Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mjA86lzshXTl9enG2Svgces6Nmk.cer
File: mjA86lzshXTl9enG2Svgces6Nmk.cer (raw, json)
Hash identifier: HhzScuebmIMBNkDntfeQg14bHp+wFWzgkd0kcigXXN4=
Subject key identifier: 9A:30:3C:EA:5C:EC:85:74:E5:F5:E9:C6:D9:2B:E0:71:EB:3A:36:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6E4D243FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/d8d224-78c6-4cc7-9187-257b8de7e607/1/mjA86lzshXTl9enG2Svgces6Nmk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/d8d224-78c6-4cc7-9187-257b8de7e607/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:54:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.149.80.0/22
IP: 2a0f:5a00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716803556346 (0xa6e4d243fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a303cea5cec8574e5f5e9c6d92be071eb3a3669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:cc:2d:39:ef:8f:39:24:34:83:eb:7e:9f:
7b:6b:b9:95:01:3c:fc:d2:c7:55:94:46:2b:8b:38:
64:dc:cd:20:49:cb:53:7b:7d:78:e5:06:d1:7f:d1:
c8:76:98:b0:10:e9:42:22:0d:86:07:72:d5:d9:2b:
21:2b:6a:42:02:5e:aa:d1:49:9b:a6:9d:12:39:a9:
e8:76:d0:a5:5f:80:b3:28:63:9e:66:3e:56:a6:d3:
74:c6:cf:88:90:c8:0a:1d:c4:d0:a2:ce:32:79:c0:
5c:70:f5:6e:37:aa:bb:34:46:2b:ac:11:fb:cb:09:
c8:ea:23:28:f4:53:25:bb:96:77:b4:cb:a4:d5:a5:
9d:b9:90:d4:ee:9b:73:69:ac:e5:bd:c1:d9:0a:ac:
3c:f9:ab:da:60:56:ea:1d:97:7c:da:59:67:f1:eb:
be:3e:ab:0c:0e:d5:f2:fb:50:43:cd:6e:85:8f:da:
40:28:63:26:c4:f6:a3:1e:96:f4:f9:eb:e6:1d:39:
03:ca:24:c1:80:75:52:ac:72:ca:f5:33:d5:0b:ee:
f5:d5:93:00:68:b1:32:9c:5b:fe:f1:d4:04:30:ce:
7b:7d:b6:38:54:5f:32:68:a9:78:5f:1f:e2:6b:22:
ef:1e:ab:e7:5b:65:fa:60:62:67:3a:da:0e:34:5b:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:30:3C:EA:5C:EC:85:74:E5:F5:E9:C6:D9:2B:E0:71:EB:3A:36:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d8d224-78c6-4cc7-9187-257b8de7e607/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d8d224-78c6-4cc7-9187-257b8de7e607/1/mjA86lzshXTl9enG2Svgces6Nmk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.80.0/22
IPv6:
2a0f:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
2b:30:3d:33:d6:1f:84:a4:d6:3b:a1:fb:70:18:1a:73:94:81:
ab:41:4a:ee:a0:3e:07:66:9d:cd:1d:63:0e:01:04:a2:21:d7:
22:0c:5a:e6:6b:58:c7:a7:33:36:34:81:31:5c:e8:65:20:02:
6d:c6:d9:4d:5a:56:81:9e:a7:b8:5b:51:1f:08:15:a4:15:e8:
2c:44:7d:e5:20:c2:00:d3:66:df:e5:8a:9d:26:18:9c:5a:25:
1d:55:5a:34:57:d6:a8:72:41:64:53:18:92:4a:db:28:e5:c8:
9f:16:83:3f:78:5b:06:c0:4f:95:fa:9f:5a:4f:97:9a:c4:b3:
bf:c8:c3:1d:f3:71:64:5a:b5:02:14:57:a5:a4:b8:d4:1b:88:
c0:bb:03:49:a5:3b:5c:09:1b:e7:b9:5b:0c:d9:75:1c:4a:9a:
c0:d3:1e:96:2a:b4:9d:c3:ee:26:15:d9:86:17:90:93:04:fa:
4e:e2:9f:d1:c8:a1:fb:1f:df:6a:ba:9a:03:c3:4a:2d:0a:cb:
92:4b:35:db:47:37:11:89:90:04:5d:50:c3:e8:f6:e9:60:f4:
4c:3f:a7:5b:95:4d:ce:fe:f5:be:0d:15:57:cd:7c:b2:43:a9:
6d:f3:6d:1e:0d:3f:c0:f3:ca:0b:9c:73:29:0d:6c:26:30:6c:
6a:86:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:03:05 2025 by rpki-client