Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jxoQlUsV5BpaU9K4d9a3k8mxDCk.cer
File: jxoQlUsV5BpaU9K4d9a3k8mxDCk.cer (raw, json)
Hash identifier: rEpDiD24YelwBJYwsXVG1fedJbzWjYR76hDG2wgnaxU=
Subject key identifier: 8F:1A:10:95:4B:15:E4:1A:5A:53:D2:B8:77:D6:B7:93:C9:B1:0C:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0FE181C8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/f7883c-258b-48c8-9f15-ef51dc36ec31/1/jxoQlUsV5BpaU9K4d9a3k8mxDCk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/f7883c-258b-48c8-9f15-ef51dc36ec31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:03:37 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.182.188.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691457760399 (0xa0fe181c8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:03:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f1a10954b15e41a5a53d2b877d6b793c9b10c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:a4:e7:de:04:93:54:98:6a:8d:7c:62:d2:
44:4d:ca:1f:db:31:0a:f7:65:a3:3a:30:b6:58:fc:
37:7f:3e:62:f3:5e:c6:00:c5:42:ed:cb:8b:4a:2a:
d7:8c:83:66:98:66:2d:79:a0:62:54:97:4d:95:45:
41:68:95:f3:26:55:02:59:ad:a6:81:aa:df:3c:18:
b0:92:8b:8a:2b:e9:ba:fb:4d:ca:13:7d:3c:62:30:
f5:f1:5c:ba:e0:9c:3b:f5:b2:ee:ed:b7:f6:eb:11:
0d:33:7d:68:4c:60:8c:f1:36:93:ec:70:b8:73:85:
d2:89:50:ab:89:dd:ad:bb:75:fd:b5:3e:64:57:0d:
f7:35:18:b2:21:71:75:c0:7f:ea:45:1b:fc:92:69:
82:22:42:7e:7b:23:c0:00:e0:27:a8:fb:bb:6c:30:
46:ac:49:bc:f4:21:a8:ed:6b:d3:10:e3:56:2c:cf:
6a:8d:23:fb:a1:d4:64:a7:8f:41:06:44:22:e7:a1:
73:04:a6:8e:4c:06:39:ef:83:6a:7c:45:22:03:bd:
55:6c:4d:7d:2e:c1:b9:b8:a8:52:68:50:b5:45:fc:
44:1a:8c:ae:7a:20:b6:f7:eb:bf:15:48:ed:34:d4:
5b:c5:48:02:dd:26:00:ce:25:40:7d:58:9f:72:cb:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1A:10:95:4B:15:E4:1A:5A:53:D2:B8:77:D6:B7:93:C9:B1:0C:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7883c-258b-48c8-9f15-ef51dc36ec31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7883c-258b-48c8-9f15-ef51dc36ec31/1/jxoQlUsV5BpaU9K4d9a3k8mxDCk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:ba:81:e5:1f:cd:df:9d:09:96:2a:8d:2a:59:6d:af:84:0a:
32:21:a6:42:53:6b:e2:8f:91:ba:42:0c:90:e1:cd:15:f8:3a:
46:d7:62:9b:a2:77:8f:2c:e2:6a:4a:78:38:2e:7a:e9:a9:85:
12:53:02:e8:b5:a7:87:ed:1a:49:ae:53:68:29:2d:1f:e0:55:
5c:0b:45:e4:35:8c:42:0f:26:19:5e:78:03:23:14:4b:e5:9d:
8b:f8:99:38:b5:54:fa:80:65:a3:ae:ca:69:6d:c0:2d:8e:65:
fd:5e:af:c1:bf:e6:47:72:7d:8e:46:28:b0:93:7e:8f:82:b2:
09:36:a4:3e:e7:13:03:69:b6:76:c4:4d:c2:59:4c:b2:b4:82:
b9:f5:28:b2:03:0a:19:b3:0d:83:9a:82:0c:f0:1a:f3:b5:6b:
d4:1c:81:93:7f:22:27:53:ba:a1:56:b8:1e:ad:48:63:bf:25:
2c:17:41:0f:07:d8:50:96:33:4e:39:cf:d0:5d:50:e2:a6:15:
c9:8e:18:1b:ee:d3:e5:b4:f7:13:03:5a:11:06:51:93:25:02:
d4:59:37:07:5f:92:da:97:4f:63:01:2d:af:5c:7b:63:eb:62:
9b:b0:9b:67:86:5c:15:78:92:26:09:1b:ff:10:d6:02:54:00:
30:72:74:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:02 2025 by rpki-client