Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tx2LpAC35L9MSuG8MHYh7CNH5t4.cer
File: tx2LpAC35L9MSuG8MHYh7CNH5t4.cer (raw, json)
Hash identifier: 3ft2ZlP5J60o0Pa8koG9pkfdbdR51X1DA4qvyTde4Gw=
Subject key identifier: B7:1D:8B:A4:00:B7:E4:BF:4C:4A:E1:BC:30:76:21:EC:23:47:E6:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D898935B16FD0ED7E39332985BA9658
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/tx2LpAC35L9MSuG8MHYh7CNH5t4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 49697
AS: 205927
IP: 2001:678:964::/48
IP: 2001:678:974::/48
IP: 2001:678:97c::/48
IP: 2001:678:a00::/48
IP: 2001:67c:1250::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:89:35:b1:6f:d0:ed:7e:39:33:29:85:ba:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71d8ba400b7e4bf4c4ae1bc307621ec2347e6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:e2:5a:36:16:6d:38:32:9c:76:61:fe:53:
ad:f7:c1:e0:23:d8:a2:bd:d9:e5:e6:87:f0:0f:58:
84:6f:53:98:4e:28:22:b5:2d:93:87:ba:85:43:d4:
c2:31:7f:1f:f2:c0:51:27:20:84:55:5e:44:2b:b3:
67:df:86:0b:3a:4b:98:91:d6:65:b8:bf:0b:b9:c1:
08:27:2f:57:b2:54:5f:1c:53:1c:56:c9:a7:07:8b:
4d:fc:c5:6e:29:90:9f:3b:5f:2b:2f:0c:00:9d:37:
3e:07:bc:73:3f:12:8e:6e:61:d6:fe:6c:68:0d:f3:
6f:69:ed:2b:35:c9:93:ea:d0:08:5f:91:ee:5a:63:
9f:8c:fb:db:49:fc:5a:3a:68:04:be:f4:9e:4e:5e:
1f:b1:6b:8c:89:57:66:23:92:b2:13:ce:df:e9:04:
f0:40:c1:4d:54:7d:be:af:6d:bb:93:6a:49:c8:f3:
89:9c:c9:cb:ca:5c:95:2a:33:b9:4d:cb:30:19:58:
51:9d:48:44:f0:74:a0:ad:bf:f6:88:80:ae:fd:94:
25:b2:84:f8:fc:93:78:45:fe:97:3d:a5:6b:83:f1:
f5:27:a9:f4:90:b3:82:8f:25:8e:eb:20:e9:4b:0b:
ec:2d:7f:73:07:c0:57:c6:0c:97:c9:60:eb:ca:ad:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:8B:A4:00:B7:E4:BF:4C:4A:E1:BC:30:76:21:EC:23:47:E6:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/tx2LpAC35L9MSuG8MHYh7CNH5t4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:964::/48
2001:678:974::/48
2001:678:97c::/48
2001:678:a00::/48
2001:67c:1250::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49697
205927
Signature Algorithm: sha256WithRSAEncryption
3e:f9:44:cc:a3:ab:d2:d2:72:d1:60:1d:2f:49:fe:96:1a:45:
ce:18:25:9c:01:47:94:f7:22:80:76:89:e6:90:66:b7:b1:53:
81:a3:15:7d:99:ea:45:60:2d:51:49:89:e8:8d:05:4b:31:36:
46:a6:a3:89:5d:4e:5f:c4:48:3c:72:8e:87:ef:1d:d8:d5:27:
c1:64:19:c7:be:e9:02:30:60:28:7e:17:10:ab:62:a3:0e:56:
c1:ba:0d:ba:bb:7a:80:e7:d8:f6:42:d5:fd:0d:23:f9:fa:dd:
19:60:49:5d:88:fd:a7:12:10:b2:e8:f0:57:75:99:2e:46:34:
f7:e4:6e:ae:30:93:dc:d9:d2:c0:84:7c:69:b3:e2:18:0c:96:
e8:5b:81:ae:24:f6:38:3e:2b:4c:93:d9:f6:00:81:fc:1c:5d:
6b:83:85:1c:c0:a3:a3:6f:47:a7:66:40:2b:eb:f2:3f:d4:a8:
d2:7a:6b:eb:91:53:d9:ca:13:2c:70:2b:59:61:40:c5:64:ac:
02:ab:f0:f6:7a:5f:86:1f:ce:28:1b:66:61:43:d1:bb:48:a6:
b2:96:fb:18:2d:b7:36:b3:9a:7d:83:5e:98:19:86:b4:8e:13:
0a:4d:9a:f2:21:cd:4c:ac:a7:79:a6:fb:e0:9f:7e:77:54:25:
08:fc:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:23:30 2025 by rpki-client