Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/asuIBOFr7C1oF9fkrGWufjxb-Dc.cer
File: asuIBOFr7C1oF9fkrGWufjxb-Dc.cer (raw, json)
Hash identifier: +l7GWn5KKuftjPDCeYcgBzl7w4lcZ7naXKZBcyB9YHw=
Subject key identifier: 6A:CB:88:04:E1:6B:EC:2D:68:17:D7:E4:AC:65:AE:7E:3C:5B:F8:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0189AC553AEB4A42DB3F2A928B90A85B430E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/asuIBOFr7C1oF9fkrGWufjxb-Dc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Jul 2023 14:23:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 34754
IP: 87.254.160.0/19
IP: 88.87.0.0/19
IP: 109.199.128.0/19
IP: 193.228.172.0/23
IP: 193.228.182.0/23
IP: 212.50.64.0/19
IP: 2a0b:7400::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:55:3a:eb:4a:42:db:3f:2a:92:8b:90:a8:5b:43:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 14:23:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6acb8804e16bec2d6817d7e4ac65ae7e3c5bf837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:00:f2:11:7a:98:96:5c:90:a0:46:a9:cc:
02:96:68:19:52:0b:68:92:ea:25:11:d4:14:39:28:
5f:b0:17:0b:d1:a8:e0:03:3f:20:df:44:7c:ba:dd:
60:ea:54:08:b3:77:4e:ac:0b:65:a7:0d:2a:3d:83:
6a:21:30:91:d4:88:01:5c:e5:e7:1c:36:de:31:48:
db:8a:59:13:38:66:66:b7:55:70:72:01:c1:d6:4e:
e0:22:3d:c1:7c:ec:3e:d0:e3:3d:d0:80:ba:78:e0:
7f:3a:f4:52:5f:0f:33:1e:61:dd:7b:f7:96:c4:d2:
e7:01:e0:c7:af:33:d9:96:e1:2f:15:28:94:3e:ac:
76:d3:f6:14:1f:2d:a3:d7:58:d4:69:99:fa:c9:41:
8e:6e:5e:74:18:06:65:09:06:df:67:1e:ae:98:c4:
0c:0e:be:7e:25:2c:c4:f3:61:f0:cc:73:84:ee:f7:
02:a9:66:cf:41:46:28:5a:39:de:b6:33:39:53:75:
f5:6d:5c:d5:b9:a6:79:9a:44:86:6a:5e:aa:43:d1:
a9:41:21:9a:8e:86:b2:c7:0a:d3:20:23:36:86:6a:
6a:93:36:d5:af:78:f0:2d:aa:be:70:d4:de:b4:39:
d1:ca:cf:0c:22:00:c4:32:6c:89:63:73:63:58:e0:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CB:88:04:E1:6B:EC:2D:68:17:D7:E4:AC:65:AE:7E:3C:5B:F8:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/asuIBOFr7C1oF9fkrGWufjxb-Dc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.160.0/19
88.87.0.0/19
109.199.128.0/19
193.228.172.0/23
193.228.182.0/23
212.50.64.0/19
IPv6:
2a0b:7400::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34754
Signature Algorithm: sha256WithRSAEncryption
66:d3:6f:c1:f2:4a:f6:bd:bd:40:45:59:85:7b:f3:1f:15:99:
05:21:ff:a5:56:c5:12:d5:28:f0:f5:fb:4a:00:8f:37:20:50:
25:ed:c2:99:c0:ef:e7:f1:91:69:7f:ae:76:68:b1:92:18:86:
b9:8c:60:d7:a6:25:0f:84:99:88:fc:98:12:31:2c:b1:3a:11:
d9:d8:51:ed:80:56:ff:08:5f:c1:30:c0:a1:2b:c1:96:e4:06:
55:3d:9f:58:59:ac:ec:7e:01:17:16:c0:71:63:6b:c4:07:5e:
be:1b:8c:25:89:6d:1c:1f:d1:2e:c9:22:cc:9a:3f:b1:21:8b:
e7:20:b1:c0:84:fe:d0:8c:1a:02:a2:ef:45:96:ec:89:0b:77:
85:6a:5a:62:95:2e:41:df:73:21:c1:ed:e0:e1:d9:05:63:38:
d9:a0:d8:a9:13:82:bc:6b:34:d0:2d:c7:a4:3d:c8:4a:2d:34:
b6:3b:3b:66:19:1d:44:81:57:6e:ae:c7:d0:b6:38:90:a5:07:
0d:9c:a9:a7:c8:8e:34:19:d1:22:f8:90:41:bb:e3:5e:25:43:
e2:11:85:11:62:30:67:e2:88:58:75:02:ad:f2:b0:47:ef:b9:
99:21:cd:f7:75:53:29:48:40:3c:72:e3:2f:7d:1e:17:d2:06:
6d:af:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:36:10 2025 by rpki-client