Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9WiER5nKxll9jAnNLFziZehbuzw.cer
File: 9WiER5nKxll9jAnNLFziZehbuzw.cer (raw, json)
Hash identifier: kjg45SBP4eQH9BuYrlvKXbL+ciL00Ac40PKu/AGcS58=
Subject key identifier: F5:68:84:47:99:CA:C6:59:7D:8C:09:CD:2C:5C:E2:65:E8:5B:BB:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B509B2DA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/4c8120-a7ce-423d-922a-41481a42938e/1/9WiER5nKxll9jAnNLFziZehbuzw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/4c8120-a7ce-423d-922a-41481a42938e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:52:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 15912
IP: 194.0.64.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667072277923 (0x9b509b2da3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f568844799cac6597d8c09cd2c5ce265e85bbb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:51:ac:75:61:5c:4d:a2:05:b4:4b:d4:e4:
23:67:4f:51:f9:d4:ff:c1:da:a7:7d:50:e8:48:87:
01:0f:91:1c:7f:ab:1d:e9:c7:04:5e:c7:57:85:a5:
71:78:75:b5:55:4d:d7:21:b3:46:c7:9c:b4:b7:02:
10:c1:c1:f5:9e:36:59:0d:95:b9:60:7f:47:a3:9e:
27:6b:22:02:cc:73:00:a1:62:27:9b:01:62:9e:29:
00:99:4a:67:e2:d9:be:0a:d0:bb:e7:21:94:0c:47:
0e:f0:56:8a:41:6b:71:84:be:34:72:fe:38:a6:b4:
6e:87:1a:d4:1d:77:89:59:a1:df:1f:a0:4b:4f:09:
34:2a:15:eb:e7:d0:52:94:37:ea:ca:c4:dd:be:87:
e7:35:a3:62:03:83:10:c8:7d:4a:1d:61:51:93:48:
58:34:36:a8:67:a0:88:f6:e0:cd:5d:bb:b5:7d:d6:
d7:76:9d:d4:c3:60:80:ad:e3:b3:2b:dc:94:8c:1d:
5a:aa:71:9d:c6:e0:b9:a6:cf:bc:57:65:4c:55:77:
42:4d:90:26:11:ba:f2:b2:43:6d:c9:aa:1d:ac:33:
84:60:f4:b3:ca:9d:54:c8:71:68:dd:2d:60:99:46:
30:7b:11:f7:ea:00:0c:02:34:7e:f3:35:3c:ac:25:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:84:47:99:CA:C6:59:7D:8C:09:CD:2C:5C:E2:65:E8:5B:BB:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c8120-a7ce-423d-922a-41481a42938e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c8120-a7ce-423d-922a-41481a42938e/1/9WiER5nKxll9jAnNLFziZehbuzw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15912
Signature Algorithm: sha256WithRSAEncryption
96:34:cd:7b:b1:99:c4:6a:f7:9f:09:e5:a9:37:a3:e0:85:52:
df:3e:43:0c:86:21:4d:6e:28:e4:6c:6c:77:68:76:d0:ea:88:
0e:b4:cf:6f:ce:23:21:a1:23:25:88:05:88:85:48:0d:c3:b9:
03:09:77:44:9c:f2:10:d4:6b:b1:49:1d:ca:8d:04:28:05:79:
a8:62:a8:e5:1f:6a:d4:4c:a2:4a:0f:9c:97:02:61:fb:c8:54:
f3:ce:87:d7:c9:3a:24:5e:46:4d:82:14:cf:c4:58:e3:6c:16:
7b:4a:d9:a5:f2:d9:27:65:8c:ef:ff:86:2c:86:8d:b2:d8:49:
e8:9b:ec:7e:40:6b:9b:28:a1:77:26:61:b8:11:fa:ef:62:1c:
68:63:0a:90:3b:a9:ab:3f:94:27:f0:60:51:9c:d1:e3:7a:83:
d1:d6:50:7c:18:2d:21:97:bf:53:f0:e8:3d:63:07:ee:5b:ed:
fc:77:41:f0:6a:4c:f8:84:79:f7:7f:19:64:60:ba:d7:fd:2b:
f3:13:39:1b:16:45:19:e2:aa:c7:f3:42:2c:a2:97:53:37:92:
7f:2a:ff:97:75:d3:d1:8a:5f:18:fc:e1:ab:a9:15:31:b3:8c:
84:c6:35:19:5c:a5:c0:5e:60:c1:40:92:ab:5c:13:4e:39:78:
60:e2:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:54:47 2025 by rpki-client