Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/reNi71iIycITdX-VEUAzcZY3I3o.cer
File: reNi71iIycITdX-VEUAzcZY3I3o.cer (raw, json)
Hash identifier: xB5RW2DboVtGYbBMqDFgO4AWN/Zx9IhCfORHvyxnSqk=
Subject key identifier: AD:E3:62:EF:58:88:C9:C2:13:75:7F:95:11:40:33:71:96:37:23:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CC3A3B2FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/0e7176-c072-4503-a268-c72fd3a9d657/1/reNi71iIycITdX-VEUAzcZY3I3o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/0e7176-c072-4503-a268-c72fd3a9d657/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:54:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 16242
IP: 62.32.0.0/19
IP: 77.74.56.0/21
IP: 79.142.128.0/20
IP: 185.31.248.0/22
IP: 185.40.216.0/22
IP: 185.41.76.0/22
IP: 185.41.132.0/22
IP: 185.64.184.0/22
IP: 185.70.68.0/22
IP: 185.108.244.0/22
IP: 185.110.72.0/22
IP: 185.110.88.0/22
IP: 185.110.184.0/22
IP: 185.119.36.0/22
IP: 185.132.16.0/22
IP: 195.216.64.0/19
IP: 213.188.32.0/19
IP: 2001:1558::/32
IP: 2a01:228::/32
IP: 2a01:52a0::/32
IP: 2a01:5660::/32
IP: 2a04:5640::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673297183485 (0x9cc3a3b2fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ade362ef5888c9c213757f95114033719637237a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:ba:9a:c1:c4:87:be:6d:a7:13:22:3b:bc:
7b:f0:2c:44:94:1e:7f:7f:64:91:8f:23:22:77:0d:
26:32:cf:57:fa:00:1a:c0:29:4d:0c:e8:38:08:fb:
47:3c:b2:2d:b1:51:65:af:81:40:06:c5:c1:e8:53:
5f:20:82:f9:5f:d9:03:40:49:d2:57:ac:2c:8e:7b:
b2:d5:42:54:0d:61:8a:55:08:cf:4f:f3:b6:1b:67:
c8:40:34:07:e1:74:3e:3f:67:ca:f3:12:1b:c8:4e:
6a:6d:fd:51:c1:71:cf:8e:8c:ef:6f:5b:e2:90:b3:
a2:e4:1d:e2:f4:3c:62:22:b2:a4:0d:4d:3f:3e:e7:
2c:0b:2b:74:9b:5b:c5:e3:29:11:79:60:ff:90:e6:
ce:f1:a8:d9:8b:0a:1a:bc:92:84:20:e5:3b:a0:d5:
a0:04:12:a1:d3:81:7e:9c:60:55:a9:0c:89:52:b3:
3f:28:89:60:38:11:f1:de:7c:68:b8:1b:83:9f:42:
c5:97:15:3c:16:56:e4:00:f5:12:d8:b4:99:23:65:
36:ac:08:42:34:94:25:eb:49:bf:d7:58:a9:3b:cc:
be:84:5f:d9:35:e4:d4:ea:0f:4a:25:9b:8b:7d:53:
15:3e:08:1c:ff:74:b1:74:76:73:0f:35:f2:17:91:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:62:EF:58:88:C9:C2:13:75:7F:95:11:40:33:71:96:37:23:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0e7176-c072-4503-a268-c72fd3a9d657/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0e7176-c072-4503-a268-c72fd3a9d657/1/reNi71iIycITdX-VEUAzcZY3I3o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.0.0/19
77.74.56.0/21
79.142.128.0/20
185.31.248.0/22
185.40.216.0/22
185.41.76.0/22
185.41.132.0/22
185.64.184.0/22
185.70.68.0/22
185.108.244.0/22
185.110.72.0/22
185.110.88.0/22
185.110.184.0/22
185.119.36.0/22
185.132.16.0/22
195.216.64.0/19
213.188.32.0/19
IPv6:
2001:1558::/32
2a01:228::/32
2a01:52a0::/32
2a01:5660::/32
2a04:5640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16242
Signature Algorithm: sha256WithRSAEncryption
70:ab:e6:45:b4:76:18:ff:49:24:50:f0:6f:c5:16:ec:3c:64:
e9:67:fe:9f:8d:34:e0:9f:cb:7d:b0:1f:f0:cb:3b:a0:01:81:
af:9b:27:54:70:65:eb:14:51:34:27:55:50:28:14:a1:ea:af:
47:25:ae:81:ab:26:23:44:70:24:52:f0:22:b0:f7:d6:38:a6:
34:9f:c6:a3:bc:94:97:4b:89:4c:a3:41:2f:99:38:b3:5c:56:
c4:cd:2b:d2:21:91:d8:33:d9:29:60:bb:22:ce:4b:80:4c:41:
35:0b:bc:c2:19:41:76:34:13:be:22:9c:a3:36:4f:0c:a5:e3:
a3:36:c4:64:25:11:c2:7e:a1:0e:61:3a:3e:fb:c7:e1:23:c4:
6b:03:d5:e5:ac:17:5c:7b:f6:bc:4a:ae:d0:0f:cd:7f:38:ed:
23:9b:4a:77:7c:d2:fa:69:95:a2:a1:d9:e4:a9:7c:ad:b4:8e:
45:20:47:a8:8b:36:76:e8:9f:4a:61:4a:00:b4:47:1f:8e:ca:
ee:d9:60:3f:57:1d:42:41:a2:22:41:de:d8:95:00:e6:94:4d:
2c:28:a3:98:f1:c1:32:66:b5:db:ae:af:18:dd:b9:3a:53:22:
14:28:76:92:ce:7d:1c:eb:31:60:4a:af:89:b7:b4:a8:61:5c:
94:31:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:21 2025 by rpki-client