Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dNNYxvJ2diN9JfyqLX4uoFhpj5g.cer
File: dNNYxvJ2diN9JfyqLX4uoFhpj5g.cer (raw, json)
Hash identifier: Q96MzhmZZQavTEMMItVoXltihIMy4XBgcb39hKQmB3I=
Subject key identifier: 74:D3:58:C6:F2:76:76:23:7D:25:FC:AA:2D:7E:2E:A0:58:69:8F:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D6901B221441A632FDBC051B63D603
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/4ec8dc-c2da-481a-bf63-8b2d1c19cd95/1/dNNYxvJ2diN9JfyqLX4uoFhpj5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/4ec8dc-c2da-481a-bf63-8b2d1c19cd95/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 43320
IP: 91.197.16.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:90:1b:22:14:41:a6:32:fd:bc:05:1b:63:d6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74d358c6f27676237d25fcaa2d7e2ea058698f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:45:69:df:8e:12:d3:f2:69:a0:b7:2f:88:
56:88:b0:1f:5f:7d:3a:34:1c:25:03:c6:16:a1:f2:
70:83:32:a0:e8:f2:b1:57:ab:74:94:a8:0b:04:8a:
91:9e:6c:a2:4c:0c:6a:c1:4a:4d:10:58:71:dd:af:
af:f4:c3:e2:34:93:cc:41:c7:7a:e2:d3:87:4b:1b:
2f:dd:60:4f:40:47:44:ad:0f:15:56:fb:af:8d:a5:
99:1a:ea:13:79:62:94:b9:8d:a2:5a:33:c4:33:89:
89:c1:9c:52:57:95:dd:6d:90:c6:5c:41:d6:11:49:
e3:d5:5f:69:b5:b5:87:4f:93:d3:73:cc:a6:b6:ed:
25:ff:ec:52:ba:aa:d7:ef:32:ac:41:98:34:97:c4:
2c:89:55:ba:cb:5d:0b:ee:59:51:30:d8:bb:9b:60:
23:62:eb:0b:07:6d:7b:b2:11:7c:72:e6:7c:19:ad:
05:bc:ff:22:55:e8:96:dc:ad:e4:83:f8:41:12:ce:
03:9d:31:be:fa:26:44:ab:56:b1:4b:7b:a1:bb:ed:
7a:d8:fb:5d:33:da:2b:36:d3:7a:4d:50:38:56:95:
f4:5b:b6:ee:3c:4b:ad:6c:8e:fd:ba:50:55:27:49:
06:eb:bd:e2:ad:b8:2a:75:49:1f:3b:9c:2f:ab:20:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:58:C6:F2:76:76:23:7D:25:FC:AA:2D:7E:2E:A0:58:69:8F:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4ec8dc-c2da-481a-bf63-8b2d1c19cd95/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4ec8dc-c2da-481a-bf63-8b2d1c19cd95/1/dNNYxvJ2diN9JfyqLX4uoFhpj5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.16.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43320
Signature Algorithm: sha256WithRSAEncryption
81:5a:8c:63:84:8e:e1:52:c6:d9:f7:92:2c:4a:07:79:0e:aa:
2a:5e:e8:77:a3:30:a1:60:02:98:9a:aa:c4:8e:c8:c9:64:23:
69:63:78:f6:fc:66:40:32:83:23:fb:34:c9:85:0e:e6:2a:70:
16:c9:36:56:2f:5e:7d:25:3c:67:46:10:7c:d0:0a:e5:77:0e:
be:2e:65:7d:7c:88:f9:95:a7:83:fe:f3:6a:ec:15:dd:58:14:
15:91:ed:88:40:8f:71:e8:e2:95:4d:a8:ff:f1:b0:e8:90:67:
0f:53:41:6e:48:e4:a1:00:5b:83:13:5e:5e:05:79:91:d9:60:
a5:37:56:a5:ca:19:cb:47:2c:29:4a:dc:d0:b4:c5:9c:ad:0c:
7d:dd:36:c3:e5:52:0f:02:5b:d0:19:d6:b6:fe:a0:03:4a:2e:
fe:cf:c6:78:d8:6f:22:54:f3:a1:0f:6c:64:47:c7:d1:7b:2c:
67:50:dc:86:06:db:83:cd:06:f9:fc:e9:fa:a1:c4:db:ec:14:
b7:9e:09:0d:f1:21:ce:7e:0b:e2:26:c5:ae:20:19:61:59:46:
4b:54:5c:48:6b:ba:2a:8b:ce:11:58:f9:c2:1b:39:48:bd:73:
68:b4:11:c3:02:76:5d:c7:f7:68:d6:ef:01:d2:0f:34:f0:cb:
ff:68:4d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:10:54 2025 by rpki-client