Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jd45fej-3saau110ZI53HAizQZg.cer
File: jd45fej-3saau110ZI53HAizQZg.cer (raw, json)
Hash identifier: kL0KFwC78F44RrxABw7xDgMYEfcYhMJihNKPSZaqwhA=
Subject key identifier: 8D:DE:39:7D:E8:FE:DE:C6:9A:BB:5D:74:64:8E:77:1C:08:B3:41:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ABF897755A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/222d1d-b3cf-456e-a96d-54c7bbef5390/1/jd45fej-3saau110ZI53HAizQZg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/222d1d-b3cf-456e-a96d-54c7bbef5390/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Jan 2022 15:27:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.199.153.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738610083162 (0xabf897755a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 15:27:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dde397de8fedec69abb5d74648e771c08b34198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:35:32:50:53:60:64:ee:e4:20:ee:ab:21:
d2:e6:3c:fc:19:bb:9a:8a:ff:92:21:a2:4e:b0:2f:
b1:71:e5:10:eb:bc:96:e9:e9:71:5a:b9:3f:f2:c2:
13:07:f4:63:03:fe:74:e1:b5:5f:90:83:5f:24:35:
3c:e1:a8:4e:77:dd:de:2c:06:1d:3c:dd:0e:23:cc:
05:f3:23:eb:63:fd:c5:17:06:3c:e5:d2:cc:77:80:
9c:41:a4:dd:3b:aa:d1:b3:6d:12:29:00:23:01:3a:
ce:74:b9:bc:94:3a:d6:15:87:71:1c:1a:f7:2e:24:
18:f4:41:cc:01:85:54:77:d1:1b:2c:89:30:f4:10:
ae:b1:3c:80:2f:3a:84:f1:51:7e:5a:d8:95:e1:0e:
18:ae:82:25:dc:1c:1a:35:4f:e7:64:26:0e:2e:b2:
3d:3b:17:60:cd:09:d7:c3:e6:6d:9a:5c:10:02:17:
11:3d:7f:c4:85:7e:32:87:ed:46:2f:b4:1a:f3:76:
ff:39:8e:99:cd:e1:6a:00:39:f6:3d:bb:63:e4:6f:
01:92:f3:5c:b2:af:49:fc:4a:f9:70:7d:33:84:69:
07:15:d8:b6:ab:f0:b3:76:ad:44:c0:49:2f:c4:51:
dc:42:53:37:04:f5:22:6f:cb:f9:4b:42:d9:25:d1:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DE:39:7D:E8:FE:DE:C6:9A:BB:5D:74:64:8E:77:1C:08:B3:41:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/222d1d-b3cf-456e-a96d-54c7bbef5390/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/222d1d-b3cf-456e-a96d-54c7bbef5390/1/jd45fej-3saau110ZI53HAizQZg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:df:84:45:aa:ff:30:d7:37:39:c2:17:18:89:22:23:95:87:
e7:94:ad:f6:ca:a1:67:51:58:64:ad:00:39:fd:74:cb:96:f0:
aa:d2:1b:de:34:c8:fa:0b:91:a7:d1:06:51:05:bf:c7:c3:ae:
74:04:57:de:a0:45:2e:57:36:31:47:ca:b0:69:e2:bf:b7:23:
77:7f:50:d0:5c:92:a1:3a:6e:dc:0d:ac:bc:10:1c:62:95:a2:
81:96:07:14:f3:df:13:df:76:d0:db:ec:89:cc:7a:99:c9:20:
8d:fd:01:d6:db:fe:aa:c9:f1:16:16:12:03:84:77:29:43:62:
13:96:7c:26:d0:6c:27:ff:a9:a5:af:d8:41:d7:45:b1:c5:5d:
2a:e7:5b:c8:63:e9:80:a8:95:d7:6e:03:d2:f7:b5:e0:e5:87:
2c:12:32:4e:c9:8f:2d:f5:f6:b9:17:2a:c0:b1:1a:9e:fb:72:
e8:4f:d9:02:12:27:c2:43:21:e2:e7:0a:98:bd:8e:6f:21:19:
51:21:7a:95:8c:b0:03:49:44:c0:a4:39:9b:69:a6:8a:ef:86:
40:c4:b8:11:53:da:72:fa:b4:5f:85:d1:93:0d:85:ec:b7:cf:
fb:b3:0b:dc:f4:bd:55:2b:d8:bc:5a:bb:9b:0e:e0:96:d1:cb:
e1:78:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:49:41 2025 by rpki-client