Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cLYihQNx_JHMfuxP2qE1Fr4B41Y.cer
File: cLYihQNx_JHMfuxP2qE1Fr4B41Y.cer (raw, json)
Hash identifier: AUcb7nueFeEoHxhMrPHHZFZmUvn+vmptNQ4N4Ghh1Dc=
Subject key identifier: 70:B6:22:85:03:71:FC:91:CC:7E:EC:4F:DA:A1:35:16:BE:01:E3:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9EECB962B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/114b0f-6220-4030-b170-1658f081fd4f/1/cLYihQNx_JHMfuxP2qE1Fr4B41Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/114b0f-6220-4030-b170-1658f081fd4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:53:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.84.220.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682576405177 (0x9eecb962b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70b622850371fc91cc7eec4fdaa13516be01e356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:b0:89:b2:92:dc:ec:d3:3c:5d:60:c3:35:
11:aa:23:d6:9c:81:f5:1d:a6:da:5c:b1:38:ce:ed:
2e:42:df:80:1a:4b:52:e4:cb:43:93:5b:7b:ea:05:
d1:45:fa:75:0d:2f:5d:a4:15:3f:53:fd:63:7f:cd:
91:5f:32:43:c7:f6:e0:9a:c1:52:c2:13:ac:e4:9c:
76:7f:5b:e8:73:c9:94:d1:d1:a0:a1:ae:10:9b:1e:
80:68:48:55:55:87:b0:a2:f0:b9:c6:d9:ed:c6:e2:
47:49:35:24:33:a2:95:e2:77:85:18:2a:01:ff:f0:
20:60:5f:35:89:cb:32:6f:78:30:70:e4:62:fd:a3:
76:82:a0:69:9c:f2:87:f3:06:07:a8:cc:ad:f3:2c:
fa:62:cd:c4:cc:25:49:f5:d2:d9:85:df:c5:e3:6b:
84:fa:ba:8f:23:98:e0:ba:89:dc:8a:fc:8b:5b:4f:
67:ae:59:dd:a5:01:be:1e:d5:40:00:d0:be:0d:73:
8f:4f:8d:cc:2a:12:24:c6:cc:b5:05:eb:4e:db:03:
e5:7d:d0:16:6f:b8:51:17:b9:26:4a:80:f7:73:76:
e0:7c:16:fd:92:8b:af:8f:e0:44:aa:ba:2c:c2:23:
a3:3f:16:89:70:8b:13:e8:6d:23:d4:82:13:d7:62:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:22:85:03:71:FC:91:CC:7E:EC:4F:DA:A1:35:16:BE:01:E3:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/114b0f-6220-4030-b170-1658f081fd4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/114b0f-6220-4030-b170-1658f081fd4f/1/cLYihQNx_JHMfuxP2qE1Fr4B41Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:60:65:92:8a:2e:25:ee:49:9f:26:1e:b0:7a:d8:0d:be:29:
6d:87:99:fe:03:3a:f0:67:59:32:be:f3:eb:94:a5:8e:0c:23:
46:f3:7f:db:ae:cf:37:fa:ea:91:0b:91:b5:9e:46:ea:73:8b:
7a:c6:de:82:6b:a2:8c:d1:1e:d5:95:20:f3:7e:10:a3:cc:35:
a9:bf:c0:18:c9:33:1d:42:f6:30:b1:54:1b:6f:09:10:3b:49:
45:bd:1e:55:dd:51:ac:3e:02:04:ec:1b:9a:d6:4f:25:62:a7:
77:79:26:49:53:e7:b9:0e:0a:3d:36:4c:e9:68:a8:86:ed:b7:
53:66:5e:8c:ba:25:c4:32:0d:84:16:8e:d7:d7:a1:46:7e:bf:
9f:a5:8a:e3:b2:e1:9f:07:77:8f:28:a5:79:79:77:97:d1:3d:
76:be:7f:e5:23:a1:a8:27:e0:32:0a:db:0d:60:bf:25:dd:67:
43:3f:53:cc:01:35:24:81:0a:8f:9e:2f:ea:0b:4f:16:89:7f:
50:b4:1e:40:48:d2:6b:08:ab:43:3a:67:cf:ac:c5:27:31:95:
5d:fe:87:ce:84:f3:bb:ea:70:5c:0d:61:26:f2:a1:ba:67:d5:
47:89:5f:ff:53:29:f7:18:f8:45:07:fa:c5:ff:9e:e7:dd:f4:
c3:26:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:34 2025 by rpki-client