Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eTYbSdePwhWKmBnmGnqDjBTD6vo.cer
File: eTYbSdePwhWKmBnmGnqDjBTD6vo.cer (raw, json)
Hash identifier: W5Sy1qrzZ+u1+8i2vlR4+/aGiaw/ay/oRqtXfniUBaI=
Subject key identifier: 79:36:1B:49:D7:8F:C2:15:8A:98:19:E6:1A:7A:83:8C:14:C3:EA:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A23F834BC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/04c67c-3fcc-4b10-a9f7-e59c6ce2f91f/1/eTYbSdePwhWKmBnmGnqDjBTD6vo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/04c67c-3fcc-4b10-a9f7-e59c6ce2f91f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:53:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.144.236.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696850271168 (0xa23f834bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79361b49d78fc2158a9819e61a7a838c14c3eafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:09:96:2f:e0:87:36:0c:38:cd:df:05:78:
13:41:d9:58:df:b3:50:e0:6e:27:f9:26:c6:04:3e:
a7:4b:b8:50:69:34:49:7e:d9:98:f6:69:1c:ab:9b:
78:e8:99:b7:fe:75:09:cc:ad:2c:af:b3:81:32:35:
94:4c:41:04:3e:1c:92:02:8b:38:b7:2a:06:75:eb:
04:93:b9:47:8d:a5:4c:01:2d:24:f1:3d:1d:56:15:
f1:f2:2f:c1:c7:9e:60:1d:4e:e1:62:65:33:56:7c:
56:36:a6:ad:24:d0:5e:f4:8c:a6:0b:74:c6:c5:1b:
8c:ad:4c:2d:52:a5:2e:01:fd:06:4d:c8:61:cd:2b:
02:76:7e:9e:b0:d1:83:18:5c:ac:c4:a9:09:85:83:
c6:90:ac:69:68:b4:a0:ac:ba:5f:25:6d:31:b4:01:
5d:83:27:c9:10:bd:6d:f6:df:98:c9:53:49:cb:91:
71:0c:2f:42:94:70:0b:4f:5d:4e:1b:74:b7:bf:c6:
98:31:30:1f:02:73:a1:45:d5:1f:b0:0c:bb:bc:fe:
d9:f5:0d:84:51:35:ae:9c:f1:62:14:05:b6:9a:92:
cb:16:07:12:24:f3:c7:36:37:f8:94:9b:38:8e:bc:
67:11:7b:7e:24:65:81:9c:33:8d:28:79:f5:24:12:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:1B:49:D7:8F:C2:15:8A:98:19:E6:1A:7A:83:8C:14:C3:EA:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04c67c-3fcc-4b10-a9f7-e59c6ce2f91f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04c67c-3fcc-4b10-a9f7-e59c6ce2f91f/1/eTYbSdePwhWKmBnmGnqDjBTD6vo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.236.0/22
Signature Algorithm: sha256WithRSAEncryption
72:1e:48:ad:3c:1d:a8:21:de:ee:8b:c4:35:8d:fd:99:fe:fb:
4e:54:d7:0d:c5:10:2f:c4:a9:23:f7:cb:f0:86:c8:25:d0:9e:
af:f2:03:2b:22:90:6c:38:c1:8f:18:b8:1f:99:4a:89:f6:54:
71:95:fc:de:12:5a:3a:f2:6c:9e:f8:2b:53:6f:85:4d:91:87:
3e:fa:7b:8f:42:5a:ea:ba:6a:77:3e:19:c4:96:63:42:19:a4:
e8:50:a5:9e:3a:f2:91:7a:d6:6d:c3:6b:f1:88:e7:66:8f:14:
02:b4:33:d8:eb:f0:fa:e9:f1:dc:a8:24:a9:c0:b4:22:84:3e:
89:2d:a0:6d:39:96:f1:62:57:45:ff:4b:e1:de:62:fb:89:b4:
de:90:c1:67:53:74:30:bb:12:38:7c:ef:a7:98:0e:c4:57:71:
2b:02:3e:6b:a3:27:da:38:3c:ab:ac:71:19:0f:0b:a5:61:8f:
1e:d2:27:3b:83:c8:0f:38:b4:20:75:b8:cc:1a:eb:fa:0b:b2:
fe:ef:2f:ee:36:12:08:f3:9b:70:19:67:13:31:dd:ab:7a:64:
0c:35:8b:b6:3b:23:8b:e4:c7:57:5d:cd:3b:38:fc:41:ae:0b:
cd:b1:4e:ae:39:ef:dd:09:37:e4:dc:ba:20:a5:66:cd:aa:ae:
84:0a:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:57 2025 by rpki-client