Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tK2fSmY146BHW4G0wGbjUgiSR4A.cer
File: tK2fSmY146BHW4G0wGbjUgiSR4A.cer (raw, json)
Hash identifier: jFqvmYp/g9oufTsmcTlAdpiomKt1xTMkMvpUwNjJP2M=
Subject key identifier: B4:AD:9F:4A:66:35:E3:A0:47:5B:81:B4:C0:66:E3:52:08:92:47:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C68800D3229421C48B1DA0D135D390C04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/d11fff-d357-45c4-b806-6e907c378e47/1/tK2fSmY146BHW4G0wGbjUgiSR4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/d11fff-d357-45c4-b806-6e907c378e47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Dec 2023 13:24:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.238.0/24
IP: 2a14:3280::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:80:0d:32:29:42:1c:48:b1:da:0d:13:5d:39:0c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 14 13:24:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4ad9f4a6635e3a0475b81b4c066e35208924780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:6e:99:7d:f5:b0:f2:d0:7b:81:30:2a:9a:
8e:9a:e8:73:19:97:a9:22:f4:04:ed:25:40:b1:03:
48:e1:6c:e1:02:e5:45:cc:f0:c4:fa:2b:12:7e:9c:
3e:0a:86:a9:06:77:33:c0:64:f9:00:64:4c:51:47:
07:d2:b4:bb:91:b6:94:0e:e5:00:1d:a5:8d:08:73:
e3:5d:e7:f8:3b:b9:36:b9:7f:8a:21:da:36:bd:49:
92:ee:ce:d6:fa:e8:82:d4:89:7f:d4:ee:78:6d:ff:
c3:fc:af:f8:f9:44:c2:2a:33:c7:52:d3:bf:77:5e:
ee:aa:58:4c:42:9f:51:3c:34:4b:5d:1f:7e:ff:c5:
6b:a9:6e:7f:cc:cd:75:f7:af:05:5f:54:b2:8b:91:
ed:7f:88:4b:70:ea:d5:48:4e:84:12:32:41:b2:bb:
82:0c:3a:90:72:c5:ab:87:e1:a7:80:54:62:ee:20:
be:72:1b:dd:29:64:dd:eb:3b:42:05:40:9d:62:3f:
08:df:82:a6:6f:ac:99:39:c2:de:9f:00:f3:7f:0a:
f7:4b:15:9b:86:02:2c:6a:9e:07:0b:45:33:90:8c:
d0:6b:98:b4:9a:f6:b9:56:2a:cb:cd:99:dc:23:e2:
66:be:b4:10:46:51:d2:b5:bc:58:d9:70:47:6a:64:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AD:9F:4A:66:35:E3:A0:47:5B:81:B4:C0:66:E3:52:08:92:47:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d11fff-d357-45c4-b806-6e907c378e47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d11fff-d357-45c4-b806-6e907c378e47/1/tK2fSmY146BHW4G0wGbjUgiSR4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.238.0/24
IPv6:
2a14:3280::/29
Signature Algorithm: sha256WithRSAEncryption
86:c1:a9:f1:6b:38:07:7b:20:1a:1d:11:3c:13:17:28:94:44:
70:17:57:e9:cf:96:c0:dd:5c:40:a0:a9:03:4d:5f:68:e6:c6:
90:9e:4f:df:30:dc:c8:78:c0:a2:32:a2:48:60:57:c1:47:53:
3a:27:8b:38:53:20:3e:ce:2b:e1:8c:a9:bf:e3:62:95:06:a2:
0c:ae:a6:95:1f:59:27:4b:b9:62:3a:cb:f1:cb:0e:e8:b2:69:
00:4d:80:26:7b:3a:ff:01:e9:4d:12:38:ce:d7:f3:e6:be:f3:
48:84:57:68:96:35:7b:59:d5:af:e7:d7:ea:97:08:5f:aa:30:
84:b1:dc:86:30:78:99:59:52:bd:e6:9a:b8:b6:90:39:55:3a:
40:67:b1:b3:a4:fe:75:8a:94:7b:42:9d:51:33:e7:c0:8e:86:
83:b7:52:64:38:61:1f:db:73:ef:02:ac:6d:63:6b:da:fb:91:
f0:c6:a6:a9:5f:f3:c4:52:54:c5:a8:4d:d0:81:de:bc:b4:66:
1e:f6:f6:42:6d:82:05:16:53:db:ef:58:ff:cd:bd:64:0f:f5:
d8:da:fe:24:f0:d1:ff:b5:77:44:be:7a:db:9c:00:bc:7e:0d:
7f:db:0e:e4:51:ed:b7:f4:48:1a:a6:60:52:8e:b2:a7:ae:94:
e7:dd:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:28:55 2025 by rpki-client