Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lDbbHOpuWr0LpGx-phtmCmfRQwo.cer
File: lDbbHOpuWr0LpGx-phtmCmfRQwo.cer (raw, json)
Hash identifier: +nCJODzYJCnTSh4tnN3R6oXaR2P+zE27CLd487yh2o8=
Subject key identifier: 94:36:DB:1C:EA:6E:5A:BD:0B:A4:6C:7E:A6:1B:66:0A:67:D1:43:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AE0AE03063
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/lDbbHOpuWr0LpGx-phtmCmfRQwo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Mar 2022 08:09:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 47771
IP: 85.187.64.0/18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747506774115 (0xae0ae03063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 08:09:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9436db1cea6e5abd0ba46c7ea61b660a67d1430a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:e5:ac:19:b1:04:3b:1a:80:0f:ee:7f:a3:
f7:88:dc:c2:3a:0f:ca:7d:75:65:8c:55:c6:51:81:
20:89:bb:b2:df:51:e9:fb:d4:01:45:e7:9c:3f:9f:
cf:61:2e:bf:98:e8:b2:62:61:8c:85:27:10:5b:8d:
d2:a7:6c:8c:ff:99:ab:5f:76:df:ce:d9:09:16:a9:
f3:18:9d:67:b8:00:12:b1:28:f0:ee:40:71:d6:58:
c1:c3:08:d4:4f:3d:ac:30:9f:67:3c:72:ee:8b:7d:
26:04:6c:47:1e:20:58:f8:e7:10:c9:a4:7b:59:89:
b4:27:59:66:38:b0:a3:5e:50:a1:f4:89:bd:8d:6c:
a0:f8:cb:0c:b9:f4:49:01:0b:0d:38:d5:91:04:d2:
bf:12:2b:f6:79:f8:97:18:34:40:2a:73:fb:d2:c8:
f9:01:d7:06:c6:00:94:06:bd:06:92:89:cf:43:2b:
64:22:7e:d9:d5:3e:10:1e:95:19:72:38:ca:09:1c:
35:a4:31:0c:d9:45:72:2b:23:1a:44:89:cb:93:29:
20:ba:06:5b:1a:ed:13:42:7c:a2:5c:98:6c:93:76:
94:65:10:7c:3b:9d:90:94:00:55:36:9d:be:01:2a:
20:b5:f3:82:43:04:7a:30:d8:de:00:b0:ac:fb:00:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:36:DB:1C:EA:6E:5A:BD:0B:A4:6C:7E:A6:1B:66:0A:67:D1:43:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/lDbbHOpuWr0LpGx-phtmCmfRQwo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.64.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47771
Signature Algorithm: sha256WithRSAEncryption
52:91:9e:c1:9b:90:ae:ed:46:95:ef:de:cb:3d:63:db:7d:be:
3b:2b:41:1c:63:92:b6:3d:c0:00:2b:53:29:a5:00:44:56:3f:
b2:b8:d1:91:8e:f8:02:c8:29:cf:66:7c:c6:1b:a2:35:cd:b1:
40:fd:29:7e:51:a2:83:73:5f:8c:b9:e3:ef:79:c1:8a:14:82:
74:97:8f:32:04:74:48:86:83:bb:d4:0a:48:60:a8:fa:37:cc:
71:02:4c:24:62:f8:39:5a:aa:96:49:cc:84:47:37:ed:3c:af:
16:b5:80:b1:51:50:bb:50:6e:fd:8e:66:dd:09:59:43:01:5a:
1e:a6:e1:8f:e7:1a:c4:22:7f:27:26:68:7b:84:6d:ad:dd:db:
03:a0:5a:71:3d:33:4b:9e:19:f4:25:75:3b:cc:6a:28:22:73:
ad:38:8c:71:25:e5:db:50:a5:c6:af:5e:4c:e1:ec:28:19:75:
07:61:fe:3e:f7:a1:14:d3:b3:03:95:ea:c3:68:5d:e3:8d:0c:
f2:ef:d6:34:87:a5:cd:f3:ee:5b:ff:7a:9a:73:04:da:9c:38:
37:31:99:cb:59:1e:ff:59:1a:db:b5:5d:68:71:d1:67:56:5a:
31:bb:99:e9:fd:60:d3:fc:ff:a2:65:04:65:02:93:92:c6:0b:
1d:b2:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:04:42 2025 by rpki-client