Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mI41beIxT_9dR2TofAPMBszpuFc.cer
File: mI41beIxT_9dR2TofAPMBszpuFc.cer (raw, json)
Hash identifier: 1hdFDBL7vPv1DeUEiV0eCEyNqumYXFJUUD0y7odJUnw=
Subject key identifier: 98:8E:35:6D:E2:31:4F:FF:5D:47:64:E8:7C:03:CC:06:CC:E9:B8:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3613F31E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/3e3ebf-a067-44aa-85f8-f6d12ed3f46f/1/mI41beIxT_9dR2TofAPMBszpuFc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/3e3ebf-a067-44aa-85f8-f6d12ed3f46f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:06:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.82.124.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701711200745 (0xa3613f31e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:06:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=988e356de2314fff5d4764e87c03cc06cce9b857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:ba:3b:09:72:17:e1:f6:4d:85:c2:3a:23:
08:aa:83:da:09:5f:90:8b:6e:a6:f6:ed:e6:f9:84:
8a:2f:29:7b:23:ca:db:2f:a5:48:48:f5:6e:de:7f:
a7:cb:98:f8:2d:47:b9:61:8f:f3:18:9f:2a:b3:93:
da:76:e7:26:fc:1c:91:7d:58:9e:07:a1:ba:fb:d1:
ab:0b:2a:28:17:c2:fd:84:1a:ed:cc:31:1a:4c:2b:
65:e2:5f:3c:79:44:8f:99:53:ea:7e:7c:6d:ce:d7:
0d:04:84:de:42:b5:80:d5:c8:ce:9e:29:f6:22:46:
47:e7:f8:73:ba:98:3f:90:24:96:c6:46:90:7a:49:
13:39:a4:9b:45:88:64:87:f9:49:ea:3e:4b:94:00:
ce:23:67:dd:41:63:5d:41:0c:a4:51:41:7c:ce:43:
ba:82:eb:ee:5d:6c:c8:83:38:54:f9:fa:27:73:9b:
2c:30:91:c6:b0:19:2c:dd:86:59:05:7e:e4:25:5a:
f2:cb:3e:36:a7:db:c4:8b:45:af:25:a9:dc:02:93:
e6:51:14:8d:ca:c4:75:75:af:75:ba:be:5f:4a:4a:
8a:69:fa:50:91:ae:c4:6b:4d:fa:6a:4e:33:ab:5c:
2c:19:39:07:39:98:0f:c9:0c:18:32:14:03:fa:a6:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8E:35:6D:E2:31:4F:FF:5D:47:64:E8:7C:03:CC:06:CC:E9:B8:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3e3ebf-a067-44aa-85f8-f6d12ed3f46f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3e3ebf-a067-44aa-85f8-f6d12ed3f46f/1/mI41beIxT_9dR2TofAPMBszpuFc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.124.0/22
Signature Algorithm: sha256WithRSAEncryption
01:7d:38:43:4b:f1:02:f2:b3:d6:84:5b:80:c4:e2:1c:7b:05:
4a:15:1a:6f:bf:6a:d9:7d:f1:45:0e:cf:38:c9:0a:ab:58:b0:
85:40:85:a9:40:5b:81:4b:a6:6a:ad:59:e6:d9:65:b5:5c:75:
9c:b7:00:ac:c5:da:43:00:60:eb:71:da:60:f0:ca:2d:2b:4d:
27:dd:18:c6:65:c7:a1:a6:24:27:e3:86:cc:74:cc:fc:7b:df:
8e:d0:9d:84:ec:18:39:4f:4b:a2:9e:f1:f4:08:4f:4f:4e:25:
d6:59:ab:53:c3:17:aa:07:80:73:db:8c:35:7f:dd:70:29:ff:
db:77:1e:83:20:36:c9:14:6f:ab:d9:4e:08:4f:8d:4a:82:0c:
1b:6d:07:1b:90:5e:c3:7c:f5:22:d4:aa:30:92:b0:79:fd:23:
4c:b3:c6:08:30:9b:3b:db:10:53:1f:bd:22:ed:d2:80:df:9d:
de:d0:45:bf:c4:4d:2d:43:e4:1a:32:c1:87:07:43:3a:15:b0:
5a:8c:91:7a:ed:c4:10:33:55:02:73:1b:43:b9:5f:00:29:c1:
a6:f2:d2:3f:a8:a6:ee:1b:cb:ef:de:d9:15:bc:5d:df:b4:69:
ea:41:86:db:19:0e:bf:c4:a3:e6:cc:05:5e:0e:25:b1:95:a8:
62:34:60:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:53 2025 by rpki-client