Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/coTX52fsTo-kb85wGCMiO7vfsto.cer
File: coTX52fsTo-kb85wGCMiO7vfsto.cer (raw, json)
Hash identifier: xeXidk3m2DuMmMWv86Sg088iwDqZRjVnlx6tFKXN7oI=
Subject key identifier: 72:84:D7:E7:67:EC:4E:8F:A4:6F:CE:70:18:23:22:3B:BB:DF:B2:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ADE3AD28BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/3034e4-db9c-4197-aa42-37dafe8eb4c8/1/coTX52fsTo-kb85wGCMiO7vfsto.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/3034e4-db9c-4197-aa42-37dafe8eb4c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Feb 2022 07:50:33 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.251.56.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 746849118399 (0xade3ad28bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 28 07:50:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7284d7e767ec4e8fa46fce701823223bbbdfb2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:52:8f:f2:50:03:a9:6e:33:c2:1b:cd:45:
7d:23:ad:33:9a:05:8a:2a:19:30:f6:87:f9:01:47:
47:39:61:b2:b7:31:15:97:93:03:5c:88:71:c0:15:
5e:7a:c5:fb:7e:54:e2:18:fe:c2:5a:01:c3:2d:11:
5f:10:36:b9:1a:cd:1d:db:62:50:d5:31:3c:eb:be:
fc:9a:e1:a3:60:e5:b6:8a:1a:92:70:5f:5a:3d:c4:
44:54:84:ad:f3:69:27:d9:5b:96:9b:4e:06:ab:b1:
c2:cc:dd:cb:f0:23:b9:5e:ca:bf:65:62:12:da:b0:
7d:2f:6d:9e:9a:58:17:a3:ad:3f:71:e3:a0:d5:c8:
c5:16:df:94:08:43:d4:ff:74:aa:1b:f1:a6:4e:c7:
93:33:79:cb:6a:d2:0b:ed:02:36:e7:92:ec:ec:68:
03:59:19:65:8c:a0:86:7a:07:f9:71:37:6b:dc:ce:
f5:c4:bf:8c:e6:e0:cf:40:4f:62:c8:18:1d:9f:bd:
d6:32:4b:60:79:ce:1d:f9:b1:e6:d6:0a:9e:1a:05:
6e:6c:7e:83:2e:79:7d:c8:5a:ec:75:91:af:3c:28:
40:a8:12:6a:b7:d3:00:de:17:41:77:0e:9c:b3:a4:
0c:66:c4:15:b3:5f:95:00:28:4c:c6:18:b6:5d:6b:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:D7:E7:67:EC:4E:8F:A4:6F:CE:70:18:23:22:3B:BB:DF:B2:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3034e4-db9c-4197-aa42-37dafe8eb4c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3034e4-db9c-4197-aa42-37dafe8eb4c8/1/coTX52fsTo-kb85wGCMiO7vfsto.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:8b:3d:bf:9b:39:23:9e:53:13:1b:07:66:c9:f4:2a:90:51:
78:2e:b0:b6:f1:bb:28:8a:3d:98:c2:2e:35:e6:3e:6a:51:58:
11:20:73:c7:bb:c3:32:da:b9:90:db:56:61:2a:10:e7:3f:91:
97:5a:a2:ac:93:1d:95:12:3f:c3:e5:16:10:01:5a:05:94:44:
ba:c3:bd:96:3f:43:d9:88:32:62:03:57:ed:c7:39:6b:4e:47:
20:ae:0d:8a:e9:c7:0b:b2:29:72:8b:cc:91:d3:78:ba:2c:d9:
01:e4:27:cd:60:cb:04:22:0f:18:79:8b:17:02:b0:f1:c9:0c:
2b:18:59:c9:64:21:81:1d:0d:b8:c1:50:93:c9:e3:63:b3:81:
ba:74:ff:0c:d3:59:e1:10:64:13:8d:5b:19:c9:19:19:26:ae:
00:55:ad:0b:56:d2:3c:84:6c:53:6b:53:54:6c:15:91:b1:b7:
99:d3:a0:a2:f4:ce:d3:5f:b8:a2:a8:97:21:2d:1e:f6:64:7f:
6c:63:fe:bc:51:b9:8c:f1:11:11:74:09:8a:0c:01:06:66:e1:
00:f3:5c:6d:f3:f3:f7:d0:3f:f9:b6:ee:77:b5:f4:fa:bf:fd:
d1:bb:dd:7c:60:83:13:5e:62:01:71:59:7e:4a:ab:2a:27:a6:
bf:d6:75:35
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAK3jrSi/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MjI4MDc1MDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3Mjg0ZDdlNzY3
ZWM0ZThmYTQ2ZmNlNzAxODIzMjIzYmJiZGZiMmRhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAvGFSj/JQA6luM8IbzUV9I60zmgWKKhkw9of5AUdHOWGy
tzEVl5MDXIhxwBVeesX7flTiGP7CWgHDLRFfEDa5Gs0d22JQ1TE86778muGjYOW2
ihqScF9aPcREVISt82kn2VuWm04Gq7HCzN3L8CO5Xsq/ZWIS2rB9L22emlgXo60/
ceOg1cjFFt+UCEPU/3SqG/GmTseTM3nLatIL7QI255Ls7GgDWRlljKCGegf5cTdr
3M71xL+M5uDPQE9iyBgdn73WMktgec4d+bHm1gqeGgVubH6DLnl9yFrsdZGvPChA
qBJqt9MA3hdBdw6cs6QMZsQVs1+VAChMxhi2XWuSowIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFHKE1+dn7E6PpG/OcBgjIju737LaMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzMwMzRlNC1kYjljLTQxOTct
YWE0Mi0zN2RhZmU4ZWI0YzgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMzAzNGU0LWRiOWMtNDE5Ny1h
YTQyLTM3ZGFmZThlYjRjOC8xL2NvVFg1MmZzVG8ta2I4NXdHQ01pTzd2ZnN0by5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCufs4MA0GCSqGSIb3DQEBCwUAA4IBAQBfiz2/mzkjnlMTGwdmyfQq
kFF4LrC28bsoij2Ywi415j5qUVgRIHPHu8My2rmQ21ZhKhDnP5GXWqKskx2VEj/D
5RYQAVoFlES6w72WP0PZiDJiA1ftxzlrTkcgrg2K6ccLsilyi8yR03i6LNkB5CfN
YMsEIg8YeYsXArDxyQwrGFnJZCGBHQ24wVCTyeNjs4G6dP8M01nhEGQTjVsZyRkZ
Jq4AVa0LVtI8hGxTa1NUbBWRsbeZ06Ci9M7TX7iiqJchLR72ZH9sY/68UbmM8RER
dAmKDAEGZuEA81xt8/P30D/5tu53tfT6v/3Ru918YIMTXmIBcVl+SqsqJ6a/1nU1
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:28 2025 by rpki-client