Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n7xkr5rujDrnLgr3lkO-yOwu-Cc.cer
File: n7xkr5rujDrnLgr3lkO-yOwu-Cc.cer (raw, json)
Hash identifier: SsVGlFpZTOBpwOqCtvBAWiyHpFuHLneJe2GzDzap9QE=
Subject key identifier: 9F:BC:64:AF:9A:EE:8C:3A:E7:2E:0A:F7:96:43:BE:C8:EC:2E:F8:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0679062A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/59d3be-8b42-4b8d-a7ce-ab7ea6de2534/1/n7xkr5rujDrnLgr3lkO-yOwu-Cc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/59d3be-8b42-4b8d-a7ce-ab7ea6de2534/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:57:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.234.99.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688932283047 (0xa0679062a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fbc64af9aee8c3ae72e0af79643bec8ec2ef827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:6c:fb:a1:3a:5b:6f:db:f3:a5:3b:ed:16:
2d:e5:b8:e1:fb:b7:3d:59:d1:f6:70:f0:42:47:b8:
17:55:9c:14:09:1d:36:68:42:0c:8a:64:42:dd:9a:
bf:08:8a:24:49:b2:fa:eb:4e:0e:f3:04:96:6d:03:
4c:8c:3e:c9:f2:55:77:eb:b9:a2:4d:73:c4:68:be:
38:63:59:b5:1a:d4:03:c2:a3:52:63:19:26:cc:9e:
b9:d7:fd:dc:a0:51:b0:a9:0f:db:ea:64:1e:b1:66:
3c:b1:58:94:c3:56:8f:fc:da:f7:71:61:fd:a9:df:
89:e1:e5:74:87:d7:3c:b8:d9:f0:72:d3:58:b9:ce:
ee:3a:47:99:f8:d3:53:50:51:69:37:9f:ff:0b:d8:
69:c3:78:d4:f9:8e:6e:69:e9:51:24:7d:4b:6e:ec:
2e:da:50:21:80:1b:15:38:7a:74:82:62:9d:1d:46:
f3:26:15:2b:12:99:56:4b:27:54:70:7d:57:77:69:
99:e2:21:d3:8a:4d:6e:97:52:a3:a5:4b:d3:74:9e:
c0:51:ae:dc:69:1d:7f:bf:cb:c4:07:61:6c:57:1e:
e1:2f:38:ea:22:89:f3:d0:44:3a:79:41:8e:ed:6c:
4a:60:4c:60:3e:1e:ce:a3:c0:81:04:71:7d:a6:fe:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BC:64:AF:9A:EE:8C:3A:E7:2E:0A:F7:96:43:BE:C8:EC:2E:F8:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/59d3be-8b42-4b8d-a7ce-ab7ea6de2534/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/59d3be-8b42-4b8d-a7ce-ab7ea6de2534/1/n7xkr5rujDrnLgr3lkO-yOwu-Cc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.99.0/24
Signature Algorithm: sha256WithRSAEncryption
58:83:6c:70:bd:71:e8:1f:5a:cb:67:ea:c6:59:b6:d1:43:7c:
48:1b:9f:c8:5f:8d:66:fa:a1:ba:35:a6:75:15:8b:ed:3a:74:
8f:1a:95:10:bd:46:1d:bf:59:8e:9d:46:55:e5:b2:53:e4:de:
44:0d:2e:f6:43:e0:a1:e4:1b:06:de:30:76:e2:1a:68:67:b5:
20:1a:52:16:67:a7:59:c0:9c:9c:f0:39:46:b4:b3:0f:73:b5:
d4:06:3c:ba:66:17:e6:15:d4:ea:a4:c9:3c:33:45:9b:fc:15:
f0:2e:d2:27:55:c4:1f:b0:84:6b:1b:e7:e0:58:dc:fb:f5:09:
b7:ce:63:98:41:21:1d:3e:2c:9f:33:a9:33:65:fc:bc:4b:63:
e6:b6:fd:23:6b:ae:79:34:84:71:4e:43:af:f0:0b:05:22:bd:
8a:a6:da:78:2c:35:d4:ec:8d:8a:3f:a5:cf:99:2d:fe:ae:b6:
97:27:4d:d6:90:b2:6c:f5:28:c8:1f:22:15:bf:4d:37:8e:2c:
95:92:24:08:d5:fe:be:4c:fd:37:01:5a:53:0d:a2:e3:10:07:
d7:31:cb:44:fd:23:ad:32:0a:1d:42:84:f3:cc:bf:d0:16:c4:
42:fe:ec:29:14:53:dc:4c:12:be:d9:80:3e:f8:a3:c3:51:37:
2a:cf:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:11:28 2025 by rpki-client