Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.cer
File: n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.cer (raw, json)
Hash identifier: 3bdIBjXpOyMpuZXEW7c8pGS7EJkQYiu+agh8+PLwvHM=
Subject key identifier: 9F:50:27:0F:D3:10:E1:14:22:E5:86:F2:63:17:15:5D:5C:F6:64:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B8B2855C5444CBE56EB794E52DCC6D662
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Nov 2023 13:52:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.245.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:28:55:c5:44:4c:be:56:eb:79:4e:52:dc:c6:d6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 1 13:52:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f50270fd310e11422e586f26317155d5cf66458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:7e:ba:0a:ca:01:3a:0c:0b:6d:e7:44:57:
f9:db:0c:78:a8:a8:a4:61:fc:7f:d1:5e:e3:1d:37:
c5:f0:94:5e:c7:72:e5:d7:54:0f:fe:84:cf:58:ac:
75:7d:23:5e:d6:84:cc:c2:89:54:e5:16:21:4f:00:
63:92:f8:e2:94:23:0b:61:28:77:63:e5:3b:11:d1:
ec:de:2a:41:87:68:c3:5a:b4:ba:4e:8b:11:a8:f6:
d9:cf:f9:fb:51:44:08:e8:f7:1a:47:f4:5e:28:7b:
af:57:d5:6b:7e:23:24:2b:ed:e4:49:3b:99:b1:fa:
22:01:d2:a2:ea:47:72:3e:95:67:c2:61:12:36:dc:
c2:2e:21:12:01:00:b3:1a:27:81:1a:40:ae:21:1a:
b4:b1:4f:81:0e:fc:d7:8b:d6:26:7f:b9:6e:69:e8:
2b:fe:e4:84:53:2b:09:cc:78:71:ab:77:c3:20:a6:
34:6e:db:da:a3:37:83:de:6d:9d:d8:cc:de:ab:db:
34:15:32:bc:59:70:47:e8:65:25:04:a0:e7:dc:72:
83:a8:8d:7b:a8:be:57:2e:cc:c1:ff:b5:41:86:96:
20:1d:a2:c0:16:e7:c7:a2:8f:8f:e7:70:b7:26:a3:
99:9b:02:d4:e2:6c:d5:4f:9e:96:33:fd:2a:e1:30:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:50:27:0F:D3:10:E1:14:22:E5:86:F2:63:17:15:5D:5C:F6:64:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fc:3f:e2:98:73:cd:94:58:b1:7b:aa:0c:39:4b:31:b3:37:
3a:d9:fc:d8:a6:41:e0:73:40:dc:56:94:56:f8:24:e7:4a:94:
82:29:4e:87:fd:a9:74:44:e6:01:fc:10:35:20:66:09:03:27:
19:15:33:d1:99:43:1c:49:2d:82:3a:1d:f0:3b:15:b4:a0:4e:
3c:a5:ce:ae:db:37:3c:b9:94:dc:61:e7:ba:28:63:91:7a:f1:
c1:e2:7f:81:8b:b2:ee:ad:e8:41:c0:d9:aa:8f:cf:67:e9:45:
b0:13:15:8b:55:26:02:d4:ff:ff:9d:7f:af:2a:b0:7d:85:2a:
2b:88:3a:ce:a8:08:74:0b:ee:4c:9c:23:38:b9:42:af:62:c6:
23:e5:c9:12:cb:fa:1f:90:f8:bb:a3:b3:5e:78:9f:35:8c:e3:
f3:ed:15:7c:0d:0a:a7:11:9d:2c:d5:8f:0b:6f:2f:e9:08:57:
8f:45:68:87:ca:d5:fa:f2:c4:19:96:49:ba:9a:68:cb:17:4e:
eb:f8:51:de:97:b6:fe:6b:97:1b:68:54:6f:6d:6b:f9:e6:44:
f7:f6:09:15:a0:90:49:53:15:36:10:69:7d:06:f4:dd:af:69:
58:21:ac:87:19:34:ba:48:f6:7d:74:dc:5e:bc:3f:54:8d:46:
6e:22:8e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 11:01:10 2025 by rpki-client