Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gp8hwGHztPkZCUUKDpaPfKpjSSU.cer
File: gp8hwGHztPkZCUUKDpaPfKpjSSU.cer (raw, json)
Hash identifier: 1upBmisHhyi9IzQziwVbLwN4t2ezNzeA0NT/95k4euU=
Subject key identifier: 82:9F:21:C0:61:F3:B4:F9:19:09:45:0A:0E:96:8F:7C:AA:63:49:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AACDDD5950
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/a95b81-31a7-4211-8d62-4aed8a823777/1/gp8hwGHztPkZCUUKDpaPfKpjSSU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/a95b81-31a7-4211-8d62-4aed8a823777/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:59:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209451
IP: 185.245.132.0/22
IP: 2a09:55c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733598275920 (0xaacddd5950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=829f21c061f3b4f91909450a0e968f7caa634925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:3a:54:b9:2c:bf:03:19:9d:b2:4c:7f:51:
a7:f1:32:af:f5:c0:4c:c5:33:71:a3:fb:f9:9e:34:
e1:e3:75:4d:27:92:b0:73:05:ba:92:b0:e8:23:f1:
75:73:e0:20:5e:7b:fe:81:e8:9c:28:4e:cf:c7:48:
a2:55:ef:bd:c0:d9:11:1d:fc:e1:98:fd:e6:ec:9b:
8d:96:bb:f7:cf:48:53:a8:69:d6:79:b3:cc:26:91:
3f:9c:61:e8:10:d4:81:37:b2:0d:24:60:38:44:a4:
d6:32:81:2d:34:51:85:cd:e9:6c:e0:b3:c3:dd:f4:
8e:5d:f3:07:21:7b:0e:74:2f:12:5c:5c:e5:de:5f:
47:af:c2:41:bc:c4:16:fe:4f:9d:f7:0e:e9:e2:da:
e6:f4:40:66:14:eb:bf:b4:22:78:9c:ad:60:6d:31:
fb:b6:5b:4b:e4:ad:ae:f9:e8:98:ec:fb:63:a4:4c:
e2:8d:e4:fd:56:38:58:18:ba:03:f5:2c:2f:50:3e:
5d:0f:99:9e:8d:56:d2:fc:d7:17:b8:d8:42:70:3b:
0b:ef:7f:29:46:c1:74:16:60:1a:9c:17:92:8e:c7:
cc:e6:e0:aa:63:cc:67:28:20:41:f0:ee:1f:07:66:
ca:3e:dd:6f:50:b6:67:a3:60:24:25:b4:a7:0a:5f:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:21:C0:61:F3:B4:F9:19:09:45:0A:0E:96:8F:7C:AA:63:49:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a95b81-31a7-4211-8d62-4aed8a823777/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a95b81-31a7-4211-8d62-4aed8a823777/1/gp8hwGHztPkZCUUKDpaPfKpjSSU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.132.0/22
IPv6:
2a09:55c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209451
Signature Algorithm: sha256WithRSAEncryption
95:e8:00:d6:19:27:9d:03:ac:01:90:e0:e7:46:7b:ea:93:e8:
1a:f5:1d:b6:1d:10:4f:e1:c6:28:f7:3c:ee:00:92:de:b8:ce:
cd:90:0d:87:95:13:17:08:70:2e:4c:f7:18:a3:6b:88:d1:e0:
cd:ae:d1:95:9c:7f:77:41:9d:5a:8e:72:b2:cc:f9:84:c6:76:
a1:6c:ef:49:af:e0:f9:02:11:2d:39:75:64:a9:2e:bd:87:f0:
d8:ba:92:6a:0d:6b:95:25:e3:c5:dd:08:62:7a:b3:51:85:00:
5a:a7:b7:d5:fa:4a:63:65:6c:ab:a3:a5:32:d6:e4:98:f2:13:
f3:14:50:c3:f6:18:51:ee:8d:c9:a4:e2:2c:20:2a:80:68:46:
1b:97:bf:cb:37:3e:85:9b:b6:12:69:14:66:6b:94:58:6e:1f:
40:69:8e:d8:c7:69:88:b7:d0:82:da:ed:96:aa:37:70:b3:c8:
2a:99:b0:0d:fc:51:3a:fa:26:28:0d:f4:71:d5:14:20:ce:57:
da:62:f2:38:3f:6d:7c:2f:d6:d0:7f:30:0a:b0:c6:9d:51:ed:
56:4e:de:59:05:3b:90:c9:fb:8c:e4:03:61:c6:c0:4f:35:0c:
4a:07:9a:6e:4b:ab:c7:cf:7a:8b:50:22:34:e0:29:42:59:fe:
a9:fb:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:43:00 2025 by rpki-client