Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ydUvoVE278-IlMg0sMVfnrBRqhM.cer
File: ydUvoVE278-IlMg0sMVfnrBRqhM.cer (raw, json)
Hash identifier: 8R0NFtsZKHwpSukkvwkDxRuYCnCLxLpqT9CHpWGquCs=
Subject key identifier: C9:D5:2F:A1:51:36:EF:CF:88:94:C8:34:B0:C5:5F:9E:B0:51:AA:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B0565B439C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/abc390-867c-4577-8403-73edbcff92d7/1/ydUvoVE278-IlMg0sMVfnrBRqhM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/abc390-867c-4577-8403-73edbcff92d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 Apr 2022 09:39:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.227.77.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757363065756 (0xb0565b439c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 21 09:39:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9d52fa15136efcf8894c834b0c55f9eb051aa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:3a:e9:ef:1b:4d:d9:9f:b6:3f:ad:1c:ed:
22:6f:d4:a3:83:49:41:c8:71:da:c8:f0:e0:0b:9a:
e5:c1:f3:5b:8d:ba:e5:75:80:9d:ed:ca:d7:de:8b:
3a:2e:d1:11:f5:0e:be:49:db:12:6d:42:f2:93:77:
d4:7b:75:3e:26:ab:17:46:f2:93:df:e5:cd:b8:a6:
b0:1b:bd:e4:5d:2d:f5:2f:e7:48:80:51:44:52:3e:
34:8e:7a:95:a8:2c:4d:57:cc:ad:36:25:7d:3b:ec:
6e:9e:79:ea:65:03:8d:5d:fa:30:33:37:68:9c:75:
c1:2e:b2:4f:88:02:1c:a0:53:64:fc:87:cc:ac:20:
c7:2e:e4:01:2a:7b:a8:60:ba:b5:27:3d:f3:91:c0:
8f:3f:b4:08:e5:5e:ae:1f:4d:d5:49:93:a8:ff:33:
3c:98:9a:ef:01:fc:98:a5:85:03:57:f8:d5:10:e0:
f3:28:c1:58:8a:ff:13:c6:07:66:47:8a:58:65:ae:
5d:be:20:ed:84:e5:22:6b:bb:91:63:7c:3f:ca:9f:
d7:f8:7e:4f:95:cd:c7:3d:75:ad:d1:75:d8:64:4d:
ec:bf:b0:5d:36:c0:a9:22:fa:ef:b9:0d:42:d4:df:
db:61:5f:b1:da:d9:fc:28:13:8e:89:60:77:91:b1:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D5:2F:A1:51:36:EF:CF:88:94:C8:34:B0:C5:5F:9E:B0:51:AA:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abc390-867c-4577-8403-73edbcff92d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abc390-867c-4577-8403-73edbcff92d7/1/ydUvoVE278-IlMg0sMVfnrBRqhM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.77.0/24
Signature Algorithm: sha256WithRSAEncryption
37:24:34:25:59:67:78:e8:e9:78:0d:98:0e:d3:2a:3d:0e:c6:
79:00:f9:ec:45:76:dd:d8:fa:cd:f1:32:e8:11:20:46:8a:f0:
46:b6:a9:bc:ce:fe:a4:9f:80:f2:44:fd:98:1b:cd:a1:28:85:
0c:a8:0c:2f:18:ba:3e:8c:ca:4f:7b:95:16:0b:c9:54:27:0f:
3a:95:78:18:18:af:5d:6c:7a:10:ac:13:ae:9c:d5:4b:e3:13:
82:93:02:78:5f:e0:22:2f:dc:84:2f:74:bd:49:cd:26:e4:70:
05:1e:89:d5:e6:8b:92:dd:e5:81:bf:d5:e8:30:a6:d8:5c:d2:
49:5c:75:37:3a:8e:e3:2f:81:60:42:20:06:d3:a2:98:5c:67:
cc:01:67:dd:4d:28:5a:1d:34:53:57:18:b9:e3:56:43:24:5b:
cc:eb:fb:30:cc:04:de:01:c8:9c:d9:b5:b8:c0:30:f8:7c:0b:
d2:6a:85:c5:41:fb:eb:41:21:41:cc:b8:f3:08:96:52:6a:02:
a4:d2:dd:dd:4f:3a:d1:b5:5f:03:7c:8b:7b:64:8e:06:fc:36:
7b:ce:dc:d7:fb:7b:0b:c0:48:0f:6d:c6:99:e3:d1:12:ec:b1:
54:ac:ba:11:b9:00:45:66:b5:08:35:0f:04:03:09:c7:e3:e5:
9a:77:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:18 2025 by rpki-client