Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sF5qZBdFdXa5rFoGlEqf4qxGJ30.cer
File: sF5qZBdFdXa5rFoGlEqf4qxGJ30.cer (raw, json)
Hash identifier: Uxul/bJac5RVH30t9YOG7gnBnmmlC/7XCloBr2BiluY=
Subject key identifier: B0:5E:6A:64:17:45:75:76:B9:AC:5A:06:94:4A:9F:E2:AC:46:27:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F40E49F23788ACAF8E8F806BBE72DDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/sF5qZBdFdXa5rFoGlEqf4qxGJ30.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:33:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.94.29.0/24
IP: 2a0d:1480::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:40:e4:9f:23:78:8a:ca:f8:e8:f8:06:bb:e7:2d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b05e6a6417457576b9ac5a06944a9fe2ac46277d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:be:04:b6:12:51:aa:f2:7b:ff:e1:38:fa:
5f:8e:eb:53:70:7d:9a:36:09:15:22:f3:64:7f:98:
d9:63:52:46:6e:2f:67:2b:a5:54:70:f7:74:b3:39:
f6:7f:fc:29:18:09:68:b6:17:e0:55:f1:a8:35:c1:
db:40:5e:7d:37:b7:04:bd:42:74:32:0b:87:22:8e:
fc:6a:46:01:78:f4:c4:ec:72:5a:7f:9b:4a:00:00:
2e:d0:3e:18:b6:a4:4b:65:b7:0e:a2:72:c6:60:47:
68:c4:18:e0:9e:16:70:35:53:f4:f0:74:5d:6a:a6:
cf:b7:21:13:d7:08:c8:77:ff:f3:40:d4:99:bc:89:
2a:73:bc:e2:d9:6b:fc:a1:4e:0b:84:2e:4c:c1:eb:
28:c6:98:ef:9f:5c:75:43:d3:9a:20:38:9b:ee:53:
54:3a:f7:96:32:5c:0f:fa:c6:9a:57:b4:14:a3:1f:
e4:7d:f1:ed:b8:f3:ca:df:8f:ea:bd:51:10:ca:4a:
08:34:5d:9a:ab:9e:a0:30:de:16:87:da:1d:ed:24:
60:3a:47:da:32:c5:af:19:bb:ee:a7:59:02:72:7d:
ed:4c:97:27:a8:9e:96:c7:55:a6:00:97:c2:df:d7:
6e:b2:16:5d:4a:fa:51:bc:dc:39:4b:9b:ac:ad:ab:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5E:6A:64:17:45:75:76:B9:AC:5A:06:94:4A:9F:E2:AC:46:27:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/sF5qZBdFdXa5rFoGlEqf4qxGJ30.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.29.0/24
IPv6:
2a0d:1480::/29
Signature Algorithm: sha256WithRSAEncryption
4c:4c:55:59:06:67:d5:94:1a:5c:8a:2a:81:50:37:70:84:cf:
1c:de:60:75:c0:e9:92:07:43:a8:03:18:b7:42:61:4e:ea:7b:
e7:8d:cf:16:31:c6:b3:99:ac:86:ef:7a:ce:7b:13:d9:0b:fa:
ad:9d:ad:90:b2:d1:88:f5:d2:b0:54:5c:5a:5c:1c:ca:ae:6d:
67:9b:d4:79:59:5e:6c:72:c8:37:01:77:0f:59:3f:11:65:89:
cf:9a:78:d3:a9:f8:6b:fb:cc:30:03:c4:35:32:23:0f:e5:5b:
6b:25:cf:a9:fc:7b:f8:ba:c1:fd:a0:c6:20:5f:de:c8:1b:68:
82:45:05:3c:cd:85:a1:96:73:d7:f9:07:7c:4c:e6:6b:7b:b7:
93:8b:9f:ab:e2:f9:7a:66:50:9e:98:94:30:10:4a:8a:19:67:
c1:b7:76:e2:af:53:e3:31:9f:69:57:05:4a:5c:95:9e:af:7f:
e2:02:02:f7:b0:d8:74:3f:2b:30:49:e0:08:b3:ae:45:b3:28:
32:24:62:f8:18:bf:5f:fe:dc:f2:af:f1:d0:07:58:ed:cf:8c:
43:24:13:ef:44:d0:cc:38:6f:2e:7b:21:17:84:6d:76:65:49:
eb:f3:8b:1d:28:b0:31:60:6b:ce:1e:36:e3:3f:1b:37:53:02:
e8:8b:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:14:46 2025 by rpki-client