Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zvMMPHGlg5aBbK_ygnAeM3nZAEY.cer
File: zvMMPHGlg5aBbK_ygnAeM3nZAEY.cer (raw, json)
Hash identifier: PbqzzURi0izG++gaeT4TNMW8z6MnMwWb5hbUzNnx7yg=
Subject key identifier: CE:F3:0C:3C:71:A5:83:96:81:6C:AF:F2:82:70:1E:33:79:D9:00:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A6A4133F3314C522EA3D02ACAE8D6535E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/5511e5-0979-4889-8d55-409716a3a3ee/1/zvMMPHGlg5aBbK_ygnAeM3nZAEY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/5511e5-0979-4889-8d55-409716a3a3ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Sep 2023 11:29:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 47539
IP: 93.95.27.0/24
IP: 2a13:d440::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:41:33:f3:31:4c:52:2e:a3:d0:2a:ca:e8:d6:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 11:29:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cef30c3c71a58396816caff282701e3379d90046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:14:d9:85:f4:e2:1a:eb:3f:85:bf:47:7e:
87:dc:29:6f:05:b7:f4:7d:22:23:06:f1:f4:0e:20:
6d:5c:5c:c2:52:5c:06:34:57:8d:38:f8:c6:dc:5b:
17:c6:eb:7b:63:82:25:e0:ee:b6:7d:cd:3c:b0:89:
6a:5e:39:cd:20:64:28:71:21:fd:1e:04:52:94:ee:
d4:91:25:33:25:0f:d7:1f:a8:ae:87:dc:ef:47:22:
1e:3c:f5:69:da:92:59:2f:11:80:a4:a6:6e:05:28:
0a:25:68:7c:14:50:09:f9:eb:6f:41:34:56:64:e4:
93:85:1f:4e:f3:53:8c:7f:52:66:32:7c:ca:92:cc:
ff:7d:85:87:e7:1b:75:61:1b:58:8e:b9:32:b8:96:
fc:50:07:de:e5:34:08:3e:8c:d5:18:96:96:a2:93:
9e:f5:06:5f:40:94:c5:3c:a5:52:29:8b:4d:0b:30:
20:8c:71:fc:16:fa:38:7d:0a:02:91:c9:02:96:1b:
f0:7b:b3:19:b0:85:72:30:e8:b9:01:d8:57:80:32:
11:8e:55:1e:ee:2e:79:6b:ae:62:21:43:33:27:5f:
b3:8b:ea:19:a1:3a:74:b7:f6:f3:55:7e:32:4e:bc:
87:c5:b6:15:db:29:c9:b0:f1:a8:70:f0:62:98:a3:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:0C:3C:71:A5:83:96:81:6C:AF:F2:82:70:1E:33:79:D9:00:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5511e5-0979-4889-8d55-409716a3a3ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5511e5-0979-4889-8d55-409716a3a3ee/1/zvMMPHGlg5aBbK_ygnAeM3nZAEY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.27.0/24
IPv6:
2a13:d440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47539
Signature Algorithm: sha256WithRSAEncryption
5f:0b:17:5f:41:56:52:ac:01:41:7a:1a:fd:02:40:ab:9e:a1:
29:6c:ae:2c:4f:17:a7:fe:24:6b:0c:c8:14:12:3c:1f:17:3b:
c2:19:26:2b:15:25:25:59:6f:a2:b1:d5:1d:32:65:d9:e8:0c:
df:e7:86:d9:7a:05:76:5d:c7:44:ea:19:e3:39:8c:8d:e5:85:
65:f8:6f:9b:f3:f3:68:34:15:3d:aa:de:63:22:5c:90:1e:15:
5e:e6:9b:c7:ab:57:df:8a:e8:b0:9b:72:12:6d:ff:96:32:38:
b1:7e:aa:d7:d2:3a:e9:1e:04:b4:92:a1:ef:ff:a2:9c:55:ab:
e5:85:4e:df:47:9e:61:b6:31:cf:ea:08:44:53:41:3c:e2:c4:
3f:b5:d4:92:73:30:ac:9c:11:e4:b5:f1:2b:15:68:fd:9d:d8:
e6:2c:a0:3d:92:08:cc:d9:29:aa:a2:13:21:ed:47:6f:ae:93:
29:94:e2:f6:bb:71:92:e3:b9:0c:80:9a:b8:93:8b:b8:02:68:
f7:64:56:f8:1e:2b:05:fa:b1:00:0c:1e:48:c1:eb:87:3c:6f:
24:44:57:38:4e:0b:25:5d:d0:cb:80:48:91:8c:34:5d:7c:b0:
be:96:9d:c4:f0:87:0d:f7:5a:54:01:fd:91:61:49:8a:bc:50:
11:99:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:34:31 2025 by rpki-client