Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uJ_Qc42UXyCTNKLtYmzZotf-6ls.cer
File: uJ_Qc42UXyCTNKLtYmzZotf-6ls.cer (raw, json)
Hash identifier: FHGqu7X6WjR5k1neF69DlQ/FgP7G+EzWPLHKAWgrEO8=
Subject key identifier: B8:9F:D0:73:8D:94:5F:20:93:34:A2:ED:62:6C:D9:A2:D7:FE:EA:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AFA2432143
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/c7c618-1a34-4496-9990-eeb1981533fd/1/uJ_Qc42UXyCTNKLtYmzZotf-6ls.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/c7c618-1a34-4496-9990-eeb1981533fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Apr 2022 15:52:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.131.114.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754341585219 (0xafa2432143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 5 15:52:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b89fd0738d945f209334a2ed626cd9a2d7feea5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:de:f2:2f:37:97:6c:7d:bc:d7:af:e5:9c:
99:c3:7c:8e:f6:18:af:b4:4e:f6:0d:ad:2f:22:b3:
ed:6c:0a:a2:e3:a3:51:ba:5d:73:2a:84:ed:cf:02:
cb:a4:a6:1e:2a:47:f0:c3:aa:85:d0:c5:da:a8:74:
a3:71:f3:a3:85:9d:a2:b3:fa:7e:6d:59:ce:87:09:
5e:a6:84:a0:9b:e9:46:40:bc:e5:43:d3:2b:e5:54:
4b:f5:b7:b4:be:83:14:9c:09:cd:8c:bc:ff:15:09:
44:a7:b0:6e:e4:89:55:33:34:5c:0d:9a:62:c0:b8:
59:60:9b:5b:c5:d7:bb:04:cc:d9:5f:cb:b0:94:9d:
2b:77:4a:13:9c:f3:3d:2d:b5:27:d5:c5:3d:8a:5c:
c5:54:ac:3c:d1:c9:67:4b:af:ec:f3:0e:af:66:18:
2c:41:c2:8b:06:b3:b9:5f:f9:b0:06:1d:d1:11:da:
b0:b2:db:d5:ed:2e:ea:ed:96:b6:1a:d2:70:e5:41:
a7:e2:ec:a6:a9:a4:52:23:d4:f4:5c:10:05:59:18:
87:d9:05:55:3a:11:25:e4:f2:1f:83:81:bf:ba:e5:
75:14:d7:42:85:72:af:d3:1e:62:4c:5a:ec:42:5b:
4a:5c:ca:27:6b:de:4e:e9:94:07:d4:d9:72:07:92:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:D0:73:8D:94:5F:20:93:34:A2:ED:62:6C:D9:A2:D7:FE:EA:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c7c618-1a34-4496-9990-eeb1981533fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c7c618-1a34-4496-9990-eeb1981533fd/1/uJ_Qc42UXyCTNKLtYmzZotf-6ls.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.131.114.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:45:4d:43:b5:f9:81:07:db:c2:e8:9e:ff:b3:23:b6:34:4c:
f3:39:8d:e6:e0:22:48:97:50:1c:41:45:bc:07:a2:fc:8e:4b:
06:92:26:09:61:0b:c2:2e:98:49:5e:5b:ae:9a:28:39:fc:0a:
7e:06:26:25:96:74:2b:ef:d1:a1:73:64:b3:5b:d0:25:4e:eb:
74:83:3d:d7:10:38:97:db:d7:e2:5a:b6:df:67:ff:4c:7c:ad:
c3:b4:e1:6e:9e:b3:65:dd:0b:dc:a8:48:32:5e:ca:e4:be:05:
fd:b0:fc:bd:40:53:24:55:c6:75:f2:3c:10:6b:fb:ff:53:bb:
59:76:25:5f:40:0f:40:1f:cf:2d:2b:fa:1e:03:d9:28:2e:98:
00:13:37:02:9b:dc:f4:c3:51:50:9f:f1:28:0c:9f:9f:ef:89:
2c:41:e8:81:2f:de:d3:79:18:fb:cd:3c:77:19:61:1a:aa:35:
a1:a7:e6:7d:8a:2d:45:3a:da:0c:e7:e9:a8:97:1f:91:2a:61:
34:9a:7d:e8:c4:e4:9c:3d:8d:28:5f:3d:4e:f8:ac:d5:e9:e9:
f7:95:ca:3b:4b:ab:9d:f8:fa:17:2e:fd:7f:44:b2:e8:5d:ef:
ba:02:b5:e1:f2:74:59:25:80:9f:e9:f3:89:29:e6:ad:1d:78:
a1:c1:97:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:26 2025 by rpki-client