Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xGOEhedcTYo2AYyjbXiTIRBIYSc.cer
File: xGOEhedcTYo2AYyjbXiTIRBIYSc.cer (raw, json)
Hash identifier: fzZ61GTR/DjThiv5joEJOVLlx3gr3cOwoVToQUpltUg=
Subject key identifier: C4:63:84:85:E7:5C:4D:8A:36:01:8C:A3:6D:78:93:21:10:48:61:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0F87C3B68
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/xGOEhedcTYo2AYyjbXiTIRBIYSc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:03:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 197495
IP: 91.221.196.0/23
IP: 185.10.8.0/22
IP: 2001:67c:3c0::/48
IP: 2a03:53c0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691363658600 (0xa0f87c3b68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4638485e75c4d8a36018ca36d78932110486127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:56:3b:af:b6:ff:b3:54:2a:19:a4:4c:7b:
12:22:48:1d:b4:bf:5d:ad:d9:f5:1a:24:27:e5:b3:
2e:de:6b:cd:d9:14:45:7e:89:1f:60:83:22:a7:90:
43:51:8f:22:8b:86:a7:ed:ce:e3:45:8a:80:3a:fc:
94:a8:31:4c:05:39:fd:f3:1f:a6:14:03:ea:db:43:
90:04:02:d6:64:5b:2a:71:c3:a0:f5:db:29:1d:53:
f0:0a:75:fd:bb:3f:9a:b3:f2:e9:c7:2c:6f:60:7f:
13:24:c5:16:d8:60:7d:f7:34:62:fb:9c:ef:a8:ae:
3b:fd:9f:5b:1e:5f:5c:9c:a4:33:80:be:cd:1a:15:
07:a1:64:dc:19:87:b8:f1:d7:7f:07:3a:6f:79:49:
4c:e9:93:22:b2:01:d2:b6:9c:81:95:c5:38:4f:fc:
e7:7c:80:38:15:90:66:47:42:a6:dd:b2:98:13:e9:
15:de:c6:c3:ce:79:f0:93:f3:eb:e3:af:8e:96:6a:
f2:df:86:9e:bd:54:9e:f7:03:83:25:82:0a:75:f5:
f0:12:a6:93:0b:84:07:91:d4:66:00:35:7c:81:dc:
51:bb:3b:26:f5:5e:de:e3:ee:f4:a4:fd:06:7c:46:
05:19:02:93:d9:eb:68:89:07:24:ac:04:5b:22:f9:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:63:84:85:E7:5C:4D:8A:36:01:8C:A3:6D:78:93:21:10:48:61:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/xGOEhedcTYo2AYyjbXiTIRBIYSc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.196.0/23
185.10.8.0/22
IPv6:
2001:67c:3c0::/48
2a03:53c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197495
Signature Algorithm: sha256WithRSAEncryption
9a:1e:7c:5d:c3:41:8f:59:16:52:3b:9c:26:16:59:ca:90:24:
0a:7a:ba:b0:90:ed:df:8a:e4:c4:7d:e2:b4:e9:d5:3f:2e:10:
37:95:f2:9a:5c:3f:03:5f:79:04:8f:24:a5:e8:60:bc:7b:e4:
a6:4d:b4:e4:c9:c0:a5:6e:0a:01:c6:33:b4:15:75:db:52:e9:
1e:5f:61:2c:f8:af:fb:2b:bb:19:81:67:c4:44:2c:44:ed:bf:
79:76:e4:cc:30:7d:0f:f0:1c:18:8a:97:25:5d:b6:18:64:3e:
26:ef:d6:e0:c4:73:43:d9:88:b3:c4:14:0e:22:10:cb:d8:f4:
06:15:3e:7d:56:88:9b:df:01:6c:75:8f:7d:aa:56:b5:08:4b:
b5:8d:50:83:cf:0d:50:51:da:ca:10:8c:11:6c:5f:c9:4a:17:
24:cb:e3:75:ee:79:bd:1f:29:c3:d1:1f:34:16:b0:8e:f3:2f:
41:fa:1a:f1:e8:4c:3b:e5:01:0f:4a:01:d6:1a:05:90:4c:51:
25:54:aa:e2:e6:0c:e9:ff:0b:f9:03:29:cb:e5:58:4a:c3:60:
9a:7a:8d:4b:08:12:1e:61:4f:21:be:62:50:53:88:8e:9c:32:
f3:f6:41:4e:ac:53:f4:e1:44:39:f7:63:43:0a:8b:a3:d6:b2:
51:ae:e0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:06 2025 by rpki-client