Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ensITupvK-7KrwN7Gs9ZGwmApUQ.cer
File: ensITupvK-7KrwN7Gs9ZGwmApUQ.cer (raw, json)
Hash identifier: OoEm3sVicyNAp0TSmwRyPmSmYri3Q6YmRVVGPzhCm7E=
Subject key identifier: 7A:7B:08:4E:EA:6F:2B:EE:CA:AF:03:7B:1A:CF:59:1B:09:80:A5:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A27757B3B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/db3dd0-0235-4936-906b-7d046d58d368/1/ensITupvK-7KrwN7Gs9ZGwmApUQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/db3dd0-0235-4936-906b-7d046d58d368/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:55:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.33.125.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697786938293 (0xa27757b3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a7b084eea6f2beecaaf037b1acf591b0980a544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:c4:d1:42:2d:39:1f:af:9e:49:cc:11:29:
39:3b:33:8b:6e:a3:95:e0:f3:35:83:0b:20:60:51:
ae:36:16:a4:f9:a4:4c:ee:5d:b7:de:fe:1d:3e:4e:
b5:68:13:49:d5:d6:6e:19:ae:9e:1b:b1:7c:37:e5:
4a:fd:20:27:9e:20:f6:3f:f8:fd:67:7e:13:06:d5:
78:76:a7:02:76:22:8f:79:04:d7:c1:fb:31:08:38:
83:08:4c:1d:e7:ea:86:a0:eb:69:14:ba:26:9a:5a:
35:17:5b:80:0f:48:2e:11:c2:83:52:43:35:44:24:
4d:06:35:0e:92:60:d0:5a:d9:cd:5b:75:5e:d0:a1:
ac:4c:f5:e3:9b:a8:c1:1f:84:99:8e:a0:e4:c6:30:
a1:36:77:bd:d8:80:bc:1a:2f:a6:c5:1f:a7:8f:08:
71:4d:e8:17:ce:68:72:a5:53:d6:09:53:9b:a7:e6:
95:10:54:ee:8e:c2:32:f2:a8:07:25:41:70:41:70:
08:c4:e7:b9:e0:51:33:c2:22:b9:9e:78:2a:83:59:
cc:02:ba:32:2c:a8:91:e5:86:b0:a2:8e:94:c4:5a:
72:76:77:17:57:2e:e5:fe:7a:70:7f:50:7f:97:3e:
b6:93:21:20:ba:cd:04:f4:04:01:5e:dd:f4:07:c7:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:08:4E:EA:6F:2B:EE:CA:AF:03:7B:1A:CF:59:1B:09:80:A5:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db3dd0-0235-4936-906b-7d046d58d368/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db3dd0-0235-4936-906b-7d046d58d368/1/ensITupvK-7KrwN7Gs9ZGwmApUQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.125.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4a:b7:9a:e0:ad:cf:69:43:26:13:a1:a8:57:56:0e:e5:d0:
99:b1:45:47:4f:29:ee:88:fd:0d:09:35:d9:63:ba:a4:53:05:
52:60:e5:0c:ae:f3:3e:83:5a:01:18:63:ee:69:8d:31:1d:0b:
b4:73:2d:a5:5c:13:ba:49:de:8e:49:0a:00:e0:08:b0:dc:5c:
18:cb:7e:4a:90:d4:c9:77:4d:b8:a8:21:fe:36:ef:a9:92:bd:
3e:e2:e0:f6:a6:8e:3a:e9:cf:85:7d:7f:21:6b:ee:c3:67:c3:
81:2d:ca:c1:23:a5:37:5e:54:b1:92:15:b9:d2:35:ef:ad:3f:
53:a7:8a:39:ca:f3:73:aa:e2:d2:30:5d:43:d2:56:4c:2a:34:
97:42:94:fe:d4:3c:b8:af:85:85:2d:59:60:8d:5f:39:e6:b9:
2f:2e:e1:c6:51:85:d8:5f:44:ed:88:c9:73:ad:45:af:9a:7e:
cb:90:71:c2:10:9d:ef:53:63:cd:2a:48:16:1a:b3:a8:94:25:
5b:17:2d:3b:ea:e7:77:70:aa:c4:59:31:2b:8b:eb:eb:3e:b0:
bd:31:46:4b:35:78:04:33:f9:62:a1:e8:1c:20:d5:a8:d3:79:
4d:00:27:a7:b2:6f:1b:f9:fd:83:0f:71:9b:97:02:50:cf:db:
2f:53:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:05 2025 by rpki-client