Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j5QiOhXtZeUg9ewsZPlCNjDMr7w.cer
File: j5QiOhXtZeUg9ewsZPlCNjDMr7w.cer (raw, json)
Hash identifier: ka1o79JqJ0Zjf89Gx0NvBN2w9UkA8JNYLAermyYxA7w=
Subject key identifier: 8F:94:22:3A:15:ED:65:E5:20:F5:EC:2C:64:F9:42:36:30:CC:AF:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A1F0A6C226A2EC618FAA3A01C684C0DF6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/j5QiOhXtZeUg9ewsZPlCNjDMr7w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Aug 2023 20:58:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.36.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:0a:6c:22:6a:2e:c6:18:fa:a3:a0:1c:68:4c:0d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 22 20:58:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f94223a15ed65e520f5ec2c64f9423630ccafbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:9e:f3:f1:0b:53:d3:f8:31:40:9f:3e:be:
a6:05:45:98:6a:b0:65:c4:b9:56:6f:7f:67:ed:0c:
58:f7:e6:d4:87:4a:d4:19:ab:2f:d2:9a:de:a1:19:
d8:93:90:68:c9:d6:e7:ff:2c:ec:53:ba:f4:76:17:
6d:fc:e0:a3:26:88:37:03:38:6c:51:1e:6b:ed:5b:
14:c6:65:34:dc:26:8b:5f:eb:20:eb:88:a7:3d:65:
4a:5b:20:65:5d:0d:85:99:1e:b3:9b:90:a3:e6:8e:
5d:fe:df:26:b3:10:4e:bc:4c:a6:f3:0f:cd:94:fd:
b8:2f:04:e7:26:f7:d7:05:55:3f:65:aa:fa:71:96:
29:e1:de:e3:8a:b2:84:91:16:ea:73:5b:ad:20:1b:
6e:d9:eb:2c:8e:c2:73:49:80:50:a2:e2:5f:8b:5c:
f9:ea:4a:cb:a8:d4:41:34:cd:af:33:9e:5a:c1:34:
8c:15:80:8a:7c:3e:41:11:ed:7b:29:bd:d2:97:98:
14:00:81:e8:b8:ad:63:dd:90:a9:e0:80:be:d5:4c:
0e:74:6f:95:f5:6c:3d:90:c2:c0:16:03:ed:f9:75:
68:09:c1:22:28:1a:19:07:b7:b8:92:51:ae:ae:ef:
ac:84:33:d4:9e:01:cb:3b:0b:f4:97:b1:d3:10:94:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:94:22:3A:15:ED:65:E5:20:F5:EC:2C:64:F9:42:36:30:CC:AF:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/j5QiOhXtZeUg9ewsZPlCNjDMr7w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fc:c6:ba:3a:55:3e:fb:67:c0:d4:c2:de:b7:8b:ec:52:43:
a7:21:4f:77:a9:c9:11:9f:0f:b4:a2:0c:99:fa:c2:cd:b5:b5:
b9:89:ea:c2:b9:29:8e:e6:79:a2:d1:57:8a:df:af:9e:93:99:
2b:fe:6a:d4:06:ba:98:d6:e4:e8:ab:fd:ad:57:5e:ab:30:cf:
fe:84:60:29:9d:7f:ac:25:91:a4:29:9a:78:c2:4c:09:b7:4c:
0b:6d:e5:e4:8a:8c:f0:5b:c1:f8:d2:08:cf:0c:85:a6:ea:5a:
15:68:8b:68:b9:b2:eb:ee:53:36:94:c5:01:40:8b:5c:dc:20:
68:8a:9d:5a:80:6c:6a:35:de:37:8e:56:58:a4:91:3d:63:c4:
13:a2:30:40:c7:88:96:65:e8:f2:2a:74:89:67:0e:66:9a:25:
da:0e:ea:79:a5:3a:5b:fb:d3:b9:65:8a:a0:9d:fa:be:b1:ec:
5d:b3:e9:51:6b:96:c5:01:a9:42:f2:dc:06:72:fe:9b:30:29:
78:77:6f:cb:fe:f0:ff:cb:88:21:c4:9b:f8:01:f4:4a:fb:cb:
87:2f:c4:75:59:c0:72:45:30:ae:3b:8f:86:6b:b6:44:2d:83:
2c:5b:87:cc:10:1d:35:e4:dd:d6:c7:8e:84:d4:03:1e:d2:05:
c1:de:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:53:52 2025 by rpki-client