Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
File: pBJSjGnbX8XLrtdMsi5EorzkRa0.cer (raw, json)
Hash identifier: VsKsFCvZdFwyHPXVVorEsbdWwT3WHO6O4FSHy8hsJSE=
Subject key identifier: A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9AD4689927
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:59:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34962
IP: 45.88.200.0/22
IP: 2a0c:2c40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664988588327 (0x9ad4689927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:59:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:ee:30:3f:0b:7d:48:e4:a9:0c:a3:94:0b:
73:2f:e3:e2:ad:3d:ca:5d:53:2b:cf:7c:d9:e4:95:
a6:46:da:6d:8f:df:8f:99:9a:dd:73:b0:40:1c:61:
47:8c:43:c7:f7:74:fc:76:f5:3c:50:8b:0c:3e:5d:
58:30:34:ad:c3:67:69:bf:6f:96:21:70:6e:51:51:
cc:c8:ed:b1:92:20:03:aa:45:64:2d:7c:c3:23:e4:
ae:91:72:35:6b:1d:f9:02:6b:14:f9:a5:5f:17:93:
6e:c0:45:77:5b:7c:17:6e:d8:c7:c6:af:ba:45:39:
3b:b3:e5:74:f7:03:22:6d:eb:ec:0a:34:c5:14:01:
eb:7b:1f:03:db:93:e3:67:1c:72:96:31:75:f8:a6:
e0:f3:ae:85:df:df:d7:b3:d8:7c:27:a2:1b:6d:b5:
72:9a:04:59:ed:28:d6:18:ac:0a:56:b2:ae:19:1e:
c4:77:03:b5:e7:df:cd:ae:e8:94:03:7f:4e:29:02:
c6:6e:46:6a:41:6f:a4:8e:81:86:11:f2:12:6f:98:
55:0e:4c:32:3c:60:27:cb:93:8b:ed:20:e1:f4:17:
a6:42:cc:03:4b:7b:88:9d:51:8e:9f:c6:7d:d8:ed:
7d:51:9e:be:3d:66:4b:f6:94:63:db:af:07:c6:16:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0/22
IPv6:
2a0c:2c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34962
Signature Algorithm: sha256WithRSAEncryption
0d:31:45:c9:36:c4:73:9e:4e:11:ed:0e:d9:3c:15:fc:bf:15:
34:94:60:73:af:f4:ec:99:20:9f:d1:20:55:6a:15:60:46:b4:
0d:4f:91:69:fd:d3:3e:1d:28:1a:26:1f:d5:cb:85:d4:d1:45:
48:7e:6e:b3:df:79:66:32:a8:77:27:c2:c1:17:69:f0:f5:0d:
02:c8:af:ef:09:11:4e:08:f6:27:a3:62:13:18:1c:dd:c0:d1:
26:68:44:4f:0d:c3:68:c9:00:25:c9:b9:55:c1:69:01:cc:86:
6a:e1:d5:95:d4:c7:4e:0a:14:39:38:a5:e7:56:72:57:64:c7:
33:0c:ef:22:a2:ae:46:0e:6f:61:f8:01:5b:11:b4:9d:41:b7:
3e:81:f0:bf:fb:1e:7a:1c:ee:2d:af:a2:73:a7:a5:ba:48:ea:
8d:bc:e6:f4:fa:10:40:ca:8b:59:ea:9e:03:62:11:1b:dc:d1:
b6:66:c9:34:94:b7:d2:1b:6c:df:3b:7b:43:54:82:f6:75:ab:
f0:f2:4c:c7:15:9a:37:ec:69:d6:f6:a7:a3:f7:d0:2f:59:a2:
bd:da:0d:5d:03:df:12:95:5e:b6:12:cf:7f:35:f7:bd:ee:dc:
0b:03:f3:99:25:ec:31:94:62:f4:0e:ec:cb:21:24:69:74:d1:
bd:f5:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:04 2025 by rpki-client