Certificate
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer
File: 67D62A55D09A0E54797A7BAD5C400454D5529546.cer (raw, json)
Hash identifier: a9dZXgxDwLjLTEPMQuGLEXog0oUjql7vsoCd8XHUFsU=
Subject key identifier: 67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2244DBD49DE0D3C5CD3619C13130D121D50F29FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft
caRepository: rsync://repo.rpki.space/repo/Netiface/2/
Notify URL: https://repo.rpki.space/rrdp/notification.xml
Certificate not before: Wed 30 Apr 2025 16:42:55 +0000
Certificate not after: Wed 29 Apr 2026 16:47:55 +0000
Subordinate resources: IP: 2a14:7c0:3800::/38
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:44:db:d4:9d:e0:d3:c5:cd:36:19:c1:31:30:d1:21:d5:0f:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 30 16:42:55 2025 GMT
Not After : Apr 29 16:47:55 2026 GMT
Subject: CN=67D62A55D09A0E54797A7BAD5C400454D5529546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:8e:c2:5e:8d:c7:31:fa:4b:c5:b0:cc:7c:
83:84:15:f4:3b:2c:af:77:6d:b6:cd:5b:6b:23:8b:
03:d5:f6:1a:5c:cb:6f:6d:16:2e:33:61:bc:9f:9a:
92:28:e1:71:fe:e5:d8:0b:6e:e9:b2:63:ea:a8:da:
7d:89:64:88:89:6b:a8:3e:e3:53:71:45:81:3f:56:
a6:0e:26:18:5d:2c:d8:c4:84:db:55:33:52:a2:c7:
eb:4a:0b:6d:5e:9d:ed:6a:d5:1e:f1:83:29:6f:6d:
a4:86:a2:eb:93:d7:9c:38:65:f9:34:f4:7c:44:00:
02:bf:d3:78:29:1c:41:9d:57:c6:a7:a6:de:08:29:
c2:a0:a3:c1:49:f6:47:b5:60:da:de:06:91:c4:3e:
52:42:23:6b:1a:06:03:b1:ca:cb:65:40:b1:e9:c4:
68:48:f5:a8:bf:29:d2:76:29:fe:15:65:1a:25:c9:
ce:d9:42:9f:4f:f2:7f:19:14:b9:9b:7b:35:4f:6e:
e1:3d:7f:db:e7:a6:8c:aa:d1:3f:32:18:f3:b5:39:
b4:c3:f7:68:77:72:46:75:62:6d:63:91:fa:b2:8a:
c6:90:aa:a6:9f:98:c1:ea:a7:60:a9:8a:30:1c:c7:
1a:f7:d1:b2:cc:e1:92:44:39:9d:23:cd:d5:a3:15:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
CA Repository - URI:rsync://repo.rpki.space/repo/Netiface/2/
RPKI Manifest - URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft
RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3800::/38
Signature Algorithm: sha256WithRSAEncryption
28:b3:1e:1a:18:ab:ab:03:95:3e:c7:08:92:ae:43:d5:a9:63:
ee:99:56:83:cd:e8:c3:9c:68:dd:48:b9:6c:b1:dd:7b:2e:45:
78:0f:ed:dc:3a:5b:e6:51:48:a2:05:9b:63:be:a1:12:7f:83:
39:f6:59:f1:f5:6b:ed:f2:04:49:0b:f3:b3:c6:32:1f:f5:af:
c0:0f:3c:ed:e1:ac:43:f6:eb:d8:4c:18:35:9a:28:5c:5b:af:
56:6b:a2:8f:78:4f:05:64:fd:2f:bb:ae:13:bc:bc:0f:51:48:
78:d5:c8:df:3d:18:12:67:8c:5f:9c:cd:ed:4e:3e:5d:67:8f:
36:fe:21:fd:e4:07:2c:b6:9c:5b:e5:ba:53:49:eb:be:96:2f:
9d:66:da:20:9d:43:15:29:13:36:6c:01:cf:36:aa:97:ad:4a:
3c:b9:6f:8f:c9:1c:6e:e3:d1:a6:57:36:cc:24:f8:89:c6:70:
10:02:81:d0:08:4b:f7:81:8c:ed:b5:0f:d7:0c:52:f8:29:4a:
ac:e3:0d:f0:dd:f6:c3:6f:24:f6:37:fb:88:a6:01:a1:cb:f5:
1a:96:aa:ae:77:22:39:4c:fb:33:48:e4:90:5e:14:bf:f1:8c:
22:32:8d:bb:c7:04:d2:5d:25:b6:cd:ff:ef:dd:9d:5b:3c:c9:
60:0e:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:34:40 2025 by rpki-client