Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bDCrywkRpUeeKC4wUBjBUMKF7u0.cer
File: bDCrywkRpUeeKC4wUBjBUMKF7u0.cer (raw, json)
Hash identifier: fy7c0JL4ZgiBRvKwb2CGWwNMdjLwvbd3vghb8hyuEp0=
Subject key identifier: 6C:30:AB:CB:09:11:A5:47:9E:28:2E:30:50:18:C1:50:C2:85:EE:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A77EA9282
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/ad8b82-9944-4ebf-9a7b-1aebb5773c78/1/bDCrywkRpUeeKC4wUBjBUMKF7u0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/ad8b82-9944-4ebf-9a7b-1aebb5773c78/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:55:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.8.164.0/24
IP: 193.8.167.0/24
IP: 193.8.171.0/24
IP: 193.8.175.0/24
IP: 2a0f:7440::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663436825218 (0x9a77ea9282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c30abcb0911a5479e282e305018c150c285eeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:2a:d2:fa:aa:8c:3d:2e:92:dd:32:41:34:
77:7e:49:ee:a4:c2:ef:d8:41:c6:41:60:cd:29:0d:
0d:c4:5b:a3:25:68:2f:35:36:77:ff:c6:ec:3e:88:
b1:10:a7:53:92:7f:71:80:ea:c8:6c:4d:d6:24:30:
10:35:58:aa:4a:dc:86:6e:86:2d:72:99:22:06:a7:
63:78:6a:39:2a:4c:c9:22:e7:ce:40:66:c8:d6:35:
37:39:45:33:c9:c0:19:12:f7:63:9f:77:80:4e:9a:
05:dc:11:2e:42:9f:d2:4d:4d:4f:83:87:c7:61:25:
6a:35:40:67:47:57:1b:c1:87:aa:1e:4b:fc:1d:51:
e0:e2:ad:5a:af:24:49:3f:c9:0f:db:99:8e:9f:27:
60:ee:d0:75:2f:c7:17:ba:fe:89:92:89:6e:a6:2c:
1f:56:d0:57:51:a0:04:d2:5c:50:88:66:42:89:f0:
4f:4b:ea:bf:68:bb:64:4e:7c:79:2f:3b:1b:1e:81:
f0:e2:2c:6a:12:bc:f3:7a:2d:e2:9a:9e:14:c8:79:
7f:77:5a:6c:bf:77:93:54:12:71:eb:0a:a6:72:2c:
ba:51:7b:ba:8a:64:58:c6:03:07:cc:d0:b6:70:9b:
d5:94:d2:6b:e9:e7:74:3e:56:ae:74:a9:c9:81:fd:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:30:AB:CB:09:11:A5:47:9E:28:2E:30:50:18:C1:50:C2:85:EE:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ad8b82-9944-4ebf-9a7b-1aebb5773c78/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ad8b82-9944-4ebf-9a7b-1aebb5773c78/1/bDCrywkRpUeeKC4wUBjBUMKF7u0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.164.0/24
193.8.167.0/24
193.8.171.0/24
193.8.175.0/24
IPv6:
2a0f:7440::/29
Signature Algorithm: sha256WithRSAEncryption
4b:b9:53:34:50:ce:f3:ff:f0:9e:a2:95:0d:49:16:b1:ee:a6:
3a:96:24:e3:31:b4:a9:0c:91:06:58:b5:be:b8:f8:75:05:9d:
b5:f1:3e:51:03:a2:8d:4a:51:32:e2:2d:40:01:0a:51:e9:8a:
9a:39:40:88:9d:a2:93:f9:ca:fc:3b:b9:b3:e5:3e:2c:38:b4:
56:32:28:a2:c0:ea:31:ee:96:ef:9f:f1:d6:f6:82:c5:47:0b:
c7:07:fe:a7:a1:2e:88:9c:85:73:ed:dc:ae:51:ad:4f:a2:17:
ce:9e:6d:5f:4d:64:b4:0f:e0:6e:4e:10:d0:25:42:0f:07:6a:
de:33:4c:87:02:6b:aa:e6:89:86:05:4c:ca:d2:df:73:63:c7:
46:17:cf:27:ef:17:50:4c:07:8f:e0:cb:18:56:46:b6:34:19:
b5:bf:05:ff:09:a7:96:63:ab:5b:63:f8:2a:7a:8c:cb:63:97:
e9:63:ce:10:5a:bc:0b:a3:4c:1f:f7:5f:59:b1:3d:d4:87:30:
07:1b:d0:31:d5:ad:20:21:6a:a9:c8:44:56:0d:f5:ab:52:d9:
42:92:8c:bd:23:3b:ba:33:86:d4:1d:60:12:e6:0a:98:d0:1d:
8f:f2:fd:fc:c8:95:cb:9f:78:a2:f1:e6:59:15:c4:88:fb:8d:
49:a6:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:10:23 2025 by rpki-client