Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kMcp79S1_-Q23kE5QiY_p01r0eg.cer
File: kMcp79S1_-Q23kE5QiY_p01r0eg.cer (raw, json)
Hash identifier: mb/gcrnj3MhnrWjXiUdZH/rsU+m4nb25PydNkK06f7M=
Subject key identifier: 90:C7:29:EF:D4:B5:FF:E4:36:DE:41:39:42:26:3F:A7:4D:6B:D1:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A148CE5876
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/27bc2d-152f-41e5-92b7-02bd37e7b9a0/1/kMcp79S1_-Q23kE5QiY_p01r0eg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/27bc2d-152f-41e5-92b7-02bd37e7b9a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:54:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 31238
AS: 49215
IP: 83.220.0.0/19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692711217270 (0xa148ce5876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90c729efd4b5ffe436de413942263fa74d6bd1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:62:0d:91:19:13:31:b5:6c:29:ad:5b:1d:
d8:7f:3e:3b:eb:12:00:0e:8d:e4:cb:7a:9d:ea:71:
42:0a:99:55:fb:1a:77:d7:42:a6:c0:99:b9:7c:04:
72:da:57:0a:b3:b0:21:42:7a:fd:89:f0:1f:f1:11:
2b:c9:c9:0e:fb:84:b7:b6:91:c5:a5:09:5a:29:fb:
ec:ef:4b:67:50:4a:ad:90:25:2d:89:c4:53:a5:01:
0e:1f:aa:2e:61:24:63:90:f3:96:d6:75:57:1f:63:
c5:cb:f4:06:58:22:96:4e:a0:0b:4c:f2:63:cc:29:
1a:c0:d8:20:f4:40:64:cd:5f:8b:53:c2:65:20:e2:
a5:24:5d:5e:43:d7:c2:3e:e0:db:0c:2a:5f:d1:e4:
56:2c:80:7b:19:37:14:fb:3a:ab:7d:fc:a3:a8:bc:
af:b8:24:4a:46:4c:dc:fd:ec:3c:02:f9:83:77:f3:
38:ca:5c:03:7e:09:13:ee:6c:73:01:bd:45:ea:83:
49:c0:4d:ec:28:f4:ea:89:54:b1:73:8e:11:90:60:
76:ef:94:f2:c0:79:ae:13:ef:7a:da:6a:e5:0f:33:
21:8c:1c:13:f5:5e:5d:62:1a:8f:51:e9:3c:9d:46:
37:f9:1a:24:8d:44:63:0a:ac:8a:00:21:d3:ff:89:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C7:29:EF:D4:B5:FF:E4:36:DE:41:39:42:26:3F:A7:4D:6B:D1:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/27bc2d-152f-41e5-92b7-02bd37e7b9a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/27bc2d-152f-41e5-92b7-02bd37e7b9a0/1/kMcp79S1_-Q23kE5QiY_p01r0eg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.0.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31238
49215
Signature Algorithm: sha256WithRSAEncryption
af:29:e3:4f:b1:c4:ff:fe:93:fe:4b:30:f0:ec:aa:7b:8c:e0:
e0:25:cb:01:af:99:f0:87:d5:68:f9:76:c4:39:93:ef:63:84:
db:01:8e:b2:9f:8c:3d:32:6c:8d:d7:a2:fd:3b:35:df:4b:b3:
b5:ed:8f:d0:5d:77:64:46:24:b1:3d:fa:ba:81:eb:57:12:98:
23:5d:94:ae:d8:88:11:9d:cd:72:9c:9b:78:d6:7c:88:99:dc:
36:02:af:e3:26:d6:7b:dc:68:22:7f:42:c6:20:bc:9f:22:2e:
45:7c:77:7a:1c:0d:9a:77:72:34:ff:c6:c6:9b:18:59:8b:7a:
05:7e:df:31:49:45:4f:eb:88:49:65:64:34:dd:ed:7f:85:c5:
be:b0:54:6d:10:c3:37:6f:e9:41:44:99:8f:d9:ff:13:65:cd:
c5:d8:34:8a:1c:fe:bd:90:ae:f3:0e:07:84:f3:03:67:ed:78:
88:dd:79:59:ed:f0:87:d1:c0:51:79:de:aa:cf:ee:6f:72:e4:
1d:68:f6:1e:80:98:06:c1:98:96:8e:b4:8a:9d:07:73:f1:dd:
c1:d9:51:fc:39:a9:d0:2f:8c:53:e0:89:91:4b:ca:eb:6e:9f:
ce:8f:dc:a0:d3:77:6a:11:3e:00:b8:50:9d:f1:f1:ba:e3:c1:
cc:0d:98:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:51:39 2025 by rpki-client