Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kabnzn1aAh-sMyuvhUELXj1hzZQ.cer
File: kabnzn1aAh-sMyuvhUELXj1hzZQ.cer (raw, json)
Hash identifier: HHniWvKNZEMBdtyjWKhexfe852Ujmvg7zMqVxRs2ero=
Subject key identifier: 91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0189AC105BE85AE756105B66E4626C238676
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/kabnzn1aAh-sMyuvhUELXj1hzZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Jul 2023 13:08:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.163.203.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:10:5b:e8:5a:e7:56:10:5b:66:e4:62:6c:23:86:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 13:08:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91a6e7ce7d5a021fac332baf85410b5e3d61cd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:77:92:95:1a:52:71:06:f0:f7:c1:54:c7:
05:68:e1:5e:8b:4b:53:ea:83:11:e0:62:6b:da:8f:
76:08:45:d9:3d:95:96:ea:e2:90:3c:77:63:98:c7:
09:0f:23:3d:0a:89:e5:95:df:c2:8a:b5:a6:77:63:
fd:74:1d:11:12:22:36:01:e9:6d:a9:bb:dd:55:d0:
24:06:90:69:f0:3f:15:43:19:62:92:c8:09:43:fa:
8f:42:e9:83:f4:3b:52:bd:43:a2:0d:9b:8d:62:dc:
16:c9:8f:cc:d9:3e:ba:09:cd:03:91:82:4b:fa:05:
24:a5:e0:9b:51:7b:5f:af:2c:f1:10:25:ca:a4:db:
e2:ed:4f:55:aa:50:98:81:44:3f:df:9a:e2:b2:97:
36:53:0a:8d:29:d3:0a:62:bf:5b:1f:08:d8:5a:ad:
e1:bb:6e:7f:39:92:99:52:70:d4:ae:32:68:e6:59:
e8:66:b9:0e:78:22:b8:d3:aa:d5:70:7f:79:eb:b7:
f9:a6:7a:45:03:96:74:d7:4e:ac:5b:52:7d:a6:33:
be:ae:e9:92:6c:22:84:83:9d:a4:76:e2:0b:1f:71:
91:f9:24:2f:24:c3:34:71:cc:5c:cc:a3:96:47:e5:
48:da:2a:65:5a:63:5a:bb:ef:1b:6f:3d:3e:d8:09:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/kabnzn1aAh-sMyuvhUELXj1hzZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.203.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1b:49:52:78:72:13:15:31:f0:e9:a7:c1:1a:ac:c2:4d:cc:
99:b8:2a:80:4d:f6:1a:0e:f2:2d:d3:10:7f:e1:58:45:59:c2:
1f:84:8c:47:c9:4e:c1:7e:4c:f1:1d:56:5f:ed:be:76:30:53:
17:75:5c:42:d6:bc:39:e9:9b:c7:3d:ee:0e:9e:af:cf:98:e4:
c9:70:17:f4:f5:b7:a4:e3:8a:12:76:7e:d4:98:57:36:d3:55:
39:eb:e9:45:ba:a1:09:1e:df:21:3f:fc:67:90:c3:cb:94:19:
1e:e5:cf:58:f3:56:a6:3a:fc:73:2b:2a:3a:bf:7b:be:69:10:
a3:ba:a5:bc:2e:94:d1:c7:ea:d8:b6:02:80:4b:e9:53:b4:78:
6f:e5:ec:bf:bd:2a:d1:86:dd:05:bf:76:f3:34:77:34:23:0d:
c4:48:d4:29:2a:bd:24:8f:f8:c1:c5:f7:a9:0a:93:9c:12:e7:
e7:80:3b:41:55:5e:07:12:76:44:42:05:24:f0:8d:85:b4:69:
ff:40:c1:2c:55:05:2c:6f:1d:3c:af:a6:dd:6c:d8:dd:b0:7e:
de:c7:af:1b:ba:57:e0:a3:3a:b6:81:a4:cc:22:c8:65:c0:aa:
60:5d:70:e4:08:99:a9:de:a5:32:e8:31:07:e9:07:83:9f:e7:
c8:87:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:07 2025 by rpki-client