Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ugTbL8sMW1VlHxwbu02Vx0VXjc8.cer
File: ugTbL8sMW1VlHxwbu02Vx0VXjc8.cer (raw, json)
Hash identifier: AhJ8EgeVFCuA7bY+uLK0UOxyRWnDp0BHUz/i1ORjdEk=
Subject key identifier: BA:04:DB:2F:CB:0C:5B:55:65:1F:1C:1B:BB:4D:95:C7:45:57:8D:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98DC93B653
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/ugTbL8sMW1VlHxwbu02Vx0VXjc8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:51:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60675
IP: 185.27.136.0/22
IP: 185.114.84.0/22
IP: 185.142.192.0/22
IP: 2a00:91a0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656535696979 (0x98dc93b653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:51:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba04db2fcb0c5b55651f1c1bbb4d95c745578dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:6b:7e:f9:24:12:12:b8:a5:f0:86:5a:17:
19:54:26:dd:ad:95:d3:bf:75:2f:c6:39:73:47:39:
95:cc:eb:ff:56:ae:e1:86:25:17:c5:09:07:bc:d3:
7b:4c:3c:a5:3e:be:df:e1:d6:8d:ee:76:53:9f:6c:
6e:5a:42:5e:67:05:ce:e3:48:91:25:2e:4c:6c:e2:
fc:a7:c4:09:6f:73:23:0c:c8:a1:23:93:0d:f4:d0:
2b:dc:8e:f5:05:c0:92:9e:a0:94:ec:49:37:59:2a:
4e:9d:9c:f6:85:c1:1b:da:de:22:40:22:69:0e:0c:
0e:4b:41:63:46:8a:7a:03:78:cc:bd:fb:91:95:9a:
74:eb:0e:24:72:a6:df:3d:bb:28:fc:ae:6f:d6:8c:
a6:4e:5b:e8:54:46:f4:ab:52:ed:37:70:36:44:58:
36:67:13:e3:9b:41:2c:35:dc:ea:d1:2b:96:86:e1:
6a:c1:2f:87:e2:de:d1:a6:2f:07:22:81:a2:09:4c:
f2:f5:c9:0c:1e:b6:6e:09:05:e9:a3:1f:7a:30:71:
47:27:f8:44:8f:8b:10:3c:74:46:ea:3d:bf:09:cf:
f7:ec:b4:8f:65:74:9a:02:48:5f:3d:97:24:42:b4:
22:2f:10:56:c8:20:7b:21:27:44:05:e0:ef:9a:6e:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:04:DB:2F:CB:0C:5B:55:65:1F:1C:1B:BB:4D:95:C7:45:57:8D:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/ugTbL8sMW1VlHxwbu02Vx0VXjc8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.136.0/22
185.114.84.0/22
185.142.192.0/22
IPv6:
2a00:91a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60675
Signature Algorithm: sha256WithRSAEncryption
14:72:c5:31:48:2d:a0:76:e0:4f:d6:37:00:57:47:2b:fb:0a:
1d:d6:c6:b2:1d:51:a7:8d:4b:2e:eb:04:0c:c5:a7:6b:99:aa:
47:1b:dc:55:38:ea:b8:c0:ff:89:d5:5d:bc:44:fd:8b:37:4e:
81:2a:05:9d:17:33:d6:eb:36:fb:0d:46:1f:6a:f3:10:9f:7b:
31:2a:de:c5:94:4e:bc:03:e2:d1:80:fc:2c:91:95:83:89:3c:
e1:84:e4:0b:8d:a2:0f:16:6f:83:db:ec:b6:b1:e0:8d:81:6f:
8c:a3:83:53:91:ce:68:ce:b0:3c:af:90:47:df:f1:c8:f8:d9:
59:dd:a5:c6:59:50:0c:d2:2b:e4:12:72:01:a2:17:b8:e8:dd:
e8:53:bb:d3:cd:47:cf:6f:ea:87:9d:7e:b4:c9:aa:c1:84:9c:
e9:22:28:32:e1:2a:20:77:c8:91:b7:46:41:6c:48:52:c0:e5:
a7:f4:cf:4b:32:88:eb:c0:12:cf:c6:0e:20:e5:dd:0c:96:7b:
2c:1d:53:92:b9:c0:ea:37:54:29:59:83:77:17:86:cf:9f:cf:
71:c2:cd:a2:d3:27:e2:d7:f6:0c:55:e3:fa:3e:1a:1e:92:94:
17:37:f5:33:6d:83:ea:5b:5d:d0:39:86:9d:ca:a6:be:f5:c9:
41:1e:54:77
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIGAJjck7ZTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDA1MTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiYTA0ZGIyZmNi
MGM1YjU1NjUxZjFjMWJiYjRkOTVjNzQ1NTc4ZGNmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEApKVrfvkkEhK4pfCGWhcZVCbdrZXTv3UvxjlzRzmVzOv/
Vq7hhiUXxQkHvNN7TDylPr7f4daN7nZTn2xuWkJeZwXO40iRJS5MbOL8p8QJb3Mj
DMihI5MN9NAr3I71BcCSnqCU7Ek3WSpOnZz2hcEb2t4iQCJpDgwOS0FjRop6A3jM
vfuRlZp06w4kcqbfPbso/K5v1oymTlvoVEb0q1LtN3A2RFg2ZxPjm0EsNdzq0SuW
huFqwS+H4t7Rpi8HIoGiCUzy9ckMHrZuCQXpox96MHFHJ/hEj4sQPHRG6j2/Cc/3
7LSPZXSaAkhfPZckQrQiLxBWyCB7ISdEBeDvmm4DxwIDAQABo4ICuzCCArcwHQYD
VR0OBBYEFLoE2y/LDFtVZR8cG7tNlcdFV43PMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzEzMzZkNC00MjgxLTQ3NjMt
YWYyOS00N2ZlOWM3YTRkODQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvMTMzNmQ0LTQyODEtNDc2My1h
ZjI5LTQ3ZmU5YzdhNGQ4NC8xL3VnVGJMOHNNVzFWbEh4d2J1MDJWeDBWWGpjOC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQCuRuIAwQCuXJUAwQCuY7AMA0EAgACMAcDBQAqAJGgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDtAzANBgkqhkiG9w0BAQsFAAOCAQEAFHLFMUgtoHbg
T9Y3AFdHK/sKHdbGsh1Rp41LLusEDMWna5mqRxvcVTjquMD/idVdvET9izdOgSoF
nRcz1us2+w1GH2rzEJ97MSrexZROvAPi0YD8LJGVg4k84YTkC42iDxZvg9vstrHg
jYFvjKODU5HOaM6wPK+QR9/xyPjZWd2lxllQDNIr5BJyAaIXuOjd6FO7081Hz2/q
h51+tMmqwYSc6SIoMuEqIHfIkbdGQWxIUsDlp/TPSzKI68ASz8YOIOXdDJZ7LB1T
krnA6jdUKVmDdxeGz5/PccLNotMn4tf2DFXj+j4aHpKUFzf1M22D6ltd0DmGncqm
vvXJQR5Udw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 20:57:54 2025 by rpki-client