Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
File: fyA8FBnsaiHmYScgP1HB-nTcBE8.cer (raw, json)
Hash identifier: yrOcrIs8dPs7u0Kuw9y73uAfR4SBlP4xVsWYkIop5o8=
Subject key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9929A66CDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:54:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 48281
IP: 185.126.132.0/22
IP: 185.126.156.0/22
IP: 2a06:7cc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657828768987 (0x9929a66cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:54:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:32:86:fd:c4:2f:f1:5c:66:3a:30:91:71:
76:69:06:64:6b:be:4e:62:eb:0e:3b:37:70:c1:38:
74:cb:fd:bc:de:51:47:55:1c:a8:ea:f5:2d:ce:f2:
b1:d0:e1:0b:ef:72:26:0d:41:f5:7d:e9:0b:a5:37:
67:be:e0:71:b6:da:f0:10:fb:37:87:21:de:bf:2f:
9d:6e:09:71:4b:f4:59:e9:b0:c5:c4:02:92:56:e8:
8a:bb:01:1b:ad:c2:6f:42:89:12:94:de:35:aa:c2:
b9:8d:8f:60:30:0a:0c:d3:b5:88:fb:25:3e:25:52:
fe:c5:35:25:01:6e:80:b8:65:90:63:0a:1a:65:77:
c8:d8:b7:ad:30:84:2d:4c:17:98:5b:0a:7d:8c:17:
27:cc:36:71:8e:ff:be:ea:d8:92:97:e9:c8:3b:2a:
a5:fa:56:7b:fb:09:96:fc:82:58:3a:94:89:83:02:
63:fa:e0:06:46:d3:0e:3b:48:29:83:0f:5f:f8:11:
ad:f1:6f:86:50:13:9b:60:81:0a:b7:a4:f0:d6:11:
6f:f1:2f:83:bc:51:2d:48:d5:07:e3:a1:8d:48:ae:
98:92:ff:56:51:6f:6d:c6:6a:95:c4:c8:1a:c1:2b:
8f:0d:62:10:68:aa:8c:46:19:b3:96:80:e4:73:d6:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.132.0/22
185.126.156.0/22
IPv6:
2a06:7cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48281
Signature Algorithm: sha256WithRSAEncryption
69:ce:f3:d9:f1:eb:88:e5:be:4e:a0:7c:3b:f1:1d:fd:32:78:
02:0a:26:30:9d:b5:f3:61:ad:74:b0:40:61:7d:63:1e:f9:39:
5a:45:eb:fb:42:ad:b2:6b:1d:bc:b9:f5:dd:9a:f4:f1:89:0e:
7e:89:4e:ac:68:c5:b8:f9:47:e4:96:e1:44:69:d7:de:18:ca:
e2:60:9c:af:52:08:72:94:a0:0f:63:f0:4b:f3:3d:85:0b:12:
e8:71:2d:34:20:36:5a:2d:34:12:43:53:08:30:c2:6c:21:50:
f0:e9:e0:47:92:1e:59:63:ef:ae:fe:b4:4e:8b:e7:85:61:51:
c6:d7:8c:b9:05:72:e6:fc:9d:74:7a:f0:92:21:31:9c:3e:02:
99:c3:e6:ab:64:d0:7b:a4:da:76:f2:ba:da:51:88:6a:5c:c2:
41:4f:db:95:98:99:7c:c4:ea:17:3f:75:c3:12:93:fa:e4:da:
7d:57:66:6b:63:18:8b:e0:37:9e:4d:f1:59:99:df:28:17:a9:
f0:d5:00:4b:81:01:9e:13:26:fa:5f:7d:a0:d9:69:51:7d:ee:
2c:cd:34:dc:ec:c6:dc:bc:c3:df:5c:d5:19:cd:08:0a:41:b2:
9c:24:ef:80:48:fc:97:cf:e1:4c:72:da:d9:b2:f7:e1:e0:67:
f3:4f:4d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:40:04 2025 by rpki-client