Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer
File: n3OtsqkJxoH__WzbGsNyVzn26Gg.cer (raw, json)
Hash identifier: ka9O9JGdPBMEgN/vBGNgCcQd+83ybd8TUlCv+AcxmGs=
Subject key identifier: 9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B77FCE93B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:54:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.128.96.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667732994363 (0x9b77fce93b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:bf:2f:54:55:67:90:58:60:21:07:d3:f7:
50:b6:6f:06:ad:06:56:94:1d:05:b6:61:4a:f7:43:
35:0a:15:57:ab:61:75:a6:5f:fb:74:50:5d:3e:9c:
b3:ea:21:78:ed:d0:ef:57:a6:55:1c:53:20:97:40:
12:cf:c1:3f:80:a0:9e:80:c3:9d:1e:69:4a:b7:ad:
af:40:b3:f1:48:47:8b:01:c9:7d:4c:a1:17:6c:0d:
5b:31:be:99:37:19:cf:4b:bc:d5:38:09:61:6a:57:
7e:62:70:d1:dc:ee:20:16:24:ee:36:cf:bd:49:0d:
2a:d5:f6:e4:90:49:2f:23:8d:85:8e:8f:e5:dc:eb:
3c:ab:7a:82:83:07:5b:b4:33:92:d1:09:08:8e:09:
4d:05:29:48:f0:9b:bd:d4:81:db:39:6b:ef:39:15:
fb:4a:ab:95:a5:48:c6:e8:b8:4c:a8:0b:5d:d4:79:
61:c1:b6:71:63:3b:d7:7c:50:7e:59:03:da:d9:ee:
72:cd:b1:20:b3:9c:d2:12:05:c7:af:8d:6f:c0:67:
d4:70:d0:ea:ce:d2:98:43:57:ec:68:39:a4:ba:85:
a0:0d:e9:0a:a6:fe:e7:d8:2b:39:3e:6e:c5:a9:70:
e8:62:8d:b2:42:e1:03:50:2f:f6:25:47:c1:80:de:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.96.0/22
Signature Algorithm: sha256WithRSAEncryption
40:aa:79:0a:da:84:ba:7c:d3:61:d1:58:e2:4b:64:c1:ed:13:
77:83:f9:eb:ea:e2:5c:57:3f:25:9a:19:5b:f7:a9:3b:f9:37:
17:ec:db:4a:d7:b3:e8:5c:f1:71:ae:3b:48:0a:4f:fc:6c:58:
fb:9d:53:ca:96:13:91:ed:42:59:67:ff:63:37:67:0c:96:12:
36:7a:38:ae:cb:7a:24:25:11:b8:7a:14:17:fe:5e:2c:06:2d:
98:97:0e:b6:53:67:42:91:b1:24:66:db:84:13:6c:c7:10:3e:
51:14:92:75:a0:b9:29:ba:34:d4:ea:ea:99:4d:26:cb:f1:4c:
26:25:7e:ca:0c:32:68:27:0f:79:33:00:3c:25:b5:d1:93:ac:
6c:5e:8c:58:64:59:df:35:9f:83:52:6b:c1:f8:80:cd:d4:3f:
50:3d:e8:af:fb:ac:a9:f7:2d:28:37:01:0e:e7:4b:4c:4d:90:
55:81:fa:c6:ee:c8:dd:bd:f2:f9:5f:f7:02:82:29:16:a8:09:
2b:96:cb:f0:27:70:ab:6e:fc:e7:dd:a9:f2:83:9b:d0:b5:83:
6f:4b:d4:58:a5:0d:91:26:61:66:b3:11:ac:00:80:77:27:01:
b1:1f:f5:a7:09:03:8c:0f:ad:7e:bd:e1:a2:0e:9b:7a:44:e3:
4a:50:86:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:40 2025 by rpki-client