Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x00zrDn3wVQMXLYU_5OqprpiSe8.cer
File: x00zrDn3wVQMXLYU_5OqprpiSe8.cer (raw, json)
Hash identifier: gGfHIAzzLhaEzJvQyiTUMPy3iFw5VJqRbExKbqyu65A=
Subject key identifier: C7:4D:33:AC:39:F7:C1:54:0C:5C:B6:14:FF:93:AA:A6:BA:62:49:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2D24D3A82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/x00zrDn3wVQMXLYU_5OqprpiSe8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:59:27 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 31.40.248.0/22
IP: 45.8.228.0/22
IP: 45.11.212.0/22
IP: 45.82.80.0/22
IP: 45.90.44.0/22
IP: 45.128.128.0/22
IP: 45.131.160.0/22
IP: 45.135.232.0/22
IP: 46.149.172.0/22
IP: 85.209.104.0/22
IP: 88.214.48.0/22
IP: 88.218.68.0/22
IP: 194.93.24.0/22
IP: 195.245.102.0/23
IP: 195.245.110.0/23
IP: 213.178.152.0/22
IP: 2a09:2380::/29
IP: 2a09:8f00::/29
IP: 2a09:9440::/29
IP: 2a09:9d80::/29
IP: 2a09:a200::/29
IP: 2a09:d440::/29
IP: 2a0c:9480::/29
IP: 2a0d:f840::/29
IP: 2a0e:3fc0::/29
IP: 2a0e:61c0::/29
IP: 2a0e:6d80::/29
IP: 2a0e:7f00::/29
IP: 2a0e:90c0::/29
IP: 2a0e:b200::/29
IP: 2a0f:59c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699312978562 (0xa2d24d3a82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c74d33ac39f7c1540c5cb614ff93aaa6ba6249ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:18:f6:6b:f3:c7:94:cd:fb:7c:cc:92:f1:50:
c2:23:aa:04:4a:78:05:6f:c8:bd:f1:5c:eb:fb:17:
24:3d:f3:17:7e:72:bd:85:47:2b:f9:c4:c4:ac:9b:
d3:d1:3f:9e:8d:33:34:b2:22:cf:3e:8d:85:cc:dc:
36:e1:5a:55:03:5f:ae:60:09:01:c1:5f:74:2d:e3:
79:b7:ee:2a:62:dd:3f:4d:3a:32:1a:0e:e0:00:20:
fe:70:f0:5e:d0:54:4f:87:ce:28:d4:c8:55:be:2d:
33:e5:de:c6:f4:e3:50:10:b4:f1:ab:c1:33:d1:82:
29:3b:07:1a:4b:d3:b9:18:62:02:4b:1c:44:72:27:
6f:30:78:3c:2f:7c:be:d3:5a:e9:49:ec:74:0e:08:
89:48:67:1c:26:b5:94:bd:e7:6d:90:39:99:10:e4:
73:29:d5:20:28:43:b5:de:2a:bd:b5:bb:a3:2f:f3:
db:e4:4a:a8:b6:3c:5a:d2:46:ea:f8:9e:57:a5:5e:
3f:17:75:86:55:a4:52:09:69:7c:ca:57:7f:04:ef:
dc:59:bc:31:8a:20:84:13:90:14:29:ff:39:62:c8:
3a:aa:a5:c5:85:c3:ef:34:73:15:f5:c1:93:1d:9e:
88:31:0c:d6:be:46:f2:9f:64:04:a1:23:2a:f7:61:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4D:33:AC:39:F7:C1:54:0C:5C:B6:14:FF:93:AA:A6:BA:62:49:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/x00zrDn3wVQMXLYU_5OqprpiSe8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.248.0/22
45.8.228.0/22
45.11.212.0/22
45.82.80.0/22
45.90.44.0/22
45.128.128.0/22
45.131.160.0/22
45.135.232.0/22
46.149.172.0/22
85.209.104.0/22
88.214.48.0/22
88.218.68.0/22
194.93.24.0/22
195.245.102.0/23
195.245.110.0/23
213.178.152.0/22
IPv6:
2a09:2380::/29
2a09:8f00::/29
2a09:9440::/29
2a09:9d80::/29
2a09:a200::/29
2a09:d440::/29
2a0c:9480::/29
2a0d:f840::/29
2a0e:3fc0::/29
2a0e:61c0::/29
2a0e:6d80::/29
2a0e:7f00::/29
2a0e:90c0::/29
2a0e:b200::/29
2a0f:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
14:18:ce:1b:93:68:46:1b:49:39:57:60:9f:11:f4:e6:2f:74:
d4:63:06:1c:20:23:e6:e5:f8:8a:f2:34:4f:ec:49:04:c9:61:
c4:be:02:71:d7:cf:8d:a5:14:d0:c8:21:24:ea:e2:46:77:bf:
31:d9:44:b0:d7:87:86:b9:83:1f:21:b9:83:52:a0:ef:75:9f:
d6:1a:c4:80:34:5f:7a:58:75:aa:77:5a:27:7d:80:76:73:ee:
38:cf:81:df:5d:00:36:9f:5e:b1:a8:45:28:a6:4b:10:4c:82:
5d:26:32:f1:03:a6:37:74:aa:a0:7d:a8:3b:90:36:33:40:21:
50:a8:59:2c:63:1a:f1:9b:35:64:1c:f7:7b:bb:75:1f:9b:c3:
cb:bd:3b:5a:1b:5a:69:e6:d7:b2:df:4d:04:f8:a7:eb:4e:94:
e2:78:73:b1:25:11:ea:c7:ef:61:fb:74:40:fd:a5:96:b8:9c:
76:09:9b:70:21:e9:30:a1:7e:1b:3b:3e:55:61:cc:2d:2d:3e:
3e:c3:d2:49:8f:78:d2:c6:80:79:d7:9c:2d:b2:17:6d:12:6d:
82:df:78:ac:5f:5c:06:d9:ad:15:d9:ff:1f:63:fb:ce:bf:74:
3a:a8:5e:f8:8c:f8:5c:a9:b7:db:9c:01:4c:e1:98:0c:61:bf:
87:50:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:15 2025 by rpki-client