Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cwxTChSFS8i1tN-xdHqzVD5K_MM.cer
File: cwxTChSFS8i1tN-xdHqzVD5K_MM.cer (raw, json)
Hash identifier: flegk87mAjAs4j4v2wewRG6dHLU8/swLrGEuhZEpDBk=
Subject key identifier: 73:0C:53:0A:14:85:4B:C8:B5:B4:DF:B1:74:7A:B3:54:3E:4A:FC:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A687BD5789
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/ecb293-8fa4-4849-9562-56f9f23afc35/1/cwxTChSFS8i1tN-xdHqzVD5K_MM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/ecb293-8fa4-4849-9562-56f9f23afc35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:03:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 197985
IP: 31.177.32.0/21
IP: 185.38.152.0/22
IP: 185.192.144.0/22
IP: 2a03:ea40::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715241904009 (0xa687bd5789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=730c530a14854bc8b5b4dfb1747ab3543e4afcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:d5:da:92:37:8a:b7:63:22:0a:f5:0e:32:
4a:c0:c7:ae:c5:08:76:f5:d7:c0:81:fb:7f:c1:59:
94:b0:6e:a7:8d:fd:f2:4e:60:0b:8f:9e:1a:97:92:
a1:37:cd:7b:6c:5d:ec:57:75:0f:ce:90:bd:b6:04:
fe:55:06:4d:19:2c:84:f4:f6:43:41:54:5b:33:d7:
4d:e2:8c:7a:4e:21:a4:2a:37:29:36:b4:51:84:27:
66:b1:46:e9:86:c0:14:2b:e3:6b:cc:96:b8:4f:d0:
98:7c:45:ab:65:2b:f9:20:d2:cb:03:fc:3b:a6:f9:
44:fd:da:b5:b1:cc:14:d7:5f:15:b3:7a:57:df:79:
b5:90:0e:03:03:7a:9b:a8:0f:b4:44:c8:88:d7:f1:
9d:30:94:10:a9:ed:6c:73:64:6c:a3:6e:73:97:27:
03:7d:36:c8:a9:ea:b2:49:bc:a2:15:8b:e2:72:55:
9b:6d:00:83:b7:aa:c2:80:c9:ef:2a:1b:06:01:99:
2b:bd:c8:ee:47:36:c6:06:84:b6:e1:df:28:60:cf:
0f:af:ab:31:f1:62:a0:44:4f:e1:ff:3f:48:a9:cc:
b7:11:e3:9c:d4:5d:d5:d3:8a:8c:ef:bc:8d:56:c4:
e9:14:14:ac:8c:e3:15:db:19:d8:60:41:2f:d6:0e:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:53:0A:14:85:4B:C8:B5:B4:DF:B1:74:7A:B3:54:3E:4A:FC:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ecb293-8fa4-4849-9562-56f9f23afc35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ecb293-8fa4-4849-9562-56f9f23afc35/1/cwxTChSFS8i1tN-xdHqzVD5K_MM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.32.0/21
185.38.152.0/22
185.192.144.0/22
IPv6:
2a03:ea40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197985
Signature Algorithm: sha256WithRSAEncryption
8d:f8:6e:a2:f3:fd:a9:01:66:dd:04:56:88:bb:78:6a:7b:5a:
c8:e6:44:d7:03:36:10:56:c4:94:ff:50:f2:7b:d3:b7:ff:be:
7b:02:45:a3:c5:de:5d:1b:3a:f4:4f:8f:86:36:20:74:4c:51:
65:62:34:1a:47:bd:34:92:05:32:49:75:0d:7f:b4:2c:a6:db:
b6:1b:0d:c1:85:8f:bd:8b:e4:eb:20:32:c5:94:9e:74:09:f9:
e9:4c:52:48:94:e8:e0:d8:ae:87:a7:a3:f0:20:ba:7d:32:b1:
c1:0d:13:96:08:f1:0a:de:52:5d:70:d9:90:2f:d1:f1:2d:5e:
5a:99:07:c8:93:74:74:41:27:70:e2:5d:55:49:fd:96:21:c9:
79:e9:88:1d:d5:23:fa:f5:90:33:9a:9c:b3:35:43:06:5e:aa:
78:f2:24:6a:4a:4a:83:11:d2:f5:6c:98:3c:27:41:b7:70:c6:
cf:8f:4f:5c:8e:73:a4:ed:2b:8c:d0:ab:31:64:79:21:0c:2f:
a9:5f:5a:9d:8d:0e:15:32:6b:eb:7d:c2:26:5a:52:7d:23:88:
52:c6:d2:0a:96:be:87:d8:37:f6:8a:a9:2b:54:05:9f:b1:ee:
59:28:d7:2a:1e:e8:76:12:5d:8f:8d:91:9f:cf:05:22:65:35:
1d:05:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 18:54:51 2025 by rpki-client