Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
File: bdLps6TXsks6aqFPPto_FPopx2s.cer (raw, json)
Hash identifier: 4BZ2NGd7yuQgIBiRIyLmegybFReSkbQWxAMdDvbqsjQ=
Subject key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4CA2BD206
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:55:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39246
IP: 62.192.132.0/22
IP: 77.78.128.0 -- 77.78.144.255
IP: 77.78.148.0/23
IP: 77.78.151.0/24
IP: 109.121.128.0 -- 109.121.133.255
IP: 109.121.136.0 -- 109.121.191.255
IP: 2a03:83c0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707766505990 (0xa4ca2bd206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:0c:0c:a1:00:4d:7c:cd:41:df:29:d4:f5:
64:8f:6f:dd:f3:4e:23:60:c7:8d:90:2d:c9:db:61:
22:2f:d5:05:2f:18:25:25:3c:d5:50:9a:46:9b:dd:
49:52:2e:9b:d1:6b:83:16:69:bc:d7:b6:b8:f9:a2:
29:f4:32:ec:8a:17:49:8e:ef:48:74:1f:01:26:84:
67:b9:db:c0:28:61:67:bb:9a:de:3f:e5:20:c5:41:
aa:d5:4e:cd:e6:29:db:f4:06:87:05:c1:a2:49:50:
45:fe:75:24:b7:fa:20:0f:a0:9f:92:c1:f5:ca:f7:
f4:bd:21:d3:bd:ce:92:b9:a7:8f:73:59:e2:69:50:
5e:2c:2b:2d:0e:57:59:f3:21:fc:75:0e:3c:6a:67:
1b:3a:18:d5:e1:39:d7:8a:9d:eb:b8:4a:e7:a0:38:
22:dc:59:02:5a:e5:c8:2c:d3:73:bb:b5:7e:dc:e9:
b2:1a:65:4f:4f:02:c4:b1:e5:c3:be:e8:d5:65:61:
37:e6:8f:b4:a0:af:ff:f8:0b:ec:12:4b:44:24:2b:
b8:b3:ce:4f:27:5c:40:71:c6:40:66:c3:08:80:74:
56:35:91:c1:25:04:77:38:fa:e8:e4:2f:05:38:2d:
fd:cf:8e:2c:7d:83:eb:57:5d:32:97:a4:d9:6f:6f:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.132.0/22
77.78.128.0-77.78.144.255
77.78.148.0/23
77.78.151.0/24
109.121.128.0-109.121.133.255
109.121.136.0-109.121.191.255
IPv6:
2a03:83c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39246
Signature Algorithm: sha256WithRSAEncryption
7b:52:38:29:96:d1:5c:99:02:89:19:af:c4:2c:56:8e:0e:bf:
e2:10:21:59:d3:0a:26:0f:67:11:20:17:cc:0f:35:28:3e:d5:
fb:fa:34:5e:52:0a:83:6f:0c:c4:d8:78:42:0a:a4:85:67:4c:
98:c3:1f:13:ca:98:31:26:ca:0c:ff:ca:0b:1e:13:5b:ec:35:
d9:f4:8a:32:93:54:24:99:fa:44:99:1b:30:1c:12:b1:57:a9:
96:00:e0:ef:5e:0c:dc:63:ce:89:ec:d4:7c:a5:1a:94:49:1a:
41:38:e8:26:31:f5:78:b7:5e:7d:29:fc:cf:ff:0e:b9:83:77:
89:00:d1:3a:a4:f9:b3:f3:ea:f6:0a:b2:9b:89:bd:61:2f:86:
99:dc:dc:1a:13:cd:27:a8:74:7a:77:5d:ea:b5:f4:94:d0:cb:
93:7f:95:8f:28:b1:da:0b:23:69:14:79:ce:08:fd:2d:61:a8:
ce:40:62:1e:16:f6:d7:9d:37:d2:22:a1:61:15:78:9c:59:38:
0a:67:ad:3f:db:46:4b:6e:69:2e:ee:f6:e4:da:24:34:79:fb:
ca:1d:58:a9:7a:d6:27:26:14:b6:5a:6c:ff:da:a4:b1:a1:61:
e7:0d:c7:ff:cf:f5:0a:2e:02:1c:00:fc:26:af:92:ad:97:02:
3e:27:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:11:51 2025 by rpki-client