Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc6HVEAJnYkVX_04ZhAXqzezR1k.cer
File: bc6HVEAJnYkVX_04ZhAXqzezR1k.cer (raw, json)
Hash identifier: 5PV/+njLekXB5qvvD3lQugCVjlZS3yrzPXIthQkVPls=
Subject key identifier: 6D:CE:87:54:40:09:9D:89:15:5F:FD:38:66:10:17:AB:37:B3:47:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A658D407C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/c2e354-cce9-4238-b996-6f0acd532eb2/1/bc6HVEAJnYkVX_04ZhAXqzezR1k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/c2e354-cce9-4238-b996-6f0acd532eb2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:01:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 149.213.0.0/16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714454861761 (0xa658d407c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dce875440099d89155ffd38661017ab37b34759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:94:7b:38:2e:cc:bf:c9:6d:b7:be:b2:ce:
b0:fa:69:61:e3:46:9b:79:cb:25:17:d1:4c:f7:1a:
6e:6e:95:b9:61:fa:ae:a7:8c:89:94:15:20:09:00:
70:e3:a3:8e:00:b4:c5:f3:e5:da:36:7e:63:b0:1d:
9b:66:02:9f:e9:3c:ac:fb:cc:54:5d:a0:ff:eb:cd:
99:50:dc:2a:76:19:ca:e9:c3:cd:73:91:ac:57:15:
f9:39:66:f3:a5:6c:cb:c8:71:dc:47:fd:e6:de:a5:
f2:21:ee:01:50:e9:c4:2c:c2:72:cd:5b:bb:a6:a7:
aa:4c:f1:c6:1a:d2:0b:3d:3e:2e:5c:f3:8f:56:5f:
ea:01:c3:2b:96:76:42:f0:62:79:66:8c:ef:78:60:
f1:d7:e8:7e:25:f3:00:d7:12:95:71:6e:f1:0a:93:
5b:91:96:39:e4:ca:e4:10:b1:0a:24:ea:e5:61:5f:
3f:48:cf:0b:c1:6a:5b:85:67:24:30:3b:57:78:2a:
78:39:3e:96:82:bc:14:d6:27:cb:e1:06:bd:5e:a8:
2e:f9:1e:61:f3:15:4d:36:bf:3c:45:80:db:73:99:
fd:e1:2b:0c:b8:cb:b6:ec:e1:16:a3:2c:c0:af:aa:
00:73:73:6b:13:ae:62:f7:56:c0:82:e9:f8:3b:2e:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CE:87:54:40:09:9D:89:15:5F:FD:38:66:10:17:AB:37:B3:47:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c2e354-cce9-4238-b996-6f0acd532eb2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c2e354-cce9-4238-b996-6f0acd532eb2/1/bc6HVEAJnYkVX_04ZhAXqzezR1k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:3b:38:29:f8:01:57:28:41:02:6e:1a:8d:b4:87:54:50:3e:
b4:39:e3:d0:75:cf:9d:8e:88:08:72:5e:93:aa:a8:97:be:22:
9c:aa:b1:41:1a:e6:4b:0a:f4:6f:f7:d0:2c:d6:be:23:ef:7d:
f6:16:76:9f:2c:c9:6a:df:dc:21:e6:34:2f:b7:7d:1f:58:a3:
1b:7b:ce:e3:b1:9e:18:f9:17:11:c6:0c:a8:65:26:ff:91:06:
6c:1c:df:4c:70:29:fb:c4:59:f9:7c:3d:fe:cf:7a:3a:34:2c:
3e:96:5c:0c:2b:fd:34:bc:30:d0:63:1e:7e:ee:40:01:7b:aa:
f3:40:89:69:cc:06:d2:f9:b0:26:a9:4d:b8:ec:f0:ee:33:c9:
50:fe:e0:6e:19:e0:63:bd:6e:5b:8e:b3:2d:18:04:19:f9:62:
93:08:8e:18:ff:65:0a:22:7d:f6:87:15:6e:a7:f1:6f:6d:3b:
0a:67:16:7a:86:3a:ec:e3:40:9c:16:e7:7e:33:da:18:89:5f:
ff:ed:ab:f3:91:e7:1a:19:9c:d3:f3:68:25:7a:d9:1d:b2:d2:
e0:ab:8f:7d:f8:b9:65:37:63:4a:76:ce:58:98:31:e8:c5:31:
32:b0:96:c3:81:ae:39:53:51:ec:56:4c:29:97:ff:31:73:c0:
d2:c8:a9:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:25:42 2025 by rpki-client