Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6UT84zO70vGMyCZotT6CMJahAM.cer
File: e6UT84zO70vGMyCZotT6CMJahAM.cer (raw, json)
Hash identifier: 23WCQaeY3tUjhmqKUEVKe5OkoX+qQ1XHTKlN7TW3Fdc=
Subject key identifier: 7B:A5:13:F3:8C:CE:EF:4B:C6:33:20:99:A2:D4:FA:08:C2:5A:84:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB044BBD4FEFA604BBFBAD2C9C7FE20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/e6UT84zO70vGMyCZotT6CMJahAM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.116.24.0/24
IP: 2a11:eb40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:44:bb:d4:fe:fa:60:4b:bf:ba:d2:c9:c7:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ba513f38cceef4bc6332099a2d4fa08c25a8403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:23:5d:b0:bb:60:9f:4b:42:85:42:81:b3:
2a:d4:a2:0a:4d:8d:cc:cc:71:4d:f0:29:dd:97:3d:
fd:3d:45:75:95:c7:57:cc:2c:3b:90:31:11:2d:5c:
60:09:d9:95:e7:ae:66:ca:5f:91:8c:ee:1d:f8:e9:
db:98:66:25:56:ee:42:b4:7e:48:7d:ad:60:88:99:
94:46:ac:27:56:31:b4:e2:a6:d6:90:9b:20:7d:64:
f0:77:2b:53:38:f7:a4:c6:d8:c0:33:1d:f7:a4:70:
f9:f7:55:2f:a4:2d:f6:3c:b8:66:f3:7a:a4:a1:32:
70:73:90:0d:3c:76:b1:37:52:b9:1a:a4:f7:af:41:
c3:d4:ad:c3:f2:43:d1:b5:4f:46:8d:b1:f5:6a:c5:
23:9b:ff:8e:9a:65:33:a4:84:96:e6:5c:b3:34:45:
74:c2:c8:88:c4:8c:e3:5f:1d:c2:08:ae:2e:ed:fc:
fb:46:72:a7:6f:9f:e0:c4:39:6a:3e:12:07:46:6e:
6a:fd:b2:71:cd:af:11:ca:a7:02:c5:a4:1d:d4:cc:
60:04:ed:a5:6b:4a:93:06:b2:3e:51:2f:b8:37:e1:
72:a6:43:f0:cf:ff:a8:78:0a:fc:84:09:58:64:5f:
b9:9d:84:34:15:cf:b5:27:1b:f6:98:6b:3c:f0:02:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A5:13:F3:8C:CE:EF:4B:C6:33:20:99:A2:D4:FA:08:C2:5A:84:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/e6UT84zO70vGMyCZotT6CMJahAM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.24.0/24
IPv6:
2a11:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
00:d1:8c:40:f7:4a:ea:a0:db:21:30:db:22:f1:29:76:2e:3a:
2b:d6:c1:45:27:86:fb:90:77:23:e6:3e:5d:e0:91:a5:c6:94:
50:91:18:16:47:02:50:23:b5:02:d9:ad:84:9c:ed:4e:36:ad:
65:38:a5:12:7b:96:92:62:91:b5:14:4c:ff:21:d3:3a:29:f8:
e8:43:dd:f3:93:a4:d5:7e:f4:e2:6a:01:55:d9:18:fb:d2:0b:
17:90:6f:bb:63:4d:57:a8:46:0e:a5:21:e6:4e:1c:05:20:15:
6a:73:b5:b3:29:fe:18:65:5b:e6:cf:40:20:57:ca:91:34:b8:
2f:13:88:17:60:22:98:18:3e:c9:7c:27:77:f7:bb:51:7c:c8:
5b:b2:13:0c:1f:ec:e6:34:97:98:10:24:74:bb:cd:fc:31:28:
e9:58:eb:92:b4:a9:e7:7f:3a:a7:fb:d7:d2:25:9b:b9:56:50:
fc:41:0d:3d:75:71:78:09:ea:21:3a:65:7c:31:33:f8:0a:17:
e8:ce:f9:4f:22:b3:8c:6c:e1:51:24:c6:0b:6f:45:9a:31:3d:
76:2a:e2:5c:cd:be:7c:4e:94:c5:4d:89:fa:f6:9c:4e:05:36:
d3:9d:88:2e:f1:9e:e2:ae:5d:6b:ce:ce:96:bb:b3:cb:9b:3e:
9b:1b:9c:40
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVvsES71P76YEu/utLJx/4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmE1MTNmMzhjY2VlZjRiYzYzMzIwOTlhMmQ0ZmEwOGMyNWE4NDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxwjXbC7YJ9LQoVCgbMq1KIKTY3M
zHFN8Cndlz39PUV1lcdXzCw7kDERLVxgCdmV565myl+RjO4d+OnbmGYlVu5CtH5I
fa1giJmURqwnVjG04qbWkJsgfWTwdytTOPekxtjAMx33pHD591UvpC32PLhm83qk
oTJwc5ANPHaxN1K5GqT3r0HD1K3D8kPRtU9GjbH1asUjm/+OmmUzpISW5lyzNEV0
wsiIxIzjXx3CCK4u7fz7RnKnb5/gxDlqPhIHRm5q/bJxza8RyqcCxaQd1MxgBO2l
a0qTBrI+US+4N+FypkPwz/+oeAr8hAlYZF+5nYQ0Fc+1Jxv2mGs88AIejQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHulE/OMzu9LxjMgmaLU+gjCWoQDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzcwZjM1
OC1iYTQxLTQ1MmYtODY0MC04MWRmZGJkNjRjMDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNzBmMzU4
LWJhNDEtNDUyZi04NjQwLTgxZGZkYmQ2NGMwMS8xL2U2VVQ4NHpPNzB2R015Q1pv
dFQ2Q01KYWhBTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsHQYMA0EAgACMAcDBQMqEetAMA0GCSqGSIb3
DQEBCwUAA4IBAQAA0YxA90rqoNshMNsi8Sl2Ljor1sFFJ4b7kHcj5j5d4JGlxpRQ
kRgWRwJQI7UC2a2EnO1ONq1lOKUSe5aSYpG1FEz/IdM6KfjoQ93zk6TVfvTiagFV
2Rj70gsXkG+7Y01XqEYOpSHmThwFIBVqc7WzKf4YZVvmz0AgV8qRNLgvE4gXYCKY
GD7JfCd397tRfMhbshMMH+zmNJeYECR0u838MSjpWOuStKnnfzqn+9fSJZu5VlD8
QQ09dXF4CeohOmV8MTP4ChfozvlPIrOMbOFRJMYLb0WaMT12KuJczb58TpTFTYn6
9pxOBTbTnYgu8Z7irl1rzs6Wu7PLmz6bG5xA
-----END CERTIFICATE-----
Generated at Thu May 1 09:32:36 2025 by rpki-client