Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jBVxrSEI2OaZnyeA-JV27gl1k-E.cer
File: jBVxrSEI2OaZnyeA-JV27gl1k-E.cer (raw, json)
Hash identifier: ybaa6wiuinuRp3hlijwWhGPe9TgvO38D+YF9kT5nYVQ=
Subject key identifier: 8C:15:71:AD:21:08:D8:E6:99:9F:27:80:F8:95:76:EE:09:75:93:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CD6BB4A1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/158fe1-176a-4f09-8ade-99fd1ab2fbe8/1/jBVxrSEI2OaZnyeA-JV27gl1k-E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/158fe1-176a-4f09-8ade-99fd1ab2fbe8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:55:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.46.100.0/22
IP: 193.187.247.0/24
IP: 193.187.252.0 -- 193.187.254.255
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673617496607 (0x9cd6bb4a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c1571ad2108d8e6999f2780f89576ee097593e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:2e:f2:22:fa:56:bf:3f:86:1e:95:34:5a:
7b:8a:71:7b:43:d5:ef:c5:c9:e9:76:fb:0b:ae:01:
5f:35:78:94:4e:ef:c5:c0:65:a1:c5:67:2b:44:12:
e1:cc:0a:87:f3:b9:1d:02:05:c3:8b:d7:a2:35:d4:
65:c0:d8:a9:ce:4f:fb:10:3d:7c:bf:cc:c3:b1:3a:
8a:30:6e:ca:1d:30:63:3c:d2:73:21:a1:6d:c3:bb:
e1:ff:d8:ef:1f:0f:40:a6:59:16:b4:ee:43:74:63:
b9:20:f0:1b:66:f2:7e:e6:b8:c6:73:4b:dc:30:eb:
9d:f2:fd:e9:24:7b:54:eb:a1:8f:42:25:66:93:a9:
05:d6:a8:e1:dd:7a:d1:51:8a:a6:93:85:4e:20:ea:
59:ef:7b:61:a2:7f:ed:f1:43:9d:f6:fc:7f:67:c1:
92:2d:81:d6:66:e7:c5:b4:d7:2b:6f:dc:2d:d8:7c:
e9:e1:a7:b6:cf:e0:4a:12:d6:d7:31:75:6b:bc:8e:
12:80:5d:8c:48:05:58:d7:4c:aa:e6:bc:45:2b:d3:
e2:f8:2d:0b:66:da:65:ce:1f:bb:88:72:72:4b:37:
1f:9c:61:98:a6:de:26:60:38:e4:12:c9:33:56:34:
67:e3:ba:af:2d:04:81:35:3d:a7:79:87:64:c4:dc:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:15:71:AD:21:08:D8:E6:99:9F:27:80:F8:95:76:EE:09:75:93:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/158fe1-176a-4f09-8ade-99fd1ab2fbe8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/158fe1-176a-4f09-8ade-99fd1ab2fbe8/1/jBVxrSEI2OaZnyeA-JV27gl1k-E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.100.0/22
193.187.247.0/24
193.187.252.0-193.187.254.255
Signature Algorithm: sha256WithRSAEncryption
82:6b:88:35:8d:63:fa:cf:6d:41:bf:45:1d:eb:52:9f:1f:c1:
02:74:91:2d:9a:aa:81:74:f6:64:a9:04:ab:2c:60:8d:a4:46:
9f:83:7f:7e:9b:b7:14:f7:da:68:01:5d:f8:7c:b9:a1:87:ca:
2b:5b:37:30:cf:80:17:2f:be:62:24:cb:54:e6:3c:c0:2d:bc:
77:20:46:ba:d8:21:17:0e:b7:ff:09:97:de:eb:26:6f:73:bb:
f7:8a:75:51:0f:c6:a0:dd:01:27:b5:4b:b0:af:8d:a5:13:b3:
18:8a:24:b5:1a:dc:e4:ef:14:b6:b1:be:62:55:38:79:e0:b0:
fa:c5:d0:22:2c:40:e7:a6:55:6d:cb:ec:df:e7:73:f1:6a:81:
d0:ec:97:ab:61:68:40:51:11:2a:a3:4a:87:de:ad:f4:b6:72:
7c:10:62:01:9d:b3:05:d6:c5:04:97:70:5a:1a:45:70:76:b1:
5e:3a:65:36:52:e6:db:47:57:44:cb:ab:4e:82:9e:79:4c:6b:
9a:93:e7:16:3f:fa:16:c8:70:01:ad:96:b0:ee:4b:f0:76:2e:
08:e1:23:c3:a2:9f:9f:aa:fb:7a:b0:bb:35:dc:be:75:69:35:
23:0d:91:37:fd:1b:87:d9:dd:58:d5:f9:ae:d4:aa:84:f5:d7:
07:f1:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:56 2025 by rpki-client