Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cHwhfMC36s_1QaKO4zAb402rNIU.cer
File: cHwhfMC36s_1QaKO4zAb402rNIU.cer (raw, json)
Hash identifier: tvlZm98aPkoGXBsMc7/Y3G3mvZcyM5DKcWF28i3yc3s=
Subject key identifier: 70:7C:21:7C:C0:B7:EA:CF:F5:41:A2:8E:E3:30:1B:E3:4D:AB:34:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBCF9809D46A3B931910E8D1E6E2E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/af1613-7c4c-4adc-afa7-bae4b048b6d9/1/cHwhfMC36s_1QaKO4zAb402rNIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/af1613-7c4c-4adc-afa7-bae4b048b6d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.147.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:cf:98:09:d4:6a:3b:93:19:10:e8:d1:e6:e2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=707c217cc0b7eacff541a28ee3301be34dab3485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:15:1f:77:21:7c:2c:5c:cd:26:cc:79:2e:ba:
13:9c:5f:cf:0a:e3:f4:d3:b8:ce:cc:c7:a7:04:c8:
05:6d:81:6f:bf:09:16:f9:9a:c6:04:ba:59:90:75:
21:51:ed:36:95:21:39:da:51:82:48:34:4d:69:a7:
92:76:45:c7:70:cd:14:2a:da:22:45:97:76:a7:1b:
0c:18:b0:21:f1:af:4e:87:4d:da:3a:15:cc:fe:31:
a3:da:ab:41:3c:e3:08:e9:37:dd:22:e0:4a:72:d9:
83:4c:70:00:eb:ef:37:34:25:31:46:62:cd:e0:af:
0a:bb:ca:b3:35:d8:ba:78:c4:de:02:e4:49:29:7c:
ce:d3:8b:f7:72:fc:c6:06:38:f5:a1:62:28:da:af:
c3:52:48:60:57:2d:39:25:13:66:f9:1b:75:dc:21:
67:97:a0:c8:92:fc:6c:48:58:21:0d:60:3e:ba:6b:
12:a9:b4:04:56:30:6a:86:54:f8:ff:d7:7d:37:e8:
52:8e:58:8f:da:61:56:44:1f:6d:c6:f4:93:8f:9e:
6b:73:aa:7f:76:28:0a:b9:4e:c5:f6:7f:7f:a7:29:
1b:70:30:78:ae:2a:ab:df:a9:a1:06:60:00:94:b1:
6f:93:f5:ac:9b:5d:3a:28:8a:76:7b:78:9d:82:95:
9c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7C:21:7C:C0:B7:EA:CF:F5:41:A2:8E:E3:30:1B:E3:4D:AB:34:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/af1613-7c4c-4adc-afa7-bae4b048b6d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/af1613-7c4c-4adc-afa7-bae4b048b6d9/1/cHwhfMC36s_1QaKO4zAb402rNIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.147.0/24
Signature Algorithm: sha256WithRSAEncryption
87:79:8b:27:37:0d:74:f1:b2:38:f0:0c:24:1e:f4:dd:6f:f1:
3b:f6:dc:ef:c6:7c:09:98:15:9f:6c:7a:0b:cf:6e:97:1e:59:
4a:1f:5e:b7:74:0d:89:2a:6c:53:1f:62:22:67:58:39:be:4f:
de:39:39:5c:8a:17:9e:26:ff:1b:48:0c:6f:5b:9e:a3:87:e1:
da:67:88:44:94:40:2f:9e:bc:6b:e1:09:de:81:f4:32:b6:57:
fa:d3:d1:1d:87:f8:cb:aa:c4:e9:17:2a:14:a1:1e:01:63:82:
86:1a:d6:60:bd:56:f5:73:96:21:ec:ba:9a:87:d3:3f:21:6e:
5a:c4:25:26:dc:0d:1b:97:b2:70:aa:1d:35:85:20:4b:82:c7:
71:22:a7:26:a4:87:0d:e3:d1:4e:ae:1c:e8:c2:90:4d:0b:d3:
5b:36:7a:ac:5e:dd:45:aa:e6:48:2e:f3:e3:5e:fa:47:a8:53:
60:c2:b5:fa:71:49:18:9c:c8:cc:35:74:9d:f5:32:da:e2:6b:
87:30:f1:0d:ad:2c:ba:fa:d2:bc:9e:18:f0:ea:cd:39:dc:fa:
81:9f:5c:f3:5c:56:f0:11:bb:9a:4f:56:69:d2:09:f5:b8:e6:
1f:4c:b4:3d:af:83:2f:a4:a1:64:2b:f6:c7:4a:ea:e4:8e:b9:
8b:48:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:37:37 2025 by rpki-client