Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/toIwbcCm81oRt65r5h9bEnT0how.cer
File: toIwbcCm81oRt65r5h9bEnT0how.cer (raw, json)
Hash identifier: XEdI0lcXNCAb0biDrYuFvYeo08kyFsNc4c64qqXIENw=
Subject key identifier: B6:82:30:6D:C0:A6:F3:5A:11:B7:AE:6B:E6:1F:5B:12:74:F4:86:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185BE7F14749ABF3C26445CA2AE439E9CBA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/febe62-507b-49b1-b52c-e43667c252bc/1/toIwbcCm81oRt65r5h9bEnT0how.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/febe62-507b-49b1-b52c-e43667c252bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Jan 2023 06:51:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.139.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:7f:14:74:9a:bf:3c:26:44:5c:a2:ae:43:9e:9c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 06:51:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b682306dc0a6f35a11b7ae6be61f5b1274f4868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:b6:01:55:4b:74:3b:d0:8b:79:f8:97:c9:
16:8a:e6:c1:ba:54:0e:22:78:69:70:22:26:b3:02:
da:e9:66:3b:3e:37:5a:1d:8f:47:4f:fe:85:68:85:
04:0e:fb:d3:4e:eb:0a:ac:92:43:b4:06:21:c2:ad:
1e:d2:d2:b2:87:c1:70:ad:20:2a:aa:18:99:23:96:
b2:cf:61:f1:a1:a1:25:19:bb:bd:26:76:62:dd:dd:
f1:5a:89:6b:ef:9a:75:55:7f:59:ee:69:9c:33:fb:
08:56:3f:6f:9b:b6:e0:6a:58:ad:7c:2a:f3:32:c7:
7f:04:1e:26:90:d8:d8:8b:fb:ed:0e:7d:ef:41:9a:
86:a3:d1:d5:b8:0c:14:69:7e:4b:f7:11:74:c4:86:
88:3a:4f:2f:1b:fd:cf:f8:14:6f:e7:2c:d9:29:cc:
2b:71:59:c0:47:52:4e:db:95:71:b1:51:95:06:36:
be:77:84:27:34:7f:36:ad:76:12:94:88:0a:f1:bf:
28:89:2c:ab:95:1a:f4:c4:b7:29:94:aa:76:52:de:
c6:76:ff:00:c5:0a:80:76:50:a5:a3:22:f0:67:67:
ee:19:ff:d8:81:9c:02:14:a5:0b:2f:98:b2:3f:42:
a9:30:1c:62:40:c0:0b:00:f5:cc:b8:de:1b:1e:68:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:82:30:6D:C0:A6:F3:5A:11:B7:AE:6B:E6:1F:5B:12:74:F4:86:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/febe62-507b-49b1-b52c-e43667c252bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/febe62-507b-49b1-b52c-e43667c252bc/1/toIwbcCm81oRt65r5h9bEnT0how.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:fb:9a:5b:ce:dd:57:af:29:4e:ea:17:f1:87:b8:6e:a9:42:
22:8d:0e:7a:92:41:0e:82:07:33:0e:95:b6:c3:39:8a:83:a5:
6a:60:d9:05:84:ea:e3:6e:37:e7:66:e4:ce:47:10:6e:c7:72:
82:50:33:a9:2d:7a:c8:49:53:4a:41:62:42:19:b9:d4:97:41:
d0:67:32:b6:0d:78:b4:30:26:6e:d4:d9:d5:d8:1f:94:c3:8d:
6a:32:cd:b0:1c:6e:56:49:c2:7a:0b:3f:54:a3:00:9e:fd:c3:
99:d5:c5:5e:50:65:9a:b1:27:dd:14:05:c5:ff:55:51:5c:bb:
44:cd:87:92:bc:94:36:1b:2d:7d:bc:06:99:25:b1:3c:21:46:
d0:4b:c0:72:66:c6:79:5e:5e:56:7c:25:c4:8c:3b:45:61:86:
17:c3:bf:83:a8:b1:3e:55:59:2f:6f:1e:e8:06:d4:32:29:fa:
32:58:13:be:9e:0f:03:9c:ba:9c:8d:63:0b:46:36:33:2c:6e:
ef:02:a9:00:54:c6:51:52:1c:e2:c8:7c:ef:b9:a0:3b:09:03:
ea:5d:51:3b:9f:df:a8:20:47:b7:3c:af:aa:be:fa:81:ee:9f:
bf:70:ff:53:26:52:f7:82:aa:3e:48:30:4b:23:2e:63:ac:35:
23:a7:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:32:51 2025 by rpki-client