Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cHW75FOIFYAgMK_sBScGyjQ0LOg.cer
File: cHW75FOIFYAgMK_sBScGyjQ0LOg.cer (raw, json)
Hash identifier: Xk8aCK995CJBcj0eT/vAaMFmi89C2tzUBnv+ShiUNE8=
Subject key identifier: 70:75:BB:E4:53:88:15:80:20:30:AF:EC:05:27:06:CA:34:34:2C:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E6550628C84D431D9527DB7A5740BD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/cHW75FOIFYAgMK_sBScGyjQ0LOg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.104.143.0/24
IP: 2a11:6340::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:50:62:8c:84:d4:31:d9:52:7d:b7:a5:74:0b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7075bbe4538815802030afec052706ca34342ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:ff:fd:4d:b9:01:69:99:af:4a:cf:25:83:
7d:75:d8:f1:6f:6c:fb:83:dc:c4:4b:19:75:3d:b2:
4d:19:96:f7:8f:c1:b6:d7:d4:26:10:c2:24:1e:db:
24:82:ed:9a:7a:20:98:f9:b2:05:35:c6:fa:15:0d:
54:4b:37:ca:cc:a0:ff:d0:9e:db:4b:2b:bc:16:cf:
c6:9e:50:84:91:6b:12:8b:5b:32:00:2b:13:30:21:
94:78:db:38:72:6b:6c:0b:06:ea:81:51:cf:80:67:
9e:0b:57:c5:4c:dd:99:02:26:1c:12:bd:7d:01:b3:
e2:cb:00:8c:d6:b1:f6:51:57:e2:b9:e5:dd:5b:af:
5d:e7:d0:29:dc:eb:73:9b:c6:d5:36:6e:2e:38:d6:
ca:ef:6b:96:e7:50:e0:34:d9:89:3b:df:a0:05:8f:
08:91:90:23:8c:aa:9d:d4:ec:58:b1:91:92:57:89:
d2:d8:bb:ca:ee:46:26:c7:24:05:d2:43:ac:80:eb:
51:73:7d:6a:d8:d2:0f:9a:16:06:19:f4:ab:c4:5c:
2d:9d:19:e8:a3:2e:54:59:37:55:63:f4:80:2a:1c:
35:29:0f:99:19:e2:a8:eb:83:19:14:bd:4d:03:20:
f5:29:a8:c5:28:44:0d:b7:cd:02:c1:b8:bb:d1:11:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:75:BB:E4:53:88:15:80:20:30:AF:EC:05:27:06:CA:34:34:2C:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/cHW75FOIFYAgMK_sBScGyjQ0LOg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.143.0/24
IPv6:
2a11:6340::/29
Signature Algorithm: sha256WithRSAEncryption
aa:91:d0:21:0f:71:50:31:33:b5:16:16:95:07:89:23:d7:4e:
6a:e7:4d:fc:57:e1:36:0d:14:fd:40:8a:57:44:02:90:4f:bc:
f6:41:cd:85:01:93:52:2c:ad:82:d4:83:a1:46:ad:ae:5a:2e:
6e:2f:e8:63:38:df:7b:ca:3e:19:e1:61:d1:9d:41:e4:0c:be:
a2:c4:56:eb:85:73:c8:8d:c3:91:9b:de:6b:25:fc:f6:dd:43:
d3:ee:31:27:b9:a4:ca:3c:f5:1b:ff:5f:34:fa:5c:cd:b3:e7:
05:ad:21:e4:ba:61:2c:ac:14:30:97:7a:87:e1:7a:9c:bc:8f:
89:fc:ab:8d:8b:3b:bc:81:c9:76:55:70:6e:7c:7b:af:86:34:
0e:f4:09:2f:98:be:8f:ca:a5:bf:a8:63:61:9d:dc:bf:4f:01:
ef:06:a8:c0:a3:a0:b4:7f:0c:94:5b:d6:3d:f0:01:33:c6:1e:
15:be:3b:d7:46:2b:1d:40:a9:7e:e3:29:18:35:54:9d:42:94:
ba:76:b9:b2:8b:84:c1:ab:45:77:7f:df:22:12:93:7a:43:34:
7a:76:75:18:4a:5a:8d:13:df:b0:88:1f:5b:4f:1d:fe:fb:5e:
e1:95:29:a1:86:b2:23:37:60:e7:f5:19:97:4e:49:ca:8c:b3:
f2:1e:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:23 2025 by rpki-client