Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uSwtUdHkekLP-PRvE2d14t4ond4.cer
File: uSwtUdHkekLP-PRvE2d14t4ond4.cer (raw, json)
Hash identifier: ua4g3X/NVsFKT/zgL13mZipFwNLYFX3UqkG5urA01Jc=
Subject key identifier: B9:2C:2D:51:D1:E4:7A:42:CF:F8:F4:6F:13:67:75:E2:DE:28:9D:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FB04367633BCBDD009E40DB1A42056
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/894b62-f655-48ae-8a57-7f4205aba191/1/uSwtUdHkekLP-PRvE2d14t4ond4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/894b62-f655-48ae-8a57-7f4205aba191/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 94.103.183.0/24
IP: 2a11:4240::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:04:36:76:33:bc:bd:d0:09:e4:0d:b1:a4:20:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b92c2d51d1e47a42cff8f46f136775e2de289dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:ac:44:9c:e3:e2:bb:74:e1:2d:80:1e:50:
d5:99:3a:d2:e9:2b:74:65:11:c3:9a:72:42:d6:f8:
cd:a1:09:12:0e:c5:b0:d7:9b:33:53:bf:c1:eb:2e:
1f:94:72:13:17:65:4d:c3:ab:a0:92:fc:67:c8:cd:
25:5b:73:94:83:64:26:a8:66:15:3c:79:ec:21:10:
cb:55:ac:a9:fa:f2:7c:1f:b4:77:c5:c8:35:be:08:
48:c3:f1:69:6f:a1:e7:df:95:31:4c:bc:9a:69:2d:
f5:8b:f4:2a:33:16:ba:f2:36:05:3b:7d:da:56:0a:
1e:b2:72:fb:af:21:db:8b:18:e6:19:9f:7d:55:0d:
98:52:b9:6f:8e:4f:83:b2:d6:a1:fb:e0:a0:35:8e:
49:be:f9:8a:bb:61:fb:1b:fd:05:17:05:54:9b:c7:
70:ac:42:41:43:58:0e:61:0c:19:19:66:0d:47:29:
fb:cf:7e:66:45:13:af:58:7d:a1:b0:6f:b9:e3:0a:
57:63:95:51:8d:d6:2f:69:13:95:d3:92:cf:b2:5c:
e0:a1:16:9c:44:3f:d4:93:5a:9d:06:bb:7d:b3:3c:
24:e7:3a:b7:a8:ab:b7:84:8c:5d:b8:6c:1d:c8:2e:
3d:e1:67:62:0d:89:04:71:20:e0:73:d3:d3:6f:6d:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:2D:51:D1:E4:7A:42:CF:F8:F4:6F:13:67:75:E2:DE:28:9D:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/894b62-f655-48ae-8a57-7f4205aba191/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/894b62-f655-48ae-8a57-7f4205aba191/1/uSwtUdHkekLP-PRvE2d14t4ond4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.183.0/24
IPv6:
2a11:4240::/29
Signature Algorithm: sha256WithRSAEncryption
9d:f6:4d:f5:09:30:f0:da:79:2a:75:02:ba:2e:0b:70:a9:fc:
c2:17:93:1b:f2:8b:3e:01:b5:62:77:04:ca:86:84:06:55:23:
ae:27:76:33:e7:88:68:9d:c2:88:29:e5:ad:c3:89:ca:d7:07:
20:16:0f:28:05:e7:8b:ac:60:40:bf:d5:5b:11:6a:07:5d:aa:
23:ad:42:b4:5c:da:44:24:f6:07:1b:0d:d9:cd:83:7c:93:88:
69:6a:27:70:aa:dd:06:8a:4e:84:32:34:0b:63:5a:9a:cf:11:
f6:75:4c:58:0e:bc:88:02:6f:da:57:47:a9:bf:69:d2:8a:e6:
21:76:ff:dc:42:1d:45:7e:fd:91:0f:54:b4:56:b6:01:80:1c:
c3:e1:6f:b9:82:15:c8:56:78:b3:4f:ef:b2:2f:e9:44:25:55:
0e:bb:55:e8:53:eb:a7:ec:5e:4d:10:5b:2f:42:36:a4:c4:77:
ee:09:27:4b:92:76:8d:2f:4c:21:6b:88:95:9d:f2:43:64:bd:
ec:e0:07:54:a9:0f:28:ba:ac:e5:cc:d3:2a:3d:1f:cb:ca:43:
7d:cf:10:cf:0e:6d:f0:e1:dd:9d:8f:4a:58:ab:dc:73:d2:95:
f0:c8:a8:40:84:25:c2:84:d1:16:5b:76:67:82:0f:62:db:9c:
ee:87:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:20 2025 by rpki-client