Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nBETmuVT1txzB4h_Rn5CB4gARes.cer
File: nBETmuVT1txzB4h_Rn5CB4gARes.cer (raw, json)
Hash identifier: UAybslEX6Lqtlv2iQ5DrdVmLPi08paPTLha2sF/V1gk=
Subject key identifier: 9C:11:13:9A:E5:53:D6:DC:73:07:88:7F:46:7E:42:07:88:00:45:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B80E4B177
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/d58727-d970-44d9-abdc-93b3ad12d2f3/1/nBETmuVT1txzB4h_Rn5CB4gARes.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/d58727-d970-44d9-abdc-93b3ad12d2f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:54:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 89.29.128.0/19
IP: 89.29.232.0/21
IP: 89.29.254.0/24
IP: 176.57.104.0/21
IP: 185.40.37.0 -- 185.40.39.255
IP: 185.64.243.0/24
IP: 2a00:4b80::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667882402167 (0x9b80e4b177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c11139ae553d6dc7307887f467e4207880045eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:25:d3:8e:ab:a8:32:b9:27:07:d9:b6:d0:
7c:69:33:50:9d:80:ed:3c:3f:4b:30:89:ca:84:1e:
c8:8b:89:9a:9e:6c:4c:f8:28:29:f1:c5:b5:4b:c0:
bb:58:32:41:2c:b4:17:8b:ed:0f:a7:55:1c:2c:01:
89:9e:c8:bb:bc:56:07:b7:a8:46:5c:b7:41:9e:b9:
ef:48:8a:35:de:ba:df:de:ce:33:9b:af:13:df:a5:
e1:92:d7:f4:2d:39:df:88:0d:39:9a:df:c0:f9:32:
46:0b:80:4d:26:7f:69:a0:e1:1d:45:e6:4d:02:37:
5e:c3:71:3b:cf:f4:40:e1:31:5d:c6:f0:ec:de:b8:
7a:4f:0b:ac:13:38:ff:b8:1b:27:4b:44:a7:e3:5c:
e7:f2:b0:6a:68:97:9b:3e:60:35:d1:22:70:06:41:
01:00:46:3c:f6:26:2a:a0:3c:0b:ed:34:f9:25:9c:
37:5b:4f:26:46:1c:34:ca:cb:ad:80:39:fd:b4:98:
70:fd:c7:02:62:69:31:b3:40:0d:ae:53:ee:d2:86:
0a:6f:bd:ec:c8:7f:76:a6:1f:49:a6:2b:9b:b8:46:
e6:ac:86:ef:bd:ac:4e:59:fd:4a:48:d9:70:d9:4b:
b6:da:b3:76:11:20:56:52:36:83:b9:e5:1d:f8:dd:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:13:9A:E5:53:D6:DC:73:07:88:7F:46:7E:42:07:88:00:45:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d58727-d970-44d9-abdc-93b3ad12d2f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d58727-d970-44d9-abdc-93b3ad12d2f3/1/nBETmuVT1txzB4h_Rn5CB4gARes.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.128.0/19
89.29.232.0/21
89.29.254.0/24
176.57.104.0/21
185.40.37.0-185.40.39.255
185.64.243.0/24
IPv6:
2a00:4b80::/32
Signature Algorithm: sha256WithRSAEncryption
5a:29:1c:65:f0:30:0f:9a:54:8c:0e:94:16:ba:fd:e3:cf:e7:
c2:4e:b5:3f:a4:51:93:00:9a:49:89:9f:7b:84:04:20:2a:a3:
7a:db:ab:0c:81:0c:44:95:69:aa:9d:3e:2a:10:67:6d:81:e9:
1b:41:63:13:8b:54:1b:77:ab:03:ff:53:77:66:53:3a:92:dc:
77:0d:d9:37:c3:cf:7e:73:5b:84:2a:a6:34:9b:fc:1d:f4:f9:
d3:c1:6e:97:f9:ca:6a:86:a6:57:73:92:ef:ac:1f:5c:07:32:
f4:42:3b:71:0b:58:0e:a0:ee:11:35:0f:18:64:2b:24:2e:7e:
74:1f:98:c6:03:43:09:cb:ec:d5:68:17:06:a2:8c:9a:9b:c2:
46:fb:22:bd:21:10:e8:a3:2d:92:f6:9f:a7:a5:ca:93:cf:49:
51:22:12:cd:67:00:d9:d8:ac:10:e6:e7:56:0f:b4:f6:fb:4e:
4f:97:65:2e:28:e0:69:43:d2:99:a2:57:22:fe:19:57:34:90:
d4:fe:a3:e6:da:6f:a9:54:a0:2a:7f:78:7e:d8:5e:b7:be:bd:
aa:ac:1b:81:ec:48:d2:47:61:99:60:7d:07:81:77:3d:38:be:
a4:ed:ac:85:b7:70:ae:f5:16:fd:10:bb:70:67:49:93:83:6e:
7c:6b:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:53 2025 by rpki-client