Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t2njwwvSV4pKQM8V3atfrhz8lT4.cer
File: t2njwwvSV4pKQM8V3atfrhz8lT4.cer (raw, json)
Hash identifier: 4MxSgxaZ2QGPgIOjORf1ZuznJjAhSY0uaDT+5iBL8P4=
Subject key identifier: B7:69:E3:C3:0B:D2:57:8A:4A:40:CF:15:DD:AB:5F:AE:1C:FC:95:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B02D3275B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/5493e2-6db6-41e9-8c7d-af47f428c0d4/1/t2njwwvSV4pKQM8V3atfrhz8lT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/5493e2-6db6-41e9-8c7d-af47f428c0d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 17 Apr 2022 12:27:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 5.182.228.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756672525746 (0xb02d3275b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 12:27:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b769e3c30bd2578a4a40cf15ddab5fae1cfc953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:fa:bf:f2:46:84:d1:04:eb:af:3e:5b:93:
04:0e:08:03:c3:63:46:05:e7:3b:d7:ed:12:d9:11:
83:c1:0d:39:d2:7e:d2:80:63:c0:7f:be:98:ba:74:
b0:4c:88:86:de:91:f3:35:de:ef:f2:ee:3a:d6:8d:
d1:1c:a0:0f:3a:6b:3a:57:a5:51:ae:44:c9:7c:68:
b0:c9:30:de:ac:a5:82:9e:8d:b1:4e:87:29:b1:44:
d8:f9:f5:7c:30:7f:cd:0d:19:ad:d5:dc:49:ee:2d:
e0:0e:1d:08:13:6a:b2:76:b4:63:ee:2f:13:98:91:
f3:ac:8a:81:3b:24:e4:7a:d5:fe:33:ae:61:59:17:
17:f5:74:6b:20:ad:8c:3f:7d:01:cb:71:67:fd:d9:
a6:cc:2a:76:49:19:80:1c:95:4d:67:6a:9a:fe:5d:
f4:a2:ef:e9:36:eb:4c:d9:6b:7f:fd:44:24:da:e2:
cb:5b:57:aa:4f:d4:f6:c7:95:c6:e1:f2:49:f7:ac:
d4:3e:96:41:e1:66:83:91:23:5f:cf:30:9a:d4:d3:
e2:52:45:82:41:d4:49:68:32:9a:10:d1:42:91:60:
48:e1:1d:eb:b3:6e:0a:38:e6:f7:5f:e4:75:3a:52:
9c:f8:bb:0c:5b:e9:9b:1f:b9:31:53:f4:ce:95:a7:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:69:E3:C3:0B:D2:57:8A:4A:40:CF:15:DD:AB:5F:AE:1C:FC:95:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5493e2-6db6-41e9-8c7d-af47f428c0d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5493e2-6db6-41e9-8c7d-af47f428c0d4/1/t2njwwvSV4pKQM8V3atfrhz8lT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.228.0/22
Signature Algorithm: sha256WithRSAEncryption
27:77:d4:00:ca:f8:07:b9:75:f2:7d:74:9e:83:b1:bd:29:28:
19:27:b5:20:cb:d9:71:2f:61:f1:bd:7c:2b:96:8d:d4:16:d8:
8b:a0:fb:70:82:41:73:72:19:33:9c:71:2d:19:99:22:81:34:
3d:6f:19:97:e4:6a:f2:19:14:71:ac:1c:6f:c2:7a:86:74:89:
c4:3c:6e:99:23:43:1b:56:e6:b7:3b:17:25:70:86:3f:f8:62:
bb:76:73:23:28:a3:1c:66:e5:a1:91:64:a1:1f:23:5e:8b:48:
4f:a7:f0:5b:76:88:20:9b:bb:d1:c4:8a:14:82:41:c9:4c:65:
de:dd:d5:fe:87:74:a4:01:29:c6:e3:c4:dd:f5:6d:bd:84:97:
15:27:d2:61:b4:36:c5:36:2a:1c:2d:72:4c:46:e1:49:29:22:
85:61:a7:ba:38:71:5d:b9:23:23:3d:34:8f:ba:14:ae:2f:4b:
24:d7:e3:37:52:2c:3f:43:1a:52:3f:9e:67:40:92:50:b4:c6:
ff:c5:21:6b:0e:5b:c1:3f:9d:e6:cc:16:9d:5c:d1:ad:2c:c8:
13:6c:22:bf:23:24:6a:08:a9:9e:6f:bb:ee:8b:b9:47:8d:0f:
f2:30:08:1f:86:12:cd:fc:99:8a:ba:7d:b5:b1:2d:12:bf:da:
0e:80:a7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:58:02 2025 by rpki-client