Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n0hG9_JYspVseGXFuZVqgPa4nZ0.cer
File: n0hG9_JYspVseGXFuZVqgPa4nZ0.cer (raw, json)
Hash identifier: dGEQt1V0PPYM/iuwr2jEn2fEeIbjHPVnjZ0cdTU9VJE=
Subject key identifier: 9F:48:46:F7:F2:58:B2:95:6C:78:65:C5:B9:95:6A:80:F6:B8:9D:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6C911A06B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/06c090-b0e2-4544-9338-4c3126a59c2f/1/n0hG9_JYspVseGXFuZVqgPa4nZ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/06c090-b0e2-4544-9338-4c3126a59c2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:06:12 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 43652
AS: 58296
IP: 185.83.248.0/22
IP: 195.200.252.0/23
IP: 2a05:a040::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716337946731 (0xa6c911a06b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:06:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f4846f7f258b2956c7865c5b9956a80f6b89d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:bf:ba:d4:e9:a1:d6:c3:cc:e5:bc:23:b9:
a6:a8:cc:c5:48:00:fa:6e:f6:d6:ec:d5:14:89:b4:
53:c2:20:13:82:2b:6e:4f:e1:61:3f:41:19:73:41:
d2:7b:d6:6c:11:5d:e7:20:b9:d7:60:c5:82:68:0d:
9a:ec:33:6d:a0:f9:3f:d0:83:cf:43:a6:85:c8:33:
1e:8e:2c:91:f9:0f:c3:ec:01:7d:41:ed:6e:49:36:
67:11:f4:d4:8c:78:fb:15:91:8e:2a:1a:26:d4:3a:
da:c7:fe:15:2f:6c:34:99:51:65:87:0a:12:72:2c:
bc:fd:0c:be:01:c4:98:71:96:35:d9:6c:51:31:c6:
59:76:24:e1:93:c4:f8:b8:47:02:43:f9:90:7a:91:
1e:e6:c0:1f:19:61:b3:6f:24:e2:4e:a2:82:7c:39:
3b:a1:fe:a8:67:ec:ab:b7:e0:16:15:ff:8b:60:96:
a4:97:b4:20:0d:af:a9:cd:b9:b1:64:95:0d:65:27:
19:4e:e2:d2:09:86:bd:0f:79:78:20:40:54:1f:5c:
e6:79:d8:26:75:2d:f4:ce:79:a2:a5:94:bf:2e:db:
0c:95:62:02:d5:93:8d:cd:8e:cf:6a:5a:62:2a:a0:
b5:52:61:34:1d:d8:b1:64:1f:ab:0e:d2:9b:ef:47:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:46:F7:F2:58:B2:95:6C:78:65:C5:B9:95:6A:80:F6:B8:9D:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/06c090-b0e2-4544-9338-4c3126a59c2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/06c090-b0e2-4544-9338-4c3126a59c2f/1/n0hG9_JYspVseGXFuZVqgPa4nZ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.248.0/22
195.200.252.0/23
IPv6:
2a05:a040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43652
58296
Signature Algorithm: sha256WithRSAEncryption
8e:e2:0a:41:4b:41:6a:f8:7c:ab:39:24:8b:c5:80:88:e2:9e:
03:5a:e0:d1:49:f6:20:64:cc:c7:88:e3:e7:b6:90:41:6d:6c:
5e:ac:28:d7:7f:3d:36:22:ed:13:79:e5:40:c3:03:0f:8d:57:
0b:af:65:49:ff:1f:6f:6b:c4:a9:7e:17:e6:af:ae:da:86:07:
66:83:9b:51:1f:e0:6a:7e:47:e8:84:77:bb:0b:4f:1d:3c:79:
a8:2b:04:22:46:b0:7b:c0:43:93:11:70:67:96:43:53:7b:18:
9d:2d:9c:b2:61:e4:e5:a4:68:6d:6d:df:3a:d5:72:6a:48:2a:
7e:95:2b:3c:b8:14:72:ee:aa:5d:fe:2b:c2:1b:7b:e0:0f:3b:
28:4f:7b:4d:1c:28:82:60:a7:34:bf:67:27:82:7c:0e:e0:a2:
4f:42:4a:d0:aa:72:67:f2:dc:09:86:87:81:22:b8:c9:7a:8c:
9f:14:0b:84:f3:09:5d:de:a1:97:8a:63:e1:31:17:0d:40:17:
d7:9c:0f:b6:1a:68:f5:01:ac:2d:4c:7c:8a:7b:c5:4a:e0:cf:
1b:fc:4f:a3:c2:3b:95:38:d2:b6:ea:2b:bd:94:4f:1f:da:f9:
8b:67:2f:60:54:40:b4:ba:48:73:b9:26:f6:d6:5e:01:b0:59:
35:16:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:34 2025 by rpki-client