Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
File: qyfU9itbqY36V9c9bdWJdZbqc-k.cer (raw, json)
Hash identifier: EP0r5/vl8YYl/yCs3lNfov8C4Nl8LbYa2PO/8CDF03Q=
Subject key identifier: AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E63AF2C12DF75D947FC48D5ABF7BB67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/qyfU9itbqY36V9c9bdWJdZbqc-k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:31:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.163.89.0/24
IP: 2a0a:c8c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:63:af:2c:12:df:75:d9:47:fc:48:d5:ab:f7:bb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:31:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:41:a2:d8:ac:0d:02:84:19:e1:b2:12:a9:
85:61:75:55:c4:f7:ab:ab:64:5d:9e:68:a6:97:16:
ba:e8:dd:7b:21:fc:0b:58:15:64:2f:8c:db:09:b2:
b5:8b:af:2f:13:e1:1a:04:10:79:4e:4c:06:1f:77:
6c:65:f0:f4:64:cf:4b:f4:ac:9c:fc:fd:9e:75:84:
c4:ae:7e:d3:f9:99:8c:65:8e:13:e0:b2:2f:8c:13:
10:3f:9b:b9:55:09:2f:65:66:76:b4:3d:c9:c0:b0:
46:a4:0d:43:98:45:29:f4:c9:a5:85:5a:e2:af:b4:
03:3b:60:26:2a:6b:31:a9:e8:41:4a:d4:37:75:1d:
ae:1e:6d:37:47:9a:40:cb:a1:b7:81:62:4b:8d:aa:
0c:79:ab:02:b1:85:a6:44:e1:0d:f9:92:58:ec:92:
20:57:46:ad:2f:6f:fb:14:56:86:70:b2:3c:25:98:
08:d1:e1:79:49:dc:db:8f:98:06:01:be:44:de:4e:
a3:f7:9e:db:0b:67:47:1d:b4:4d:a0:4e:67:e7:35:
53:ae:ae:7c:8a:eb:02:a5:12:99:44:6e:8e:dc:f7:
85:05:aa:24:c0:ff:cb:06:4b:ec:e7:66:19:33:0d:
87:77:a6:14:21:ca:c2:28:a0:21:b2:d4:ba:0c:87:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/qyfU9itbqY36V9c9bdWJdZbqc-k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.89.0/24
IPv6:
2a0a:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:c6:0b:43:e0:02:9f:31:32:1f:21:b7:19:4a:04:62:c3:82:
76:0e:8b:a8:9b:11:45:0e:dd:27:4c:d2:a4:64:1b:34:d8:50:
51:8d:4a:90:e4:cb:23:75:5f:98:5f:2f:d3:ce:c8:4e:b7:23:
3b:51:2d:44:5e:1c:b3:cb:52:2e:56:30:52:7c:fd:1c:87:bc:
b0:b7:cd:4c:73:2c:c6:22:6d:f8:8d:68:3c:06:ea:84:9f:0a:
94:e0:2c:23:51:6c:08:cc:50:2b:e5:4e:3c:22:95:e7:c2:ea:
cb:0d:ff:55:62:ff:c5:2b:62:11:ac:85:a0:dd:d8:20:a5:3a:
c0:df:83:33:fa:26:34:dd:0b:16:33:a5:cb:7c:d5:9c:55:85:
0e:28:93:ec:66:6f:b4:e6:31:82:dd:64:7a:94:8d:6d:a6:7c:
ec:d2:3b:60:64:75:29:11:ab:5d:e0:80:5a:95:10:8a:db:88:
6d:a5:bd:61:39:50:fc:2d:95:2c:71:bd:ab:76:8b:4f:36:fe:
d6:93:0f:98:68:6f:99:6a:2b:f8:0b:8a:c6:37:16:62:f8:cb:
84:04:8b:ba:81:8e:3f:ae:4b:19:1d:7b:86:6d:df:d2:11:da:
5e:e6:d7:f9:08:99:04:2c:29:42:56:97:8d:bc:bb:31:60:fd:
e3:f0:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:00 2025 by rpki-client