Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ngqC7Hjo0AUwjlO7bR3E21jnAU4.cer
File: ngqC7Hjo0AUwjlO7bR3E21jnAU4.cer (raw, json)
Hash identifier: WyUf63QSGVw82av9PRDclP9GEiJMiFeEWS++IxVLdLM=
Subject key identifier: 9E:0A:82:EC:78:E8:D0:05:30:8E:53:BB:6D:1D:C4:DB:58:E7:01:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD7731B48D530DD01F9C61696B726D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/ngqC7Hjo0AUwjlO7bR3E21jnAU4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:33:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.201.9.0/24
IP: 2a11:2140::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:77:31:b4:8d:53:0d:d0:1f:9c:61:69:6b:72:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:33:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e0a82ec78e8d005308e53bb6d1dc4db58e7014e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cd:22:6b:fc:21:9c:cc:ec:be:58:d0:8d:f0:
65:41:f1:06:1b:dd:02:e1:96:b7:8a:18:5c:7c:03:
94:e8:31:a8:24:90:b2:ad:f6:47:11:c3:7e:81:87:
62:04:e7:05:30:ab:b8:29:1f:9f:aa:ba:47:93:22:
f4:f0:f1:50:02:37:36:d9:15:93:d2:f9:62:af:0f:
f5:4e:e6:a5:8a:5b:5d:14:fe:c0:8f:62:5c:b4:ef:
47:73:ae:c3:82:6b:87:a8:f9:88:f2:26:0c:4d:4e:
a3:bd:f5:fd:63:63:77:d7:6d:93:29:4d:9a:5f:94:
8e:e7:a7:46:95:33:7d:a7:c9:72:c8:2d:ac:e3:db:
cc:f1:e1:d3:8e:47:15:3a:1b:c7:2f:33:0a:71:92:
73:c7:c7:7c:77:2d:42:c5:96:09:c8:25:24:e8:16:
4c:b7:1e:17:1c:e4:25:32:38:3b:52:37:fd:78:e9:
28:a5:db:49:6d:16:99:fb:f7:b1:07:c3:77:5a:02:
6d:45:4b:da:26:d7:80:10:d9:4b:0a:42:06:06:31:
23:bb:0d:03:ea:8e:0b:a2:37:98:a7:b1:80:c1:11:
4b:2b:9a:69:3e:2f:60:0f:a9:b1:8d:59:8a:5c:42:
4b:56:a6:2f:7c:86:72:36:d2:5f:5b:98:52:f3:8c:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:82:EC:78:E8:D0:05:30:8E:53:BB:6D:1D:C4:DB:58:E7:01:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/ngqC7Hjo0AUwjlO7bR3E21jnAU4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.9.0/24
IPv6:
2a11:2140::/29
Signature Algorithm: sha256WithRSAEncryption
44:c8:36:4a:34:02:af:40:69:b1:2e:4a:7e:99:21:51:90:8a:
d1:f2:d0:d7:62:53:ee:07:79:3c:06:cd:9b:14:f9:ea:ed:88:
dd:4e:9a:89:f1:1f:05:56:c7:96:84:b9:6c:b7:40:67:53:47:
6d:86:5c:4a:b9:db:c8:b7:28:50:19:d7:78:8e:d9:cf:1f:0f:
e1:eb:b6:5d:a7:8b:99:f6:02:12:bc:a2:7c:86:ce:d4:7b:d8:
d1:90:cb:19:59:0b:fc:2e:1b:ab:57:7c:55:14:53:ac:c8:ca:
39:b9:e6:1f:b3:da:24:36:9a:be:69:25:6a:7c:e5:9f:11:e0:
ca:25:dd:fc:6a:46:c6:47:f6:25:ac:eb:38:7b:03:26:b5:32:
b6:0d:97:c9:1c:3a:0c:c8:d3:b1:de:1a:e0:da:4b:ba:c7:50:
fd:96:c6:56:6b:51:70:44:8a:83:13:2f:79:dd:93:94:4d:5c:
7f:7a:50:e4:ea:bd:2b:27:b5:fa:e0:fb:f6:43:15:38:e6:4c:
a6:49:c0:43:3d:4f:c8:9e:1b:a8:ba:92:b7:18:fb:e2:7e:3e:
5e:b1:e4:d1:62:82:c9:9c:e6:38:43:a9:a0:b9:4c:b5:fb:85:
3e:5c:01:19:ef:8c:72:86:d2:27:9f:cb:1d:fc:14:92:6c:90:
42:6f:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:14:29 2025 by rpki-client