Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qb0N4U6lyvQpkMKPCb4WDHJvhkg.cer
File: qb0N4U6lyvQpkMKPCb4WDHJvhkg.cer (raw, json)
Hash identifier: ZTxtDLx+IL0M0XVnh/HoTfzQ6PwZPjdiluUqAY46LeU=
Subject key identifier: A9:BD:0D:E1:4E:A5:CA:F4:29:90:C2:8F:09:BE:16:0C:72:6F:86:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AD06D17D17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/qb0N4U6lyvQpkMKPCb4WDHJvhkg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Feb 2022 13:20:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.71.138.0/24
IP: 2001:67c:930::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743143734551 (0xad06d17d17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 13:20:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9bd0de14ea5caf42990c28f09be160c726f8648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:20:a8:0e:c2:6f:85:88:50:28:36:8f:c2:
51:86:db:75:11:a4:e0:f1:be:fe:d4:39:a1:5c:d7:
a8:23:fa:27:8c:f1:aa:ed:6a:15:4d:ee:81:8c:14:
b7:e0:54:e9:bf:b8:9c:9d:a4:9c:69:fd:8f:bc:ca:
a1:bb:a2:3c:52:00:86:40:f6:6a:ca:0f:54:84:9f:
e2:0b:ab:ec:bd:63:5a:17:94:ef:62:4f:99:fa:16:
d6:93:76:32:89:6f:7b:b3:3e:ba:ad:f3:1d:5e:49:
84:b7:0f:53:7b:9e:bf:2a:06:bb:48:d2:d0:a8:3c:
7c:2a:0a:a2:38:0f:e3:e3:da:b0:98:8a:25:a1:59:
8b:04:c3:f8:01:e0:1c:b5:75:7f:ca:02:16:e5:ff:
91:21:cb:b6:15:4c:a9:9c:47:38:9f:57:22:8a:74:
dd:00:d5:de:a9:44:b2:1b:5e:35:10:86:9c:ae:29:
70:c3:15:ea:0c:1d:80:c9:69:48:28:b1:0d:fb:92:
8c:1a:de:f3:a4:f3:a7:be:fb:21:17:a9:1a:2d:2f:
8e:4a:ed:2f:31:6d:59:11:e7:8e:06:bd:9b:5b:4a:
ac:23:f6:f6:25:a6:6f:6e:7a:3c:11:9c:d1:82:9c:
da:c3:cb:08:c9:de:72:df:20:12:d8:16:a9:81:d6:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BD:0D:E1:4E:A5:CA:F4:29:90:C2:8F:09:BE:16:0C:72:6F:86:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1eabe3-8a75-4b4e-822e-59a163899616/1/qb0N4U6lyvQpkMKPCb4WDHJvhkg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.138.0/24
IPv6:
2001:67c:930::/48
Signature Algorithm: sha256WithRSAEncryption
9b:f7:dc:e8:9b:9e:32:fd:73:bd:0d:e8:b9:51:d0:ae:80:03:
e9:3f:4e:f0:27:89:14:5d:e5:66:e5:76:b0:00:80:7c:4a:39:
59:2c:8f:2c:23:53:a0:8e:6a:4f:3e:ce:c6:65:52:92:30:a5:
07:32:f3:11:99:28:2e:48:5a:d6:42:69:d6:c4:85:67:06:63:
42:f9:af:66:1e:2e:88:59:4d:ea:1f:5a:5b:6f:0e:05:74:9a:
39:86:95:35:73:7d:8f:83:af:10:6a:20:55:46:07:c5:9f:66:
61:c1:c4:2f:a2:c5:13:75:78:ef:14:a3:45:49:d7:94:de:86:
b7:23:f1:16:ef:3b:12:c2:fc:28:6b:a2:2b:8a:a1:f6:f4:63:
96:1a:03:9f:e5:b5:2e:a8:d1:9d:26:26:cc:11:d8:22:2d:d8:
e9:54:d7:67:5a:21:2c:f8:b5:c0:a4:54:1e:04:48:22:b1:ae:
7c:56:0f:92:f4:27:dc:c4:77:c4:f0:9b:a2:0a:a2:43:d0:93:
f1:c3:3d:57:4f:47:0b:69:a6:3a:32:54:2b:4d:1f:ae:d2:ad:
eb:91:af:84:6b:20:50:83:c0:5d:92:32:10:89:3e:83:4d:2b:
97:7c:97:f9:82:1c:81:fb:1c:fd:14:ce:54:45:07:28:23:0d:
07:b4:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:41:39 2025 by rpki-client