Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
File: gPN231-e9IfIKzGodcakltecoNc.cer (raw, json)
Hash identifier: XI9feXF6MXKpJ48XFHwXECEijl9GkIxA37V/BxJUCNY=
Subject key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E0D0265146957C049631512636B4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 46805
AS: 57858
AS: 57972
AS: 60485
AS: 63119
IP: 5.34.240.0/21
IP: 5.153.232.0/21
IP: 5.157.0.0/18
IP: 23.92.112.0/20
IP: 37.72.184.0/21
IP: 37.203.208.0/21
IP: 46.29.248.0/21
IP: 91.108.176.0/21
IP: 104.160.0.0/19
IP: 107.150.64.0/19
IP: 130.185.152.0/21
IP: 151.237.176.0/20
IP: 158.222.0.0/20
IP: 162.212.168.0/21
IP: 176.61.136.0/21
IP: 178.216.48.0/21
IP: 185.3.132.0/22
IP: 192.40.88.0/21
IP: 2a02:5740::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:0d:02:65:14:69:57:c0:49:63:15:12:63:6b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b3:68:ca:bf:a1:7f:78:3e:1a:47:41:17:36:
97:d4:88:90:5f:21:02:04:85:e0:13:51:86:f9:e2:
5f:5d:d3:5b:1b:02:ae:71:28:21:38:bb:44:79:a8:
bc:f3:b9:4a:46:7b:00:93:d3:66:dd:c8:6f:0f:d3:
4c:2a:29:34:c2:7c:ad:c0:be:54:ef:09:f5:9a:df:
c4:66:41:9d:3c:e1:52:33:b9:79:4b:72:bf:44:2e:
6d:42:46:2b:0e:63:9d:c3:c6:00:09:32:01:8a:66:
1e:27:bf:a6:5a:53:d3:f7:d0:db:71:e4:cd:4f:83:
5d:b1:da:5b:39:ed:09:cc:fe:86:d6:6a:40:b0:98:
79:81:f4:96:9b:94:23:b6:c0:6d:ee:8f:ec:6a:92:
cb:8d:0c:a6:d8:98:0c:9c:7b:53:57:90:5c:87:3c:
43:d1:4d:ad:02:d7:17:5e:14:5e:62:2d:b2:15:b5:
5a:15:cd:77:bc:9a:db:d5:8d:f9:b1:ae:3b:39:f3:
0c:a0:6a:ea:f2:b2:ae:1d:3b:de:dc:8c:98:98:07:
cd:c7:e7:20:94:19:28:e3:b1:3a:f3:ce:4e:a7:93:
1f:41:c1:70:29:64:8d:f8:e5:6a:71:fa:ab:30:98:
24:2c:3f:d5:4e:fc:de:7e:ae:74:fa:a1:14:ca:1d:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.240.0/21
5.153.232.0/21
5.157.0.0/18
23.92.112.0/20
37.72.184.0/21
37.203.208.0/21
46.29.248.0/21
91.108.176.0/21
104.160.0.0/19
107.150.64.0/19
130.185.152.0/21
151.237.176.0/20
158.222.0.0/20
162.212.168.0/21
176.61.136.0/21
178.216.48.0/21
185.3.132.0/22
192.40.88.0/21
IPv6:
2a02:5740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
46805
57858
57972
60485
63119
Signature Algorithm: sha256WithRSAEncryption
6c:38:c4:66:7e:76:eb:f9:58:dd:df:d9:01:47:19:8f:7a:97:
89:82:5c:cd:8a:12:e3:03:8a:7f:ed:f5:54:ed:99:41:fc:9e:
f5:91:bc:40:87:a1:cb:92:e7:f1:57:c8:66:0f:d4:d8:e6:71:
58:a2:ca:71:e1:63:89:64:fc:da:84:ad:0b:9c:6e:ec:b4:13:
91:50:8f:80:08:93:15:85:ee:58:06:2e:e5:af:b8:12:01:10:
e9:ce:57:32:b8:f3:d9:a6:6a:dd:04:cf:9e:59:5d:55:4a:62:
91:cb:c5:12:00:80:1c:44:90:fe:e9:ba:0a:d9:26:10:69:72:
f4:b0:16:9b:1a:ab:b6:8b:58:71:23:40:31:09:09:e9:fc:60:
7d:3e:8f:f6:8b:67:72:c4:5c:ff:35:53:cc:4e:a5:52:6d:2e:
10:b2:de:66:6a:3f:77:e4:fe:c2:aa:83:cb:b8:9b:25:12:ae:
af:68:b1:bc:28:62:84:54:44:e4:2f:66:34:1a:f2:af:1f:6e:
8a:5b:ba:16:76:1b:49:34:20:49:c9:85:a6:3b:f2:9c:01:33:
17:e2:76:48:33:fc:97:a0:41:cb:21:eb:d1:13:b9:35:b3:0e:
71:f6:18:41:d5:01:71:72:fe:5b:85:98:4f:dc:52:a6:39:ef:
15:6d:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:58:06 2025 by rpki-client