Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer
File: w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer (raw, json)
Hash identifier: A3/49JjPADIgp2rYgUWvbHbTSGxTBMCJIY0o25yqZt0=
Subject key identifier: C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D6D3DA4120096C7E851AE5669F3437
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/w0wT7PJqxwL3aMmREL9mLpkTl5Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 41792
IP: 185.145.244.0/24
IP: 2a10:1cc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:d3:da:41:20:09:6c:7e:85:1a:e5:66:9f:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c34c13ecf26ac702f768c99110bf662e99139794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:14:5e:ff:5d:b8:c1:50:0e:a7:24:45:32:
ad:23:90:37:31:4c:75:87:2d:8f:b4:04:d4:c2:d5:
1e:0c:a4:c7:98:a7:2c:1e:37:1f:20:16:95:11:7e:
34:a3:06:c8:f7:eb:d2:ec:b1:f0:3a:59:be:dc:db:
15:1c:44:72:0d:d2:68:b2:62:b8:48:ad:85:fe:22:
ee:b2:12:54:73:dd:2c:79:de:da:6e:c7:50:90:ed:
ee:00:16:68:8b:09:9e:d7:e6:9e:2f:25:7d:50:04:
44:20:ab:f5:48:d1:5a:96:e9:a5:bb:98:1f:72:bb:
b6:34:39:5f:fa:f8:36:19:cb:56:f5:e6:20:12:cf:
d0:ac:7a:ac:e2:e3:de:a4:dc:f1:70:67:99:07:37:
50:ad:40:cb:52:a4:8e:8c:8c:b6:76:af:f5:a5:b0:
67:a1:3f:a0:c6:3f:24:da:cc:11:6c:d3:7a:24:37:
d0:f2:d2:92:ec:0c:71:c8:18:e8:95:a1:9a:ca:66:
e0:78:50:aa:e9:b0:10:4e:09:6c:8f:18:21:7d:b2:
24:d9:23:8e:02:e4:f9:44:f9:b4:c1:9c:6d:f6:61:
5b:82:09:e6:36:f6:09:55:68:59:14:14:fc:e4:11:
4a:ea:82:8e:cd:46:f6:27:5a:f8:54:c3:b6:46:83:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/w0wT7PJqxwL3aMmREL9mLpkTl5Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.244.0/24
IPv6:
2a10:1cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41792
Signature Algorithm: sha256WithRSAEncryption
ae:d4:b9:96:e6:86:42:7c:8e:d7:f5:1f:68:72:41:e7:cf:d6:
78:d7:e0:83:68:02:72:2a:a3:c8:ac:fa:fe:78:9f:68:2d:19:
c9:f4:f5:91:ee:53:0a:97:05:87:cd:ed:aa:fd:8f:ce:01:ef:
6a:ea:dc:b4:af:42:62:c6:85:ae:fd:c9:d6:42:b8:a5:ff:b3:
d9:e5:2e:2a:3d:89:68:a1:6a:9a:83:ff:e1:d4:51:7b:24:ad:
56:e2:9d:08:47:51:8d:0a:b3:a3:7d:eb:bf:39:90:28:c0:ae:
72:37:28:4e:1c:a6:f9:19:1b:17:d2:72:41:96:5c:8f:60:51:
a2:1a:bc:72:d4:10:bd:bc:7b:53:f2:f9:fe:40:f3:23:54:b7:
c6:ea:c8:fb:4a:68:91:70:fe:4f:fe:43:fb:b6:c6:98:65:14:
82:1f:dc:67:b5:22:47:f1:fd:45:cb:f2:f4:f7:20:6f:67:63:
00:cf:76:b5:01:e5:93:4a:b4:ad:d0:b5:af:a9:7c:c6:c7:e4:
34:3a:6d:55:dd:a6:7e:04:ae:58:ac:53:ac:35:6f:00:61:f6:
16:cc:e1:ef:d4:2a:be:e5:27:2b:c3:70:95:95:52:f1:20:f6:
66:d6:f1:8e:53:3a:d9:9c:95:ec:e4:47:d5:bd:00:67:61:95:
b5:8b:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:36:54 2025 by rpki-client