Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cunWYKFBGf43x7w73t3jzkn1RRM.cer
File: cunWYKFBGf43x7w73t3jzkn1RRM.cer (raw, json)
Hash identifier: v0wyv93ZPDtlMJw6q/Eg2mZUxyIqdeYHJKnGJnZjV3M=
Subject key identifier: 72:E9:D6:60:A1:41:19:FE:37:C7:BC:3B:DE:DD:E3:CE:49:F5:45:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B68DE5DE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/14a1f0-f03c-44a1-b37a-b58100540803/1/cunWYKFBGf43x7w73t3jzkn1RRM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/14a1f0-f03c-44a1-b37a-b58100540803/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:53:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212808
IP: 185.175.88.0/24
IP: 2a10:45c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667479334369 (0x9b68de5de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72e9d660a14119fe37c7bc3bdedde3ce49f54513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d8:67:07:a4:8c:a6:59:bd:db:7c:f2:78:ec:
b5:f5:68:87:dc:7b:1c:7c:2e:38:3d:20:7d:49:e1:
83:f5:3c:1b:30:72:1f:60:9b:d2:2a:64:c3:2d:b8:
72:f5:ff:73:4a:95:af:6d:3b:9e:b3:2d:28:ff:a3:
c8:d1:e4:d6:53:72:3a:92:54:8e:4c:d4:10:12:53:
c9:2d:38:36:06:69:cb:ed:60:ee:ca:4b:46:dc:e4:
f7:f2:51:8d:13:b1:80:f5:e7:d1:5e:09:d2:14:fd:
c5:cf:16:f2:c2:a7:ce:16:e6:95:a1:79:78:d9:b3:
c5:66:65:2d:7d:7a:4b:f9:15:92:34:25:72:20:f5:
b4:b2:f7:9e:33:5a:fe:29:ef:0c:99:4c:9c:84:9a:
6a:6e:16:e1:cf:e3:22:fc:ed:92:4a:80:79:64:78:
f4:a7:7c:3e:f2:09:a8:c3:e8:3a:8f:10:b2:34:4c:
63:01:a4:53:9c:d6:84:76:40:42:a7:c7:ed:60:09:
19:5d:75:2c:fb:89:ec:f4:99:04:77:74:0d:e1:2f:
f6:ed:97:b5:f3:96:b7:52:46:b4:e8:2e:f9:d3:e6:
c4:4c:ad:32:cf:0e:80:5b:fa:bf:d3:c4:54:d3:b0:
2b:9e:b9:ca:ff:82:8d:ba:42:46:64:90:a2:10:a5:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E9:D6:60:A1:41:19:FE:37:C7:BC:3B:DE:DD:E3:CE:49:F5:45:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/14a1f0-f03c-44a1-b37a-b58100540803/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/14a1f0-f03c-44a1-b37a-b58100540803/1/cunWYKFBGf43x7w73t3jzkn1RRM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.88.0/24
IPv6:
2a10:45c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212808
Signature Algorithm: sha256WithRSAEncryption
84:5b:26:6f:de:60:a3:fa:34:03:d8:f0:d5:95:9b:98:62:ad:
0c:6d:6a:e7:74:78:e3:15:89:d4:fe:2d:46:78:81:aa:83:6a:
99:9e:bf:2b:f0:90:14:9f:0c:3d:94:51:35:14:d2:5d:6a:0e:
a8:25:34:1b:8c:51:1d:2e:9a:9c:d7:7f:51:49:fc:46:51:48:
54:15:e3:9a:ef:74:61:d0:62:d5:6e:5d:ff:ab:45:31:34:c1:
f5:c6:bf:56:2a:66:e5:31:65:67:1c:56:d6:54:bf:61:4a:32:
a1:7a:90:9a:09:46:79:6d:b0:1d:d9:e6:b0:bc:7e:12:50:4a:
70:ef:35:2c:6f:14:08:bc:0f:5f:ba:d7:c6:d3:3b:c0:12:07:
8d:b8:0f:8b:52:e2:d3:7f:5f:61:ae:7e:4f:48:71:f1:2b:da:
9b:80:40:db:18:64:00:33:61:db:38:f9:b8:65:26:3d:cd:0d:
5d:93:ca:7a:21:88:20:69:09:9d:24:32:db:2d:94:46:f3:0e:
a5:6f:be:22:3c:62:92:01:f5:82:5e:66:aa:ed:72:93:fa:3f:
72:ef:b1:98:67:43:30:cd:e4:3d:8d:f2:e6:7d:2f:a5:d5:8b:
ec:ea:a6:84:e8:ab:56:6a:8c:a1:c7:f9:cd:61:53:83:09:af:
97:ab:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:51:43 2025 by rpki-client