Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/koroBjF8TIIk7UL5vvBM7p-IwOA.cer
File: koroBjF8TIIk7UL5vvBM7p-IwOA.cer (raw, json)
Hash identifier: RUHv32ydcSBvop76D1VtD5lnokxnZAFkdZzmVtzZB4w=
Subject key identifier: 92:8A:E8:06:31:7C:4C:82:24:ED:42:F9:BE:F0:4C:EE:9F:88:C0:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185BF5DDB8ABD7531BD138CEB5003A23AFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/koroBjF8TIIk7UL5vvBM7p-IwOA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Jan 2023 10:54:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 43088
IP: 46.31.16.0/21
IP: 193.200.225.0/24
IP: 2a02:2530::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:5d:db:8a:bd:75:31:bd:13:8c:eb:50:03:a2:3a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 10:54:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=928ae806317c4c8224ed42f9bef04cee9f88c0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5f:31:41:38:04:2e:9f:7f:27:c5:59:7f:7a:
cd:b3:bb:2f:16:56:83:c8:a0:9e:57:97:6f:b6:ee:
fe:70:b5:dc:64:bb:fd:fa:4c:08:c8:9a:52:08:ae:
6b:ee:2d:58:aa:8a:a9:03:16:35:3d:fa:51:c8:8c:
86:cf:d6:36:7f:3f:48:a9:0e:6e:2a:7e:9d:33:2c:
5e:75:88:0d:4d:9a:44:fc:f3:c5:dc:b1:94:9b:16:
c5:34:9f:c0:29:17:c0:b1:db:15:2f:88:89:fb:2b:
f8:ed:9c:78:c2:2a:b5:d3:08:e4:95:99:87:ed:35:
d5:9b:c3:38:84:f3:f1:57:79:91:98:31:be:70:ac:
70:f5:f9:be:e7:0e:40:b8:df:03:39:a1:d8:eb:38:
a1:78:67:4d:96:5d:5b:96:0c:6c:3a:ba:36:4a:f4:
63:98:a5:11:ac:1a:65:a8:b1:06:3e:fb:da:2d:aa:
9d:17:0e:87:55:46:09:a9:34:a1:d9:0c:49:a5:9d:
b4:11:8d:59:d8:fd:6c:1e:64:bf:f0:ca:d9:e3:90:
86:98:da:3d:2e:10:6e:c9:12:5c:0c:1b:34:b7:60:
4f:aa:37:fa:7f:e8:f2:14:cf:f1:0f:cf:80:48:c5:
9e:52:40:84:de:d8:7d:89:95:5e:e1:c8:b1:d2:8f:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8A:E8:06:31:7C:4C:82:24:ED:42:F9:BE:F0:4C:EE:9F:88:C0:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/koroBjF8TIIk7UL5vvBM7p-IwOA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.16.0/21
193.200.225.0/24
IPv6:
2a02:2530::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43088
Signature Algorithm: sha256WithRSAEncryption
49:1d:17:b2:b4:3f:bd:be:ea:45:bf:6a:76:d4:c8:67:57:82:
9b:2e:1e:0f:1b:d1:46:2f:2c:39:5c:7f:3c:10:3b:67:99:24:
65:fd:9e:9d:44:16:11:94:55:2a:d5:60:23:e5:8d:39:d8:69:
73:ed:7c:ad:47:53:36:89:a3:88:76:9c:bf:9b:ce:57:86:e7:
45:08:c3:c4:53:a5:a2:b2:2d:cc:a7:0d:11:62:31:19:ec:62:
8a:e6:af:ba:f8:fb:57:a5:0b:4b:e3:91:2e:5d:79:df:79:54:
27:d4:f0:7d:32:20:f0:f0:49:c3:3a:d4:d8:f3:d5:90:fa:cc:
39:4b:e2:0e:25:e2:4e:29:7c:f0:dd:89:c8:a6:1d:17:67:40:
aa:64:1e:17:58:c4:38:60:27:28:c9:71:de:d2:bc:e2:0a:87:
4f:77:db:f7:7a:d3:0f:63:36:7e:3d:a4:b7:1f:ab:6b:c4:96:
54:f2:fb:3b:4d:9c:4a:e0:7c:f5:77:30:d9:81:6c:a6:4f:42:
2a:58:8a:18:58:9d:c4:de:6a:cd:df:67:a1:f4:0e:01:10:b6:
cf:ff:c8:81:f8:16:f9:45:d5:87:ea:22:25:2a:92:5e:88:c8:
a9:ec:d8:b7:75:97:72:3d:b2:79:d8:a9:d7:3a:f3:5a:0a:0b:
04:9a:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:25:01 2025 by rpki-client