Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gBSfQ_7raZ_6QKhw5e19_CJfEz8.cer
File: gBSfQ_7raZ_6QKhw5e19_CJfEz8.cer (raw, json)
Hash identifier: 86DjI89m9KPMhymjQTADlMU80pEbxD8GvYpWFDVeIbU=
Subject key identifier: 80:14:9F:43:FE:EB:69:9F:FA:40:A8:70:E5:ED:7D:FC:22:5F:13:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0182CBD77601468D6241039DCC954457E001
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/e0caff-28cd-4c6b-b675-e263cad7beba/1/gBSfQ_7raZ_6QKhw5e19_CJfEz8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/e0caff-28cd-4c6b-b675-e263cad7beba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Aug 2022 17:54:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a12:84c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:d7:76:01:46:8d:62:41:03:9d:cc:95:44:57:e0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 23 17:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80149f43feeb699ffa40a870e5ed7dfc225f133f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:8f:0c:0c:ed:c9:5d:c9:da:22:a1:b7:48:
9a:75:84:74:26:bb:31:8b:2b:00:15:8c:f5:ec:b9:
0a:6c:c8:ed:a8:8a:ae:8c:7d:19:dc:41:1e:73:04:
30:7a:13:73:70:57:56:a4:3e:bb:80:f5:88:77:5a:
ea:19:1f:e2:9a:59:82:db:79:1a:36:79:8d:bb:ee:
0b:46:60:06:9a:c3:e9:df:17:8a:d3:c2:0d:c7:a2:
82:31:91:cf:ad:84:94:e8:78:86:16:51:f7:b0:60:
49:6a:09:6f:bb:74:8f:33:8b:b4:c7:45:6e:a2:36:
93:4e:b0:97:f8:97:9d:2a:2a:69:8c:b5:51:67:98:
64:5a:1d:2c:df:82:3d:45:4c:53:1c:40:57:29:b1:
f8:e7:54:61:ac:05:79:d3:ff:44:a7:b7:b6:4a:9d:
25:26:8b:6a:41:e1:d9:14:81:b5:4f:a5:6c:25:16:
cf:3f:5b:b7:68:06:e4:63:ac:ed:d8:99:ea:c0:e5:
7c:6f:5b:81:07:85:ec:45:01:ab:84:09:92:7b:7c:
4a:13:ff:ae:02:6b:7f:16:c2:3d:dc:b2:4a:95:49:
c9:36:a3:e9:5a:eb:c7:2a:a1:c0:dc:69:fc:a4:59:
bc:5d:65:25:79:ae:60:c9:ae:1f:30:21:7d:c2:f1:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:9F:43:FE:EB:69:9F:FA:40:A8:70:E5:ED:7D:FC:22:5F:13:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e0caff-28cd-4c6b-b675-e263cad7beba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e0caff-28cd-4c6b-b675-e263cad7beba/1/gBSfQ_7raZ_6QKhw5e19_CJfEz8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:be:c8:e8:ab:be:ef:99:4d:5d:83:10:ba:5a:9e:2e:95:b9:
4e:96:85:e2:fc:bf:02:2f:73:f4:78:e0:b4:82:4d:c6:9d:ab:
4f:2e:30:e2:4c:73:fc:7d:5a:a6:9f:8f:64:e8:ed:0f:b2:c3:
34:e0:2f:3b:14:41:70:a8:6c:64:e7:0e:62:aa:c7:75:63:40:
91:92:0c:d9:67:dc:15:22:ff:46:4d:1b:1c:1f:65:23:55:2e:
40:b8:4e:92:55:20:f5:01:66:dd:9c:4d:39:c0:2e:cc:16:45:
a6:84:bc:17:3e:f5:da:bb:30:a3:e3:2c:f3:18:7c:27:6b:2c:
c1:8d:22:2d:22:bb:45:17:86:70:8d:ea:fc:b5:94:4a:09:00:
b3:cf:50:b0:d5:90:96:06:ff:4b:ff:5c:f2:ac:ac:74:9b:3c:
23:3b:9e:4c:22:92:7f:6f:fc:0e:d3:74:cf:35:ba:25:10:19:
db:65:07:3e:9e:01:65:0a:b6:5c:ba:dc:9d:69:97:51:dd:68:
0f:66:b4:0d:4d:23:40:2f:b2:f7:e4:38:de:61:5c:73:0d:e9:
36:e8:d6:a8:68:11:9d:fa:fd:d2:9d:72:ba:41:91:e2:a7:ae:
89:a3:e0:68:13:58:64:fd:70:70:d7:7b:d0:e2:7b:86:f9:85:
13:42:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:52 2025 by rpki-client