Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kjX6qImIoOVJ0vmepc0A2KPOhiw.cer
File: kjX6qImIoOVJ0vmepc0A2KPOhiw.cer (raw, json)
Hash identifier: NB+ecx0RIEw4lKSqUfLnij9j+tkPcgnh68Cv74DckgA=
Subject key identifier: 92:35:FA:A8:89:88:A0:E5:49:D2:F9:9E:A5:CD:00:D8:A3:CE:86:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0F5EC5B9C9C4AA33E2F25012969D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:14 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2001:67c:120c::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:f5:ec:5b:9c:9c:4a:a3:3e:2f:25:01:29:69:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9235faa88988a0e549d2f99ea5cd00d8a3ce862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6c:d8:01:28:f8:53:5a:bd:50:b8:9e:ef:f5:
81:10:6f:c3:44:3c:b4:80:3f:4d:b4:59:6f:64:e1:
7e:59:8e:d5:32:92:77:35:2f:9c:03:ae:5c:5d:ab:
8d:be:94:64:b4:cb:ef:88:cc:6e:37:a1:03:a4:48:
23:32:07:82:01:1f:0c:88:7b:df:f4:bf:a1:3e:f8:
71:c3:61:51:32:3e:53:63:cd:ed:26:e2:db:e7:e0:
bf:fb:17:6a:c1:bd:01:35:0a:67:86:a6:16:21:b0:
f0:4c:73:95:6b:16:24:b3:69:e2:e4:c1:8c:f0:60:
75:11:21:b9:96:12:95:9a:14:15:63:65:48:ba:71:
30:b5:db:87:61:5c:c4:d3:d4:c8:12:d3:50:75:a0:
70:90:1f:2f:44:88:38:37:c3:1d:0f:ec:1b:0d:5b:
4f:38:e7:ac:30:da:d9:52:84:a9:80:48:d7:ce:87:
e0:33:85:ea:d2:31:9d:f1:d4:6c:2f:16:e6:95:01:
4f:d6:eb:2d:8f:00:85:3f:59:f7:5b:1f:7f:16:c4:
a9:b2:d9:a7:30:4d:95:3d:fe:4a:e3:cd:ca:fc:d7:
f1:ec:49:92:be:a6:2d:8c:5a:92:e1:b5:e7:ab:c3:
ee:15:2c:ac:67:98:27:85:7a:88:3d:83:3a:62:6a:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:35:FA:A8:89:88:A0:E5:49:D2:F9:9E:A5:CD:00:D8:A3:CE:86:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:120c::/48
Signature Algorithm: sha256WithRSAEncryption
14:3e:d3:8b:55:d1:b4:e2:55:78:a0:49:31:a6:47:4b:44:72:
43:60:01:40:da:13:a7:77:11:f8:a0:3b:3c:2b:e4:19:7c:d4:
ec:0f:65:8f:28:88:37:85:26:6e:d4:c3:38:76:cc:31:0e:46:
21:89:66:cb:54:45:70:dd:b6:a0:c1:ed:34:4d:b8:ac:f5:7e:
d0:5c:a9:16:91:56:73:1c:86:17:fa:ad:70:c6:76:1f:f2:7f:
37:30:44:60:78:9a:de:4a:4c:27:e3:2e:0f:b0:9d:3e:34:cb:
bb:82:0b:61:5b:d5:d0:06:d8:c2:e5:e9:39:5b:d1:e6:c1:ba:
98:d0:a0:12:17:78:ce:b4:d9:27:4a:50:17:cc:4d:20:72:34:
c7:c8:78:19:4f:2e:22:71:13:1f:2d:88:cc:3d:0a:85:61:8a:
b8:d0:56:b4:7b:aa:48:7c:b4:2c:70:93:2b:af:2a:7e:63:b4:
94:f1:87:b5:f9:de:c5:87:d5:bb:d5:e4:d7:c5:f0:ce:8d:31:
71:1a:4e:80:19:db:70:8b:4d:a0:b7:cf:02:f1:15:f8:4f:ad:
4b:54:fc:2d:34:75:c2:81:46:87:f2:8c:39:a4:8e:de:71:81:
53:f4:b3:b3:f5:d1:b2:94:ac:3c:70:6f:53:ad:70:21:b9:f6:
17:bc:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:15 2025 by rpki-client