Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sIQ82P_v6nT0VDLQ-sPnkGil39k.cer
File: sIQ82P_v6nT0VDLQ-sPnkGil39k.cer (raw, json)
Hash identifier: bk5Mtuggb2EXb8145fFuUyLiMSXYnFM3tABJx9jlmbo=
Subject key identifier: B0:84:3C:D8:FF:EF:EA:74:F4:54:32:D0:FA:C3:E7:90:68:A5:DF:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2E4AE5027
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:00:27 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.226.44.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699621330983 (0xa2e4ae5027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0843cd8ffefea74f45432d0fac3e79068a5dfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:d7:51:b7:85:c7:78:1c:7b:8b:91:af:7d:
8c:8f:26:1f:49:58:12:13:87:7b:bc:af:33:49:67:
95:12:85:b8:72:a2:34:19:2c:ed:23:04:64:ec:37:
1a:1c:e0:b0:8f:e6:2f:44:80:ae:26:06:45:c9:11:
ea:f0:9c:12:a3:99:db:16:72:2e:33:06:d9:96:ac:
7e:78:cc:95:aa:45:c9:6e:5e:e2:be:7c:1d:bf:fd:
53:59:fd:f0:b0:ad:9a:67:67:e7:a2:d3:7a:76:e3:
de:8b:0a:ca:2e:15:2e:5e:4e:db:1d:21:d0:7c:05:
49:dd:71:33:63:a7:c8:34:68:10:43:3b:de:36:2c:
be:12:db:1a:b0:0b:5b:82:47:78:2e:25:1f:1c:c4:
5d:64:21:ff:4f:e4:4e:7f:a3:6a:b0:5f:72:18:7d:
b8:03:6b:10:d7:4c:9c:ab:73:4d:f4:22:49:cb:05:
2a:fd:12:1a:d2:db:a8:2a:eb:bd:96:95:37:88:59:
f8:70:e8:4e:03:26:a6:d0:df:79:58:b7:cd:2f:2f:
f4:6d:a3:71:64:3f:0b:00:f9:30:e2:69:d7:d5:5e:
04:75:6c:ed:e9:eb:2e:cd:c3:0f:b2:7f:e3:91:9b:
87:af:47:b6:25:dd:86:60:4e:ed:6b:77:40:dd:fa:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:84:3C:D8:FF:EF:EA:74:F4:54:32:D0:FA:C3:E7:90:68:A5:DF:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.44.0/22
Signature Algorithm: sha256WithRSAEncryption
57:86:ba:18:3c:4a:0f:75:ef:8c:bb:f0:ac:e4:3e:bc:4c:61:
3b:67:05:2e:74:da:5e:d0:7c:17:9b:65:16:df:2c:34:07:88:
e6:9b:83:b3:bc:ab:48:1c:b6:d7:66:a5:86:7c:ea:8d:9d:60:
c3:ee:da:2a:70:e8:35:27:3d:91:d7:4d:40:b4:4d:00:5d:28:
72:df:c9:68:28:86:0c:48:e5:10:65:99:f0:40:63:86:de:3b:
99:81:24:07:ba:46:00:0d:bd:a9:fa:80:96:f7:d2:88:a9:15:
ba:5e:9f:c3:97:7b:aa:99:93:6c:9d:ed:dc:a4:e6:d9:c2:4a:
c3:fe:d0:12:25:6c:2b:63:60:c7:ec:8b:61:12:9e:ee:cd:fe:
78:8f:a1:7c:e8:10:b8:8c:bd:2e:6e:4b:b4:a5:a3:c8:d2:3e:
ed:0d:b4:09:d0:dc:5e:ef:e8:be:7f:51:bd:72:60:07:85:cf:
d6:14:57:a1:c9:0d:a4:54:38:82:fe:0d:f0:fc:fa:2f:5b:27:
31:a3:3e:61:41:91:70:62:61:14:c4:25:ac:f5:38:d2:d6:77:
6f:33:14:f0:cb:58:a1:91:b3:8f:4e:58:5a:62:c7:56:83:01:
28:13:b3:c9:72:e0:97:a5:38:5e:ab:a4:81:9a:d7:4f:74:c1:
ba:85:af:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:21 2025 by rpki-client