Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k0p-joRfhWj1xRjDpum79yjkyy0.cer
File: k0p-joRfhWj1xRjDpum79yjkyy0.cer (raw, json)
Hash identifier: mWkJNvA1kMitC+wa/YRNhgj7aK3k0RSBJqUDzOQzTis=
Subject key identifier: 93:4A:7E:8E:84:5F:85:68:F5:C5:18:C3:A6:E9:BB:F7:28:E4:CB:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E3B4DEBDCE764774AD62E256C8F8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/f01e32-7ad0-40fa-b2a3-fbd0639d023b/1/k0p-joRfhWj1xRjDpum79yjkyy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/f01e32-7ad0-40fa-b2a3-fbd0639d023b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:35:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 16289
IP: 193.41.234.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:3b:4d:eb:dc:e7:64:77:4a:d6:2e:25:6c:8f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=934a7e8e845f8568f5c518c3a6e9bbf728e4cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:91:5d:ad:6d:85:fd:8b:ef:6e:bc:4c:07:6f:
f1:04:63:06:d1:06:46:1f:79:e4:23:33:a4:33:29:
ca:82:d4:0a:4a:5e:45:e6:2a:c8:0f:d7:0d:af:64:
96:95:6e:04:87:c7:71:9f:eb:27:d8:c9:9d:24:c8:
fe:d2:16:87:3b:e8:71:1e:20:c6:b4:d7:ea:8f:9f:
fa:12:7c:93:93:fd:04:48:e9:cd:78:ab:06:4e:66:
2a:07:9f:49:c8:ef:68:84:fa:3e:ad:61:ee:4c:f3:
32:53:34:58:bb:55:89:3f:ed:ba:85:75:bb:c2:98:
ce:ee:6c:93:44:9d:3f:cb:1c:ed:13:db:6c:c9:1a:
79:dd:9f:1a:b9:6b:e6:9f:14:06:3f:46:84:a6:84:
5a:87:c7:62:cd:df:b9:5d:67:81:5b:03:9e:04:c2:
bf:cd:cb:8e:ea:9a:8b:40:17:89:0e:b5:23:c6:38:
c2:ca:49:13:7f:6a:44:0f:0c:0d:99:b3:b4:27:25:
f5:ff:5c:9e:1f:6f:d0:eb:af:51:e3:4d:0e:5f:3b:
12:c0:e4:f3:45:f2:5b:0a:30:93:d6:85:a4:a2:e1:
6f:8e:a5:58:dc:f1:42:55:ea:b2:ce:32:f8:38:e7:
22:66:fd:b6:db:6d:c7:f8:d9:e7:1f:b0:07:0b:7a:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:7E:8E:84:5F:85:68:F5:C5:18:C3:A6:E9:BB:F7:28:E4:CB:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f01e32-7ad0-40fa-b2a3-fbd0639d023b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f01e32-7ad0-40fa-b2a3-fbd0639d023b/1/k0p-joRfhWj1xRjDpum79yjkyy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.234.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16289
Signature Algorithm: sha256WithRSAEncryption
5f:09:e5:d6:b5:f4:70:f3:de:85:0c:1e:7f:26:3d:6c:21:bc:
42:58:c6:6b:33:60:35:53:26:c0:dd:35:ae:26:70:92:af:7b:
c6:ea:c7:51:ae:12:30:2d:e8:6d:18:4a:fa:44:73:9b:6e:c0:
06:e3:c6:a5:62:47:69:1a:1c:a2:d0:73:91:92:13:13:45:f7:
b9:50:90:c7:70:72:4d:d1:22:05:89:f3:d6:e7:62:49:51:8e:
d2:68:1c:d6:72:48:a5:05:ae:8b:3a:95:1b:2a:48:dc:ad:0c:
45:97:14:68:8d:b8:e4:d2:24:31:6a:8c:53:b6:d3:3f:30:42:
f5:60:45:39:9a:2f:51:03:0b:4b:fd:4f:40:1a:95:b3:64:cf:
ce:03:54:e1:75:5f:39:8c:2e:6e:e6:6e:48:50:17:b6:8b:98:
06:ed:ca:73:a6:c6:64:0f:15:03:f4:99:d8:4d:23:41:91:60:
42:6c:7e:a2:30:91:d8:d7:44:5d:38:01:dc:f3:e8:f1:c0:13:
bd:97:18:72:9e:1e:03:64:4d:f7:44:13:6f:eb:03:bf:fc:c4:
4f:17:44:74:e1:b4:b0:af:78:db:08:e7:19:1c:53:08:e6:af:
89:77:e0:d7:6f:d9:ea:c2:64:ee:60:c9:7f:7e:cf:a0:ab:5f:
9e:1a:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:46:04 2025 by rpki-client