Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x1cqRQ4esCKXRsSLK8SSvBkCFPM.cer
File: x1cqRQ4esCKXRsSLK8SSvBkCFPM.cer (raw, json)
Hash identifier: uR7hkls3rG4nDCOjAKZprOVHuKWLp6hApTGKDriLLsQ=
Subject key identifier: C7:57:2A:45:0E:1E:B0:22:97:46:C4:8B:2B:C4:92:BC:19:02:14:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA3A320B29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8fa79-419f-45e3-82be-8c9be9260735/1/x1cqRQ4esCKXRsSLK8SSvBkCFPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8fa79-419f-45e3-82be-8c9be9260735/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:06:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.238.239.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731120798505 (0xaa3a320b29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:06:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7572a450e1eb0229746c48b2bc492bc190214f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:2a:d2:8d:c4:9e:37:9b:46:4f:07:be:bb:
8b:38:8c:b3:a5:79:0a:62:f6:09:30:45:f3:8b:30:
d3:00:38:be:3d:ac:44:68:49:59:99:a3:7f:53:d6:
6e:e6:a5:75:ea:4c:54:48:59:5b:34:f7:a4:f3:58:
28:d1:8e:21:72:69:0d:c6:79:f0:24:45:4d:ec:e7:
8e:de:1f:01:d0:00:03:00:c8:ee:9e:0e:92:8a:81:
f2:ac:0f:c7:4a:7f:97:cf:a7:6d:1e:3b:e9:7e:03:
da:96:0c:38:af:56:31:87:1e:6f:8e:b9:6a:61:39:
89:7a:a8:ce:d0:7f:30:93:c3:99:fa:e9:81:7c:e4:
2a:ca:a7:61:bc:28:3d:61:1a:c4:33:08:77:02:2f:
c5:55:0f:86:7e:5d:5a:5a:8f:b4:88:c6:d2:90:75:
ea:5a:26:38:8c:36:90:49:72:53:5f:0a:a5:24:9a:
5b:c5:e6:b4:93:f4:46:56:8d:0d:99:40:52:52:98:
a3:38:c8:97:b2:8f:c1:ef:bd:a0:f2:1f:6c:64:7b:
78:82:d7:c0:72:5c:9a:dc:ae:90:6c:9a:16:a5:ea:
e1:5c:11:19:e9:be:71:10:67:c6:b8:1f:88:fa:3a:
f2:68:45:72:dc:b9:65:51:84:bc:fa:9e:66:18:f3:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:57:2A:45:0E:1E:B0:22:97:46:C4:8B:2B:C4:92:BC:19:02:14:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8fa79-419f-45e3-82be-8c9be9260735/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8fa79-419f-45e3-82be-8c9be9260735/1/x1cqRQ4esCKXRsSLK8SSvBkCFPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.239.0/24
Signature Algorithm: sha256WithRSAEncryption
50:19:ff:b2:a6:b9:50:a2:6a:72:4b:6b:2e:85:f5:55:0b:67:
fc:98:64:ea:f9:ed:39:29:70:75:9b:c4:9b:71:58:8b:c4:ef:
dd:30:16:b5:2c:25:1a:11:ff:6f:cd:bf:95:d7:32:61:29:50:
35:3e:3f:aa:8f:de:1d:cb:43:3b:5f:7a:c6:71:f8:c1:ec:8a:
73:59:e1:2e:de:38:be:ad:28:ad:3b:96:bb:cc:f9:e9:8a:f9:
f1:2c:f2:fd:85:4a:e1:13:9d:e7:22:a1:60:a5:4b:02:c3:41:
b4:a4:f9:5d:42:64:22:af:bb:cd:09:61:f3:86:5f:a3:bc:47:
b7:be:b9:f6:47:57:81:3d:bb:fe:71:ac:3a:71:60:83:a8:11:
94:6d:68:7d:29:5a:72:8c:e9:b4:44:e5:15:d2:98:bc:ba:70:
f1:2a:25:77:db:9b:8b:55:82:71:55:7d:09:4d:b3:aa:d6:fc:
ca:c4:b1:3c:7e:e9:cb:e0:1d:ec:3d:e9:3a:ba:17:7c:62:7e:
2b:79:d3:99:56:9d:83:fd:ec:79:e6:3a:95:6e:9e:8e:0c:92:
32:d4:a8:3b:1f:11:eb:15:d5:c4:fd:b4:1d:df:48:99:fa:cd:
91:27:9f:7a:ca:1e:d5:c1:1f:27:b3:79:ad:2f:75:81:61:63:
b2:71:13:8c
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKo6MgspMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTUwNjIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNzU3MmE0NTBl
MWViMDIyOTc0NmM0OGIyYmM0OTJiYzE5MDIxNGYzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAzWcq0o3EnjebRk8HvruLOIyzpXkKYvYJMEXzizDTADi+
PaxEaElZmaN/U9Zu5qV16kxUSFlbNPek81go0Y4hcmkNxnnwJEVN7OeO3h8B0AAD
AMjung6SioHyrA/HSn+Xz6dtHjvpfgPalgw4r1Yxhx5vjrlqYTmJeqjO0H8wk8OZ
+umBfOQqyqdhvCg9YRrEMwh3Ai/FVQ+Gfl1aWo+0iMbSkHXqWiY4jDaQSXJTXwql
JJpbxea0k/RGVo0NmUBSUpijOMiXso/B772g8h9sZHt4gtfAclya3K6QbJoWperh
XBEZ6b5xEGfGuB+I+jryaEVy3LllUYS8+p5mGPPT2wIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFMdXKkUOHrAil0bEiyvEkrwZAhTzMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2M4ZmE3OS00MTlmLTQ1ZTMt
ODJiZS04YzliZTkyNjA3MzUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvYzhmYTc5LTQxOWYtNDVlMy04
MmJlLThjOWJlOTI2MDczNS8xL3gxY3FSUTRlc0NLWFJzU0xLOFNTdkJrQ0ZQTS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAW+7vMA0GCSqGSIb3DQEBCwUAA4IBAQBQGf+yprlQompyS2suhfVV
C2f8mGTq+e05KXB1m8SbcViLxO/dMBa1LCUaEf9vzb+V1zJhKVA1Pj+qj94dy0M7
X3rGcfjB7IpzWeEu3ji+rSitO5a7zPnpivnxLPL9hUrhE53nIqFgpUsCw0G0pPld
QmQir7vNCWHzhl+jvEe3vrn2R1eBPbv+caw6cWCDqBGUbWh9KVpyjOm0ROUV0pi8
unDxKiV325uLVYJxVX0JTbOq1vzKxLE8funL4B3sPek6uhd8Yn4redOZVp2D/ex5
5jqVbp6ODJIy1Kg7HxHrFdXE/bQd30iZ+s2RJ596yh7VwR8ns3mtL3WBYWOycROM
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:44 2025 by rpki-client