Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wAIW88h5My_ibqlDsppk1VIAabQ.cer
File: wAIW88h5My_ibqlDsppk1VIAabQ.cer (raw, json)
Hash identifier: dm+5IlT2FjWNeQCsORQBaRh8+xDuTCGfvmbvM9hXDAc=
Subject key identifier: C0:02:16:F3:C8:79:33:2F:E2:6E:A9:43:B2:9A:64:D5:52:00:69:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E6FAED0F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/wAIW88h5My_ibqlDsppk1VIAabQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:02:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.140.4.0/22
IP: 2a0e:c340::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680478560496 (0x9e6faed0f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c00216f3c879332fe26ea943b29a64d5520069b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:65:e4:96:6c:f5:6e:22:71:50:60:c9:28:
68:13:a3:7a:d7:3e:ff:f8:f6:7b:b5:d1:65:39:24:
4e:9b:00:b1:f8:82:6c:fe:32:c4:31:ab:63:71:97:
8e:a8:48:21:af:2a:1c:74:07:03:07:36:90:6a:67:
36:d3:e7:34:ea:22:bb:91:b8:b5:5b:23:55:81:40:
24:0b:aa:f0:83:3f:28:df:ff:ed:c2:0a:99:61:91:
a7:0c:1f:38:a2:d0:66:e1:c8:bb:46:96:23:fc:7a:
21:d7:55:86:5e:45:3a:7c:85:97:f0:02:2c:b1:de:
02:49:ea:9b:59:4f:8f:c0:49:05:55:56:7a:ec:55:
da:e8:fd:96:e0:ee:1c:d1:b2:29:2a:ce:99:01:9b:
f8:a8:e0:95:52:e0:0e:64:fb:30:be:55:5d:f9:5c:
c3:b9:f3:8e:f3:67:d9:56:b6:ac:1b:71:99:0d:fb:
b5:66:8c:6f:16:2a:bd:bd:9d:5e:ff:11:0f:0c:24:
8f:dd:a0:49:b6:d3:e2:46:2b:86:65:60:04:80:41:
69:07:9e:54:da:f2:ee:77:f2:f6:13:eb:76:61:15:
f2:2a:8c:73:e4:1a:2d:a4:a8:a3:90:ed:e9:a6:69:
3c:43:cb:ae:44:6b:cc:f1:7f:0a:b4:f9:31:c1:97:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:02:16:F3:C8:79:33:2F:E2:6E:A9:43:B2:9A:64:D5:52:00:69:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/wAIW88h5My_ibqlDsppk1VIAabQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.4.0/22
IPv6:
2a0e:c340::/29
Signature Algorithm: sha256WithRSAEncryption
42:f0:46:bd:37:86:3d:4f:84:be:2b:ad:60:e3:66:a7:45:a1:
88:21:80:cb:ec:d7:8d:bf:1a:b3:39:24:e8:b5:dc:ec:85:45:
c2:b5:e5:c6:c9:fe:13:e1:1e:fb:41:79:91:d9:55:9e:4b:7f:
be:a7:e3:8a:80:2d:17:bc:26:63:d5:45:0f:3e:b9:f2:de:78:
26:84:05:71:dc:d0:f7:1a:81:38:a0:89:c7:c8:b0:b2:ac:5c:
ca:e3:8e:55:69:88:eb:9a:24:a0:26:c7:5a:5e:27:f4:f6:23:
b6:c0:26:1d:32:fd:19:4f:ca:e4:25:5b:34:d3:22:cf:9b:43:
e4:b3:4b:a6:48:da:aa:9f:70:bf:48:5e:72:1e:2f:bc:34:4b:
b2:96:26:52:98:30:22:08:b8:e9:f7:84:23:df:c5:a1:f7:f9:
57:ec:b9:8d:54:34:68:87:e6:36:56:ca:6e:ed:4c:12:73:09:
dd:6a:1b:5f:68:d8:c1:bd:2b:4a:86:7b:9c:05:fb:16:81:89:
3f:ed:9c:4b:31:cf:d0:22:61:68:a7:92:a1:92:a2:e8:39:35:
62:36:7f:1c:75:9d:dc:2f:57:53:ca:40:60:b3:b3:3d:51:eb:
82:cd:1d:6a:8c:eb:3c:14:34:62:52:d2:23:91:c1:8c:ba:84:
66:15:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:12 2025 by rpki-client