Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tHMWZWagjQMgU8ys4jBo4ZU_TrI.cer
File: tHMWZWagjQMgU8ys4jBo4ZU_TrI.cer (raw, json)
Hash identifier: 93daYHhZa9+8RM4Azry3eBkeijbj68Dr2cktclTpX1Q=
Subject key identifier: B4:73:16:65:66:A0:8D:03:20:53:CC:AC:E2:30:68:E1:95:3F:4E:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD63A47BAAA7630EA0502ABE037391
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/tHMWZWagjQMgU8ys4jBo4ZU_TrI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:33:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.138.165.0/24
IP: 2a0b:3140::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:63:a4:7b:aa:a7:63:0e:a0:50:2a:be:03:73:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:33:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b473166566a08d032053ccace23068e1953f4eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:09:25:b7:9c:06:3e:33:7a:5d:a9:2a:a3:
c1:16:df:08:8a:9a:4a:3b:c2:91:10:2e:bd:15:8b:
58:d3:87:82:56:21:d3:52:94:38:4f:6c:ca:76:b5:
f7:ef:4b:3f:ff:04:b0:88:65:cf:03:17:82:b2:fe:
7f:58:c7:f5:b5:ee:cb:85:76:a4:43:b6:ef:b0:da:
52:39:45:5a:92:54:fe:f4:f4:dc:8e:1f:ba:6c:42:
c2:91:ab:ff:b5:04:ab:53:06:90:8a:3e:be:74:b8:
7d:8d:ed:f9:c1:c0:68:72:bb:37:03:49:81:36:59:
50:c7:c4:cd:2a:84:34:52:2c:e2:62:d8:8b:31:24:
f3:b0:95:72:c9:11:8c:da:c7:2d:c4:9c:c4:6c:22:
85:38:7a:6b:6e:9b:67:cd:d0:eb:f3:af:7d:69:a3:
71:5a:94:ac:a6:2a:01:6d:33:dd:0e:0c:1a:47:82:
b0:3e:c1:50:c2:17:58:d6:ee:3c:7f:74:8d:0e:ef:
5b:e8:08:66:31:c0:7d:57:42:98:f7:87:43:88:ab:
e0:1f:f5:80:1d:c5:90:64:9d:ee:32:f4:dd:fe:25:
a8:4f:c2:52:67:0c:b2:3b:0e:83:48:66:37:88:b0:
da:44:ea:c1:09:c7:7c:08:b9:ca:dd:47:55:21:3d:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:16:65:66:A0:8D:03:20:53:CC:AC:E2:30:68:E1:95:3F:4E:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/tHMWZWagjQMgU8ys4jBo4ZU_TrI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.165.0/24
IPv6:
2a0b:3140::/29
Signature Algorithm: sha256WithRSAEncryption
63:a4:f5:91:5c:5e:c1:65:ff:be:ac:e6:f5:60:a7:d5:aa:9b:
10:b9:ec:2a:9e:88:0b:f3:f8:a9:c0:08:37:9e:0b:61:97:d9:
2c:e5:76:c4:8c:d4:66:6c:da:15:4e:07:6c:a3:d0:5a:ec:02:
6c:2c:9d:ba:58:4c:71:a7:40:d6:47:8b:e0:d2:55:80:00:ba:
6d:f6:7f:1b:1a:42:e8:00:d9:c4:21:39:f2:97:90:99:13:26:
0a:c6:e5:38:cc:1c:7e:5e:89:fd:0e:61:57:c7:bb:12:b3:29:
cb:19:2a:02:3c:5a:53:3f:29:89:2e:70:96:02:f3:c6:a9:1d:
3a:06:23:79:5f:81:d6:59:7d:47:35:14:7e:5d:0d:1b:e8:fc:
24:67:ad:91:5d:e1:99:6f:f8:94:1d:c7:20:73:05:08:99:06:
01:72:03:a6:75:0a:6c:59:fc:3d:0b:c1:05:de:94:2e:53:9b:
12:de:21:4b:da:f4:57:89:af:0d:ed:22:63:0c:f2:90:03:a7:
75:8a:b9:97:b1:9b:7f:05:d2:cd:80:21:96:8c:87:2b:44:ea:
48:35:f8:49:b9:df:27:39:c9:ae:58:63:ab:0e:c3:5e:a3:d2:
81:76:5f:eb:ee:3e:9a:38:af:c0:32:4b:88:19:cc:84:ae:49:
00:6b:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:21:21 2025 by rpki-client