Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zILDml8-keoFBRuz7ZwNFq6C-gw.cer
File: zILDml8-keoFBRuz7ZwNFq6C-gw.cer (raw, json)
Hash identifier: O99iXG3xP6T5W76k6vvKSrlcp5P/noH0WrBy6j1cZ4o=
Subject key identifier: CC:82:C3:9A:5F:3E:91:EA:05:05:1B:B3:ED:9C:0D:16:AE:82:FA:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD13DE4409296D3E9714D2FBED4142F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/zILDml8-keoFBRuz7ZwNFq6C-gw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 25502
IP: 193.37.251.0/24
IP: 195.245.200.0/24
IP: 2a00:7320::/29
IP: 2a07:f6c0::/29
IP: 2a09:b080::/29
IP: 2a0c:1f40::/29
IP: 2a0d:6640::/29
IP: 2a0d:6c40::/29
IP: 2a0d:6cc0::/29
IP: 2a0d:71c0::/29
IP: 2a0d:75c0::/29
IP: 2a0d:78c0::/29
IP: 2a0d:7bc0::/29
IP: 2a0d:8900::/29
IP: 2a0d:8e40::/29
IP: 2a0d:91c0::/29
IP: 2a0d:99c0::/29
IP: 2a0d:9dc0::/29
IP: 2a0e:5000::/29
IP: 2a0e:6500::/29
IP: 2a10:9fc0::/29
IP: 2a10:a040::/29
IP: 2a10:f900::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:3d:e4:40:92:96:d3:e9:71:4d:2f:be:d4:14:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc82c39a5f3e91ea05051bb3ed9c0d16ae82fa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:13:20:73:54:57:9e:45:ea:08:8f:7e:38:
a4:ca:a0:d5:b6:93:c7:fe:5b:bf:80:2d:a7:16:30:
4f:c5:ed:2d:24:15:33:0a:87:b2:8c:cd:2e:ea:32:
05:0e:f2:5f:62:dc:11:1f:4d:a5:9e:c8:1c:03:f4:
b4:31:e4:20:6f:5d:72:97:58:20:be:3a:35:73:7e:
fd:80:32:27:53:13:50:73:58:9c:af:4a:91:f6:5c:
44:f9:e1:b1:d3:c0:ca:0b:05:e9:19:3e:12:99:20:
ff:d6:36:43:a4:c9:ba:32:6b:ed:81:82:ee:48:aa:
b2:9d:85:3f:4d:4c:e0:2f:b3:07:f7:67:13:a6:ae:
40:7c:4b:7e:50:26:73:79:c9:4e:4d:70:4a:3f:5a:
6e:3e:da:9f:0d:d9:ff:1d:f1:a5:61:3e:64:5e:17:
45:8d:67:92:ad:f7:5e:e7:09:58:f6:7a:61:85:35:
20:61:ad:12:0d:67:ea:f3:76:18:44:33:89:cd:39:
75:f1:84:ab:40:2b:a0:4d:6a:4a:02:fe:11:a0:3a:
c9:64:62:e3:2f:ea:ca:b2:d0:af:83:aa:d2:3e:b8:
09:3f:a0:da:9c:3e:e9:3c:a9:e3:0e:48:d7:06:af:
41:56:9e:22:78:5d:24:87:59:f8:43:ec:87:b0:2c:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:82:C3:9A:5F:3E:91:EA:05:05:1B:B3:ED:9C:0D:16:AE:82:FA:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/zILDml8-keoFBRuz7ZwNFq6C-gw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.251.0/24
195.245.200.0/24
IPv6:
2a00:7320::/29
2a07:f6c0::/29
2a09:b080::/29
2a0c:1f40::/29
2a0d:6640::/29
2a0d:6c40::/29
2a0d:6cc0::/29
2a0d:71c0::/29
2a0d:75c0::/29
2a0d:78c0::/29
2a0d:7bc0::/29
2a0d:8900::/29
2a0d:8e40::/29
2a0d:91c0::/29
2a0d:99c0::/29
2a0d:9dc0::/29
2a0e:5000::/29
2a0e:6500::/29
2a10:9fc0::/29
2a10:a040::/29
2a10:f900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25502
Signature Algorithm: sha256WithRSAEncryption
57:6d:93:18:07:b6:19:08:e4:2e:6a:2a:0e:f7:4d:25:ea:a0:
ef:1c:b0:b3:46:9a:c9:3d:a4:1f:94:c9:cc:cd:57:6d:af:64:
cb:5b:db:53:d6:ae:ec:be:15:db:f1:5d:d9:c1:4b:4c:20:13:
12:eb:0f:66:17:3b:08:f1:e7:f6:3a:38:6d:36:d4:f9:bd:8c:
03:0d:6c:f3:ec:cb:cb:77:1d:4d:05:82:0f:8e:fe:9b:00:4c:
38:9d:bc:8a:88:ca:eb:76:b8:b8:ef:11:b5:2e:62:a4:6a:d5:
60:9a:36:b7:29:a6:7e:0a:10:15:5d:be:8d:d9:f8:d5:99:49:
03:59:fb:d8:49:d7:49:79:0c:ca:4a:93:75:6d:f5:8b:40:da:
59:98:a4:f9:5b:4d:33:d2:e1:d5:04:c7:a7:ff:1f:77:e7:ec:
19:a2:6b:0e:c5:6b:f1:70:1a:1e:23:9c:36:25:fd:17:64:33:
7c:43:61:cb:a7:9d:f6:42:de:00:28:2b:a0:9c:b2:b9:84:48:
10:07:6c:64:9d:a6:11:24:13:fc:b2:14:e0:27:2d:eb:c3:3f:
08:c2:46:88:61:27:03:a2:01:e4:0c:17:f2:8c:1b:99:1c:5c:
e9:55:94:63:ce:7d:69:24:f4:3b:66:a3:09:e8:9b:0f:6d:21:
ab:19:58:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:06:31 2025 by rpki-client