Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zJklGlcsQEbgrVWgTmt7bkZkOGw.cer
File: zJklGlcsQEbgrVWgTmt7bkZkOGw.cer (raw, json)
Hash identifier: g/3+c1tZQgpURC+HKUDbjtur/uoZDvY6snz/uVE6LzE=
Subject key identifier: CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245F7BF9361C74FA8D3034B11EC5562
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.4.0/24
IP: 2a12:d600::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:f7:bf:93:61:c7:4f:a8:d3:03:4b:11:ec:55:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc99251a572c4046e0ad55a04e6b7b6e4664386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:91:43:eb:8a:0d:d8:4e:32:d0:26:f1:35:0a:
c1:30:7e:6f:8f:b8:0e:bd:75:3e:9f:08:43:3c:de:
d9:ea:36:c8:70:21:83:d1:29:4d:16:91:33:f0:71:
47:b5:d7:7a:3a:8d:05:36:c7:61:24:40:c1:78:74:
28:16:37:e7:0c:e8:a1:db:4a:cb:fd:85:06:83:14:
04:ec:e9:d7:fd:c5:55:89:37:ac:d4:66:de:e1:9d:
53:e2:d9:70:1f:26:25:27:ed:dd:ef:bd:dd:45:e7:
02:af:11:f8:c2:9d:63:c6:32:03:70:e7:ec:7b:78:
ea:9a:52:2e:85:b9:da:7c:1a:e9:ee:82:5d:76:be:
1e:0c:1a:39:2a:66:a5:ff:93:fb:43:26:78:25:d7:
42:71:42:87:02:5f:d8:78:67:85:97:f9:71:ac:2d:
22:ff:b9:0c:e8:3a:29:db:ed:c1:92:f5:9c:25:8c:
bb:d8:d8:8f:1d:5c:6b:b4:34:3c:a2:d2:21:cb:c5:
c9:cc:13:2e:87:71:11:76:98:ca:99:6e:31:33:7e:
83:9a:35:48:51:32:d0:05:ce:44:56:d3:59:2c:ff:
27:b6:7a:eb:05:76:12:f9:a5:97:9c:4a:1b:32:28:
09:65:a2:79:7e:35:7a:87:90:b7:de:83:82:d7:2c:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.4.0/24
IPv6:
2a12:d600::/29
Signature Algorithm: sha256WithRSAEncryption
a0:e9:5c:48:24:d5:8a:87:c3:3c:11:d2:ac:ff:f9:4a:cc:f7:
24:74:d1:b8:88:a5:43:47:32:8f:b9:7c:17:77:30:51:86:bf:
a9:2f:cd:13:f5:fe:95:21:10:fc:06:e6:67:73:6e:18:18:09:
a4:bd:b1:26:84:b1:3f:00:12:e4:41:03:35:0e:ce:a0:3d:74:
15:84:ee:e0:70:e9:70:23:8d:cf:af:7d:f9:cf:b0:49:d9:57:
54:a1:53:aa:56:eb:d8:96:53:e7:8a:e4:c4:72:7a:2f:94:6b:
95:b3:a8:47:0b:a3:85:bb:b8:07:84:1e:89:e1:d9:57:ae:dc:
45:7e:4e:62:76:66:07:df:22:5e:a9:ab:27:aa:e6:31:49:b3:
7d:e8:59:2d:b1:2a:5c:9e:a1:67:7f:db:a7:28:ac:6a:60:b6:
fb:fb:33:9f:32:f9:3f:1d:64:92:98:52:d8:85:9f:2b:06:06:
32:70:2f:b1:ab:55:a3:69:4a:e1:d6:99:a7:df:d6:ff:b5:0d:
f5:64:af:d7:78:26:e1:53:78:25:c5:c9:c5:8e:f2:ea:66:26:
14:f1:4c:36:49:37:3f:bd:3c:7d:ce:3f:d7:eb:d3:7a:24:b4:
47:b6:df:e4:17:9f:ab:66:9b:42:99:e1:9b:92:45:90:a7:51:
ed:10:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:35 2025 by rpki-client