Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nguprZmxS_SHdGAt0v0v6hNgfDQ.cer
File: nguprZmxS_SHdGAt0v0v6hNgfDQ.cer (raw, json)
Hash identifier: hhu+tyeZ7rzDG7cPsISJcgxhurc07tqUmNVZEPt+i0M=
Subject key identifier: 9E:0B:A9:AD:99:B1:4B:F4:87:74:60:2D:D2:FD:2F:EA:13:60:7C:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B637325C445519F47884BEABCA420D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/nguprZmxS_SHdGAt0v0v6hNgfDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 94.154.2.0/24
IP: 2a07:2680::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:73:25:c4:45:51:9f:47:88:4b:ea:bc:a4:20:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e0ba9ad99b14bf48774602dd2fd2fea13607c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:56:aa:21:7d:e8:66:41:bc:5a:34:a1:4b:
ca:17:da:fb:ef:18:f6:26:60:2b:90:f0:7c:09:8e:
ef:10:76:2f:33:1e:01:be:7b:8a:ae:5a:24:d2:f8:
82:70:40:57:40:2e:4e:c3:77:a8:b4:79:af:2e:8f:
49:76:22:52:5d:0b:5b:7b:82:7a:55:ca:01:ab:fc:
86:99:f4:24:21:a8:14:46:b6:32:bc:ef:2f:d8:47:
1d:24:03:98:58:58:d6:01:6c:7c:4f:a5:3b:91:67:
04:f3:b6:50:3a:2b:e6:38:17:8e:12:db:56:0e:3e:
0c:a4:9e:06:f6:a8:7c:47:6c:d9:90:52:db:13:94:
81:8c:c3:27:ba:88:2c:1f:15:24:29:a4:2e:72:98:
11:8d:d8:55:19:9f:23:86:3e:8c:b3:01:44:9e:57:
d1:72:bb:5c:80:a9:2e:f0:a6:99:f8:1c:98:ca:c2:
e4:c6:7d:02:3d:40:2e:54:f3:59:c9:a4:91:b1:67:
2c:e4:f5:86:0f:9d:eb:91:b0:9e:42:d2:f5:cc:3f:
53:7f:1a:ab:ea:36:94:3f:38:71:e5:4c:6f:0a:93:
7c:7f:21:7f:00:9a:2b:d9:32:37:68:ad:a4:f9:ee:
3d:5b:1b:80:d7:25:74:98:ef:3c:da:bd:27:78:52:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0B:A9:AD:99:B1:4B:F4:87:74:60:2D:D2:FD:2F:EA:13:60:7C:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/nguprZmxS_SHdGAt0v0v6hNgfDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.2.0/24
IPv6:
2a07:2680::/29
Signature Algorithm: sha256WithRSAEncryption
7d:c2:1a:ff:b9:4f:db:71:f4:2c:d8:51:99:9a:2d:bf:8a:f0:
4c:97:58:d9:87:19:26:3d:35:e6:13:bd:b7:a5:67:3f:a4:a9:
40:17:ed:42:d3:3d:e4:eb:83:4c:51:91:8a:8a:e5:65:8e:02:
15:b0:56:2b:06:19:b1:2c:3d:0b:d9:51:7c:d1:23:97:f4:a1:
88:5c:45:55:66:c6:d3:9c:52:bc:5c:03:ea:38:11:91:67:f4:
99:67:23:d8:cf:3c:ca:90:fd:ba:d3:d0:13:8c:29:3a:65:53:
9c:57:b0:45:92:07:ca:14:5b:8b:de:12:ad:c2:52:94:c6:c0:
9e:f4:63:68:5c:b7:ae:95:fc:2e:39:b5:ad:1d:72:22:24:ad:
2c:aa:d3:98:96:82:69:59:67:ff:b5:0d:eb:6d:4b:a1:b6:cc:
50:df:89:4d:0e:1a:47:75:0a:94:a5:6b:71:51:6a:71:22:8c:
dc:9c:74:c9:d2:3c:b6:10:34:b7:03:1a:61:bd:d5:e5:96:dd:
aa:c1:30:6d:dc:83:3a:9c:e3:27:cc:21:97:0b:de:d5:62:a6:
ee:71:d0:1d:4c:a9:0b:fb:4b:a7:e1:0f:b0:47:ad:aa:4d:00:
ef:97:7a:31:33:21:8f:dd:2a:59:74:ea:ce:bb:8f:27:29:c6:
5a:51:d8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:07:51 2025 by rpki-client