2e:ea:f3:50:2d:d9:
36:9c:e1:3c:29:83:4e:2a:51:5d:0b:2f:6d:f0:16:7c:9a:35:
d6:e6:a3:95:94:58:84:46:52:9a:b2:23:01:f3:49:d5:f4:e7:
9a:0c:dc:24:e8:00:04:b2:f3:5b:95:0d:d3:6c:3d:af:e6:56:
1b:e6:7c:a0:52:09:08:d4:f5:27:5c:cc:81:35:74:8d:39:7f:
6e:1c:51:c0:3f:a8:df:2b:c5:33:3f:35:fa:ca:e6:43:f3:85:
95:02:e0:72:07:ef:b6:91:00:47:40:86:1f:c7:56:41:52:b3:
53:0a:eb:70:b6:0a:2f:62:6f:fe:b5:8e:c5:c0:28:73:ae:ee:
0f:ee:b5:b2:f4:3f:bb:7e:63:72:d7:e5:45:78:57:ab:8e:35:
ed:a1:ec:53:9c:95:50:14:36:07:3e:8e:de:77:f1:e0:d8:97:
8e:f4:41:bf:1e:cc:ef:24:94:48:56:0a:69:0c:f0:b0:cd:08:
fe:82:4f:be:26:1c:07:36:93:7b:c0:2a:93:d4:ec:c5:c2:3b:
0b:a3:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:42:11 2025 by rpki-client