Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.cer
File: 1-4N_UlFCFUBcWBDtLGNqkXIjxUo.cer (raw, json)
Hash identifier: Tv3hF6CULGPPjOPvG3+fRGaI5u+vcVGkh6BAaQfJG4M=
Subject key identifier: FB:83:7F:52:51:42:15:40:5C:58:10:ED:2C:63:6A:91:72:23:C5:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A22D9E9727
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:05:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 88.135.69.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696550070055 (0xa22d9e9727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:05:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb837f52514215405c5810ed2c636a917223c54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:2c:59:77:15:d3:af:26:59:ab:d5:0f:39:
5a:6e:c8:59:e7:4c:4f:20:fc:ae:99:37:a8:9c:f1:
e1:be:12:11:8b:6b:ab:cd:de:75:1f:d8:88:51:c1:
6a:89:2e:10:cb:49:f4:61:4f:15:6e:6b:d7:c1:89:
5f:85:e0:21:26:d8:02:b6:17:94:97:7e:44:92:55:
52:9f:a1:6a:f3:f8:f2:19:06:6f:05:c0:02:72:46:
f8:d7:a3:e1:d1:eb:13:05:4f:f8:a3:0a:0a:6c:fd:
bd:a0:6c:fd:62:fb:d8:ba:89:17:03:de:44:c0:2b:
7e:52:f2:27:34:1f:21:26:b5:ae:33:11:2c:1c:cd:
1c:b6:ab:65:17:3f:71:1e:c8:45:57:cd:70:ad:13:
70:7e:ae:eb:bc:4e:41:a9:70:f5:9f:d5:ba:aa:37:
60:b9:86:36:13:c1:9b:6f:dd:f8:d7:e7:e5:e2:54:
1b:52:fb:e3:6d:64:00:c6:21:dd:b1:00:cb:2d:4d:
36:01:80:cb:0b:89:a0:2d:0d:24:f3:c1:ba:93:67:
63:69:f5:81:85:4e:ac:cb:e0:00:ae:02:a5:79:61:
70:71:a8:ec:46:50:66:0c:8d:a9:54:54:3b:da:e8:
88:b5:37:2b:8b:69:df:1c:ec:26:f2:ba:9f:ee:d5:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:83:7F:52:51:42:15:40:5C:58:10:ED:2C:63:6A:91:72:23:C5:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:04:27:43:6a:04:1c:9d:60:a8:e5:34:34:20:9d:ac:69:95:
7c:ae:b3:35:03:2a:dd:62:50:7f:89:0c:01:d2:5d:a7:38:36:
0d:31:28:85:09:ff:13:e1:ad:de:e4:e4:8f:cd:5e:be:fc:b6:
dd:09:2e:c7:55:35:6d:7f:f5:12:1d:b2:fb:3f:ef:b3:39:b8:
76:e3:79:78:85:ea:b2:82:ed:9f:e9:4c:84:4c:82:e9:a1:2a:
d9:18:f5:91:cf:fb:04:23:07:0b:f4:70:71:c2:87:03:36:8e:
80:9b:4d:a6:82:e8:27:27:41:f0:59:3f:af:03:86:17:b6:f2:
7a:76:24:90:0a:89:36:9a:e4:c1:df:bc:65:fa:8b:c0:d6:b0:
10:79:f5:df:9f:4a:4a:7e:0d:68:ff:cb:4c:70:67:36:55:15:
6b:00:40:64:08:ba:98:05:01:58:8a:27:01:d1:0b:f8:69:04:
36:2e:72:7c:b2:07:af:9a:06:f4:82:17:50:34:e2:b9:22:8b:
d7:71:fc:23:0d:f8:c2:c4:a3:a1:ae:06:5d:19:2b:3f:b9:28:
88:25:1d:18:d8:c2:a8:09:f7:57:bf:45:f4:be:f2:86:28:a7:
a6:28:cb:15:07:b3:43:94:a6:f3:61:6d:e4:e3:72:67:31:42:
16:01:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:45:20 2025 by rpki-client