Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zRMB3ZP9fMXPJTtmimkyqnK1pik.cer
File: zRMB3ZP9fMXPJTtmimkyqnK1pik.cer (raw, json)
Hash identifier: kx4zYF5hD5iiXHqYWFtEZn+S+3iGc8MwFOQzAnRep9k=
Subject key identifier: CD:13:01:DD:93:FD:7C:C5:CF:25:3B:66:8A:69:32:AA:72:B5:A6:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AD39ABA9DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zRMB3ZP9fMXPJTtmimkyqnK1pik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Feb 2022 13:56:45 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.223.131.0/24
IP: 2001:67c:20cc::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743996893662 (0xad39aba9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 13:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd1301dd93fd7cc5cf253b668a6932aa72b5a629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:ef:29:05:b1:17:5e:48:30:3b:a3:8d:0f:
5e:7c:15:2d:2e:7c:88:b1:a1:27:c8:e9:52:14:2e:
da:50:7f:da:1f:5f:05:a2:6e:9e:30:73:81:8b:6c:
0b:ef:f8:fb:79:8f:02:df:0d:3a:2f:5f:34:00:05:
14:35:e3:7e:b4:b5:e0:b0:a0:60:25:f4:01:df:6b:
a0:3c:c1:bc:8f:4b:91:8b:18:2c:6b:ef:f6:74:8b:
37:49:b3:81:80:31:36:c5:42:f0:8c:e5:a8:7a:92:
8a:5a:bd:d8:cb:da:f8:4f:4e:c4:5d:d6:ad:f9:40:
45:4d:e0:e0:8a:a8:65:5b:66:8c:9f:3b:0e:ac:75:
03:af:0d:39:22:0f:20:66:af:5d:5e:e8:ed:62:7c:
07:0c:12:1e:29:25:d5:54:d0:41:fd:99:fe:bf:4c:
cb:34:22:11:09:4e:d5:c1:42:09:eb:b9:10:85:d3:
fe:b0:c4:f2:98:38:1c:19:46:5d:51:cf:01:12:35:
45:99:36:cd:15:00:f3:61:1a:fb:07:4c:96:6b:09:
38:25:53:78:14:4a:7e:6c:08:df:43:1f:7b:3f:46:
66:ad:35:f1:8b:a6:2f:f2:59:57:b2:12:8b:7b:12:
76:f6:a1:6b:d1:62:ec:d1:c2:1d:bb:1b:a0:69:46:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:01:DD:93:FD:7C:C5:CF:25:3B:66:8A:69:32:AA:72:B5:A6:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zRMB3ZP9fMXPJTtmimkyqnK1pik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.131.0/24
IPv6:
2001:67c:20cc::/48
Signature Algorithm: sha256WithRSAEncryption
65:ef:3d:9f:0b:c9:cf:98:58:4f:38:86:68:15:0b:c0:b9:58:
b1:1d:68:49:4a:bd:2b:27:46:e4:16:1d:34:51:49:20:8c:50:
1b:c0:f0:59:d2:d0:b0:bc:8e:f6:37:64:13:09:7e:00:58:fa:
d8:35:61:65:bb:62:26:1a:e6:e8:61:d5:45:d4:81:86:cd:01:
0d:a9:5a:80:31:ef:1b:4e:70:16:72:4b:0f:48:03:62:b5:25:
03:88:0e:8f:32:c9:fc:9a:c7:50:66:87:21:ca:97:68:26:b7:
0b:93:ab:70:6f:95:3d:77:0e:48:eb:c2:16:5e:cd:79:e0:8a:
77:77:a6:0a:0a:5e:af:88:88:e5:30:5f:c7:ba:2d:45:aa:53:
f4:93:55:fe:08:ed:ee:21:b8:56:a8:45:32:a0:56:e0:f3:5f:
48:99:cc:4e:4f:1b:f0:de:f8:c7:ce:03:f9:70:75:4d:57:fc:
23:91:b8:16:6a:66:be:e8:71:e8:e9:f8:4a:de:a3:ad:b0:1d:
61:31:11:c5:b8:17:a6:f8:d2:18:91:82:5d:30:2d:12:3c:f7:
0e:96:3c:ac:3c:34:81:c3:46:f4:fc:5a:88:f1:78:af:f1:ac:
6e:ed:f6:cd:17:26:d4:94:bd:82:51:8e:f1:d7:8b:f5:cb:fe:
dd:61:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:32:29 2025 by rpki-client