Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/unH5gVBTju5p3u0tUyMSqinXxyE.cer
File: unH5gVBTju5p3u0tUyMSqinXxyE.cer (raw, json)
Hash identifier: ueo0MFsF2BMEE2aMH1VNwN3VeT4jzHTgWukJCJ9WpF0=
Subject key identifier: BA:71:F9:81:50:53:8E:EE:69:DE:ED:2D:53:23:12:AA:29:D7:C7:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0FB6499F958016F905162565FEFEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/unH5gVBTju5p3u0tUyMSqinXxyE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.53.0/24
IP: 2a11:bd40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:fb:64:99:f9:58:01:6f:90:51:62:56:5f:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba71f98150538eee69deed2d532312aa29d7c721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:89:ba:17:91:55:12:1b:ab:0b:5d:65:2c:
c4:bb:05:08:80:7b:49:d0:f7:ad:26:20:9f:c5:4f:
4c:e8:3e:00:6f:36:50:9a:af:d0:52:e3:3f:65:81:
b4:9f:17:83:fc:d3:f0:7c:b5:a1:44:64:29:87:98:
03:90:8e:04:c7:16:d7:bd:6f:11:56:d6:34:1f:5c:
b2:bc:78:61:da:67:e4:ec:fe:3b:0a:4b:52:d4:c3:
64:f4:0a:5f:bd:8c:f7:ed:39:77:b4:4e:ed:94:3a:
75:9f:99:6b:26:ce:86:b1:ae:29:77:ac:49:7a:83:
08:09:19:76:f3:9b:62:53:e8:0d:c3:b3:31:17:c0:
19:df:b4:ed:bf:4f:e0:aa:fe:e3:4d:07:88:b9:14:
14:d2:b4:66:98:da:f6:e4:24:3a:94:74:ff:9c:d3:
04:40:5d:64:d8:e4:37:66:7f:3d:c1:6b:1b:97:26:
34:76:8e:c0:f3:bb:6b:4d:e2:ac:8e:ae:f8:39:2b:
87:07:8a:02:9b:35:65:0f:ea:5b:4d:e9:75:ac:b7:
98:78:cf:e6:11:68:7b:2f:cc:06:7b:e9:05:cb:f8:
e7:ca:aa:a2:bb:a9:85:c1:61:fd:ad:88:3f:89:50:
6c:e1:08:44:95:f9:61:1d:c2:9a:2c:43:2e:d5:9f:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:F9:81:50:53:8E:EE:69:DE:ED:2D:53:23:12:AA:29:D7:C7:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/unH5gVBTju5p3u0tUyMSqinXxyE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.53.0/24
IPv6:
2a11:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
a5:2c:cb:4c:f9:32:d7:74:3b:73:58:47:6d:65:d6:a9:7d:5a:
1f:4d:29:d7:19:24:c1:26:40:7f:a1:ec:8c:d8:3b:7a:24:2d:
fe:9e:47:bc:c7:bb:84:b4:8c:62:12:b4:e5:28:aa:ef:89:0c:
01:80:e2:a2:04:e5:51:3a:02:e4:f2:79:3f:95:57:30:fb:b1:
e3:14:df:d6:af:01:20:bd:15:02:bd:70:eb:cb:9a:d6:45:02:
e3:86:29:76:2a:4c:e9:86:e4:c2:22:1e:d4:52:f7:3c:8f:2c:
67:0a:09:44:3d:cb:af:20:aa:38:31:ea:15:50:64:f6:f3:eb:
cc:b6:25:82:d3:30:c1:9e:48:ce:c2:42:60:e1:2a:3a:68:ba:
ef:75:81:06:87:6d:ea:8e:51:18:ec:b5:ac:d2:ea:ea:f7:0a:
b1:75:9c:2e:8a:38:4e:71:15:5b:d2:4a:23:29:75:3c:80:6b:
01:27:84:e5:a2:85:e2:e1:d0:52:fd:da:bc:2b:95:01:b5:6f:
a3:ed:4b:18:7b:4b:0c:45:56:69:66:a9:be:dc:0a:64:87:4c:
d5:52:a2:58:a0:8e:bf:f6:83:3c:6f:8e:24:b8:c4:e9:d7:e0:
44:ed:d2:73:80:cd:bd:01:bc:ed:02:87:6a:ec:eb:7c:78:fd:
2d:0e:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:13:58 2025 by rpki-client