Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l8kmmY4m4oP9AiD1n0sGc3v_NmE.cer
File: l8kmmY4m4oP9AiD1n0sGc3v_NmE.cer (raw, json)
Hash identifier: FrccfyAS1M1O1//0A6McVVuf9wUi+5bxGPkSWYR2vwU=
Subject key identifier: 97:C9:26:99:8E:26:E2:83:FD:02:20:F5:9F:4B:06:73:7B:FF:36:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F41F7A3E5AA433AD96A225FB2B1D5E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/l8kmmY4m4oP9AiD1n0sGc3v_NmE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.183.148.0 -- 5.183.150.255
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:f7:a3:e5:aa:43:3a:d9:6a:22:5f:b2:b1:d5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97c926998e26e283fd0220f59f4b06737bff3661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:f3:8e:a1:ac:c4:a2:21:48:de:be:ca:a2:
92:6d:bf:61:a2:c9:8e:04:60:c5:0e:8f:61:25:72:
fb:c8:a3:9b:a5:d6:aa:8e:af:e7:0a:5b:e0:54:6d:
b9:9a:97:1f:52:bd:9e:0e:0f:5b:a6:63:15:b2:c4:
d6:b6:fc:1e:dd:91:76:68:8d:06:65:5f:d5:ff:a5:
5f:28:3f:a3:2e:f2:71:86:91:ef:53:30:73:71:b8:
8a:dc:62:60:66:cd:8e:e4:a6:50:20:90:46:be:53:
00:63:db:b2:50:e1:1f:47:0e:4d:e6:0d:c2:99:c8:
1c:8e:90:70:99:c3:3f:46:69:ed:77:0f:0d:0f:0d:
07:ff:be:b0:1b:f0:ef:e3:69:2e:b2:c1:c6:e3:1d:
80:ea:ef:d3:eb:6c:61:b3:dc:90:01:19:e9:82:03:
f9:e8:19:ab:e8:b7:70:fb:21:f4:c9:e6:0e:32:7b:
15:48:da:90:9a:29:4f:23:3c:fc:85:59:91:b8:62:
04:d2:01:4e:14:1e:5b:13:11:a2:7b:6d:ff:e0:a8:
e3:48:b0:be:7a:a7:4a:ca:3a:25:cf:31:64:46:bb:
55:65:1b:dd:1b:21:4c:da:66:46:63:a8:cb:58:aa:
b9:52:42:b2:6e:f8:08:63:fe:6e:5a:34:fa:b9:c5:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C9:26:99:8E:26:E2:83:FD:02:20:F5:9F:4B:06:73:7B:FF:36:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/l8kmmY4m4oP9AiD1n0sGc3v_NmE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.148.0-5.183.150.255
Signature Algorithm: sha256WithRSAEncryption
68:c3:34:74:46:bd:35:db:9c:e8:7c:76:f8:bb:b3:dc:ed:02:
13:80:ef:dd:ad:5b:4e:45:58:0b:51:23:41:51:01:6e:83:c6:
a7:8b:e8:a6:67:62:cf:13:5c:91:6f:2b:aa:67:11:83:71:74:
a4:26:2f:78:ac:ea:9e:dc:24:12:50:3b:3b:60:84:01:be:ff:
cf:54:13:37:99:3d:5f:de:44:7b:60:da:03:35:ad:d2:ea:dd:
2e:f5:cc:db:b0:b9:a8:f1:97:53:45:63:b4:11:b1:be:97:8a:
4b:f5:e5:35:16:c6:14:5d:02:28:0a:eb:97:b4:57:b8:d9:ed:
dc:02:f9:7d:b7:8b:b2:a1:e3:e1:d8:7e:ba:85:48:d2:d6:42:
c7:59:26:70:c1:a7:79:05:ae:e6:b2:0b:c9:7a:81:24:35:3c:
a9:56:be:3c:1e:d1:25:ab:70:31:aa:8f:b0:65:63:3d:03:1c:
71:b3:c7:9f:b1:79:7e:d5:c1:e4:2f:c3:c7:00:f0:e1:e4:9d:
14:4a:11:cc:68:90:ce:10:79:b7:f6:a8:ff:03:d6:2b:db:7e:
1b:92:aa:11:e6:43:84:54:20:5c:a0:7b:33:6c:cb:d6:48:60:
ac:7b:80:93:89:b4:da:91:da:0e:5d:24:3e:83:52:07:e0:7f:
ab:a0:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:08:57 2025 by rpki-client