Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/juc6DUPuGdAsXkf3KPffbziy2jU.cer
File: juc6DUPuGdAsXkf3KPffbziy2jU.cer (raw, json)
Hash identifier: wgqXktXuPM5c5JxPqFV+pH19sgHSbfRZf2YV8Oh5eq0=
Subject key identifier: 8E:E7:3A:0D:43:EE:19:D0:2C:5E:47:F7:28:F7:DF:6F:38:B2:DA:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9DABCB72EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/juc6DUPuGdAsXkf3KPffbziy2jU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:53:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 31.132.56.0/22
IP: 2a0d:a1c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677192102635 (0x9dabcb72eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ee73a0d43ee19d02c5e47f728f7df6f38b2da35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:d3:1c:95:e5:23:79:c1:dc:a9:4b:25:ae:
f1:c3:ab:e8:ed:bd:ee:41:af:03:65:f3:35:a1:17:
19:3b:83:c2:6a:a5:28:b3:05:fc:a9:67:cb:63:54:
f6:77:4c:74:b1:26:a7:70:11:5c:d4:a4:da:f0:0e:
0a:6c:df:6b:74:db:c1:6a:09:91:a8:29:48:31:73:
e1:34:e1:49:5d:e8:b6:9c:a8:e1:cc:a0:07:fe:9f:
c7:81:99:57:d7:f5:22:a1:8c:65:6b:e3:22:af:1a:
e5:7d:b3:a4:ae:25:56:2b:e4:f2:25:81:b8:06:8d:
65:be:e8:3a:f3:8d:f0:36:a1:88:1b:fd:8d:2b:23:
f6:8b:fe:09:d6:c6:14:4d:f6:10:b8:d8:6c:a9:ca:
06:be:ea:5d:b0:cc:c2:a7:b7:f7:a3:51:31:8c:cf:
50:a4:87:3e:50:fe:9f:b4:a0:d0:38:6e:02:c5:d6:
12:d5:1e:00:c4:ae:af:57:60:cb:56:5e:f0:91:11:
c0:22:39:99:a5:e2:c4:19:01:50:11:b4:7e:6e:1b:
19:ad:2d:aa:dd:1a:24:7c:47:6a:8f:d0:bb:b8:36:
f8:b0:f9:e7:65:61:57:ed:c0:7b:a4:69:a7:ba:c6:
a7:3b:d9:3b:a5:34:83:09:c1:c2:11:dd:4d:ff:bd:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E7:3A:0D:43:EE:19:D0:2C:5E:47:F7:28:F7:DF:6F:38:B2:DA:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/juc6DUPuGdAsXkf3KPffbziy2jU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.56.0/22
IPv6:
2a0d:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:91:4e:ee:ff:d7:d0:7c:3a:2c:78:f0:70:2c:79:2e:13:a4:
31:d2:c7:ad:5e:35:ff:f8:5a:b3:0c:d9:9d:dd:52:3e:78:ba:
61:36:a7:9c:9c:ad:33:4d:5c:82:9a:a7:c0:66:b8:3f:28:83:
cb:72:18:d5:0c:5c:28:fb:71:6d:32:af:81:fa:bb:c9:2a:43:
14:6d:21:50:26:94:35:ba:41:4d:a1:76:7a:4f:a4:2b:d6:62:
52:62:b8:8d:9f:21:79:e4:06:a6:92:b8:b4:dd:09:07:c9:18:
b3:24:24:f7:aa:1d:39:5c:3b:aa:24:52:5b:1d:12:51:36:0b:
04:1f:5c:30:f3:80:c2:76:47:19:6c:7e:08:7e:15:45:a4:5a:
73:26:33:27:81:66:e8:b3:6f:64:7b:2f:76:3d:b3:46:ea:39:
4f:ea:5f:b0:0a:a3:1a:27:2d:ff:b9:b8:01:15:51:1f:fd:d5:
bf:01:89:f3:e6:ab:b2:c4:9b:aa:db:6b:69:9f:23:1f:57:0f:
8c:a9:d5:51:20:6f:b8:6f:34:e1:08:7e:2c:35:37:dc:3a:43:
2a:85:fc:8b:67:77:67:14:cd:a3:d9:73:93:17:ec:e9:90:3f:
6a:4b:22:a1:74:6d:27:44:7e:03:90:70:a6:d1:e0:34:0f:26:
d0:6d:f7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:19 2025 by rpki-client