Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sp1EdSRACK2voL0RUxVD5NAeWsY.cer
File: sp1EdSRACK2voL0RUxVD5NAeWsY.cer (raw, json)
Hash identifier: nC1IsFgKomBJfLmFDle8zvtgW7BmnxZGffboveDaDP8=
Subject key identifier: B2:9D:44:75:24:40:08:AD:AF:A0:BD:11:53:15:43:E4:D0:1E:5A:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A253BF79CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/769c04-f00b-44df-8342-80eeee2156a5/1/sp1EdSRACK2voL0RUxVD5NAeWsY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/769c04-f00b-44df-8342-80eeee2156a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:53:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210965
IP: 185.216.13.0/24
IP: 2a10:d4c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697189759437 (0xa253bf79cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b29d4475244008adafa0bd11531543e4d01e5ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:9a:03:24:28:59:07:81:f2:67:92:39:01:
ba:2d:07:e8:12:d8:3e:83:28:0f:b6:ae:25:01:5a:
d0:b9:7d:cd:76:df:89:5b:6b:f8:ab:54:79:16:fa:
13:28:3b:f3:1c:25:7a:df:c2:10:47:9a:5a:07:41:
9f:bb:c7:f8:5f:e6:bb:22:88:21:b9:40:30:5a:14:
4c:50:ce:c3:72:d4:2f:ac:49:96:95:5c:6f:4f:e6:
59:ce:db:6a:a3:8f:85:2d:3c:7c:7f:9c:4a:fe:d2:
16:18:cc:89:bc:6e:97:8f:84:0d:d4:a3:34:68:d2:
0a:82:63:d0:5c:91:d2:67:bc:79:e0:13:3f:6c:c3:
61:c4:d7:ab:89:a3:8f:94:ee:95:e6:5a:a8:f5:82:
64:f6:ec:2c:02:01:6d:ad:10:ec:e2:e9:fb:54:0f:
6a:cb:94:a5:e8:ff:23:d3:ef:ac:8f:83:bd:6d:07:
f4:f0:da:c8:02:c8:ce:09:b4:ee:c4:39:88:c7:8d:
1a:b8:b3:bb:05:1e:12:46:34:9c:f9:9a:10:cc:09:
e9:21:a1:07:03:80:57:a9:82:95:20:44:34:13:57:
9f:6d:78:bd:ae:7b:87:ec:d4:b3:cb:59:29:50:04:
f2:ed:0b:2e:69:d0:54:54:ba:1b:0b:10:fb:d4:5c:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9D:44:75:24:40:08:AD:AF:A0:BD:11:53:15:43:E4:D0:1E:5A:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/769c04-f00b-44df-8342-80eeee2156a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/769c04-f00b-44df-8342-80eeee2156a5/1/sp1EdSRACK2voL0RUxVD5NAeWsY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.13.0/24
IPv6:
2a10:d4c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210965
Signature Algorithm: sha256WithRSAEncryption
ae:31:21:d4:7e:e9:b7:ba:ff:2b:25:95:17:f0:77:b9:73:d2:
a5:c6:cc:a6:44:ac:97:0f:3e:66:0c:20:3e:fd:8b:8a:ca:6a:
b9:33:88:1f:40:c4:3c:13:62:ee:10:62:08:ca:9b:34:aa:b8:
32:27:49:99:be:a8:d6:e0:c0:e4:c7:a3:36:9f:e5:e2:df:aa:
b4:e4:f9:b4:a0:63:86:c9:5b:9e:7e:0b:a5:60:e4:5a:63:4a:
89:53:7d:b5:d2:58:b1:3a:fd:79:09:b9:d5:da:1f:84:be:06:
69:46:30:fc:46:ce:d3:a1:be:e3:e3:c9:de:c3:11:a4:08:9f:
f9:3a:cf:e5:2c:8a:81:03:40:7a:ee:9b:1f:c0:16:37:84:d7:
c7:b2:d1:46:0f:95:00:79:85:54:1a:dc:d8:3e:77:d9:51:18:
35:50:6a:44:1e:6e:73:ca:79:06:7b:b9:29:fa:22:4e:8e:2d:
df:04:5b:9b:33:3a:fe:f0:e0:64:a6:19:06:8e:17:f4:b9:0f:
a0:f7:f5:09:d8:7f:20:a0:6b:d3:25:0f:28:6e:2f:c5:20:e5:
b6:13:d9:1c:ca:10:ad:2a:1f:df:79:1e:a6:79:e2:25:0b:e6:
27:b4:e9:19:7a:47:02:3b:2e:e2:b7:0e:41:b5:d4:80:c8:8f:
61:23:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:21 2025 by rpki-client