Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
File: gYkbJhxi2r93flUutewn135IQTk.cer (raw, json)
Hash identifier: zYOp7EbWusC2ixNnixWPq8riGKhxhTEINXHtHPxd6c4=
Subject key identifier: 81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A845205550
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:56:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 201337
IP: 86.105.28.0/22
IP: 86.106.184.0/22
IP: 89.47.4.0/22
IP: 185.75.200.0/22
IP: 185.77.168.0/22
IP: 188.240.204.0/22
IP: 195.82.120.0/22
IP: 2a05:6500::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722714252624 (0xa845205550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81891b261c62dabf777e552eb5ec27d77e484139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:ee:19:a1:9b:c6:8e:0c:9d:04:31:97:b7:
1a:21:43:0d:6f:25:d2:22:25:da:2e:a0:9f:c5:fb:
e9:38:30:f9:b6:9c:16:77:52:e8:df:cd:9c:25:5c:
55:36:66:33:d9:eb:2b:55:4e:ff:b2:5f:96:d8:1f:
30:17:2b:26:ec:26:84:2c:1a:66:fa:23:37:25:4d:
b8:f2:af:75:c6:b7:d1:a8:14:00:14:0a:d5:f3:f4:
d7:b3:1f:00:76:41:47:22:b5:ca:13:0e:76:4b:be:
5c:7d:4a:09:a3:d1:93:c2:10:3e:f7:2e:8d:9f:1d:
56:b2:32:46:d8:1f:f1:3e:5c:fb:d2:52:b7:06:53:
57:6c:3d:9a:a4:06:ea:dd:13:30:6f:b8:51:3c:7a:
19:5e:38:61:d2:df:33:1d:7f:e0:5c:b4:dd:2f:c9:
10:b7:11:4e:10:1c:c3:4e:86:f0:91:ee:50:d7:16:
8f:28:60:d3:38:73:2b:65:9b:44:39:66:6a:83:9f:
0a:34:bf:d0:91:58:e8:3f:f7:c7:58:9b:f8:87:11:
d9:13:85:18:b7:e3:c5:2c:0f:ec:13:a3:c4:fd:da:
f7:22:61:93:6d:26:aa:0c:1a:fa:5e:a4:35:6c:72:
e2:82:fc:f3:6f:8d:b8:9d:4b:0e:e9:54:97:52:88:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.28.0/22
86.106.184.0/22
89.47.4.0/22
185.75.200.0/22
185.77.168.0/22
188.240.204.0/22
195.82.120.0/22
IPv6:
2a05:6500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201337
Signature Algorithm: sha256WithRSAEncryption
a0:dc:1e:9b:e8:7c:d2:b7:a1:3d:02:07:00:cf:f6:06:91:ef:
8f:c5:05:2f:b4:4c:1e:30:cf:71:32:c8:96:b2:0b:89:b8:60:
50:1d:9d:96:b0:15:db:41:85:22:f1:32:d7:c6:db:90:5c:ee:
5c:64:ba:4e:12:e1:cd:d3:ed:45:ae:5e:79:09:eb:47:22:18:
6f:41:14:22:b9:c8:2d:a6:52:43:9e:66:e4:66:ae:27:77:d2:
6a:a8:61:fc:98:23:4f:5c:5b:f4:d5:50:4e:91:f5:e0:0a:25:
0a:5e:37:0a:d3:25:b9:2e:b8:75:72:96:48:04:de:29:f3:00:
33:dc:46:7a:85:62:6a:19:77:8d:a4:e2:a7:90:ab:89:6e:bf:
f4:96:9b:20:f4:c9:89:1f:11:dc:8b:99:fd:89:04:13:a1:82:
cd:fe:cc:d3:c4:59:5b:81:71:d8:28:1b:b9:ae:73:ed:d2:af:
f0:3e:31:ff:ae:81:c5:74:99:9f:8d:c7:f1:1d:93:b9:07:9a:
d2:38:f2:26:75:6e:e6:b4:2b:fd:f4:5c:d6:3a:ff:9a:19:ee:
de:d5:59:d6:86:f1:36:fc:00:ef:d1:6b:cf:83:f2:4a:f8:69:
44:3f:29:e6:46:53:63:f6:cb:14:f4:f4:c7:4d:37:5f:15:36:
f7:ec:d4:7f
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIGAKhFIFVQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTM1NjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MTg5MWIyNjFj
NjJkYWJmNzc3ZTU1MmViNWVjMjdkNzdlNDg0MTM5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA3jfuGaGbxo4MnQQxl7caIUMNbyXSIiXaLqCfxfvpODD5
tpwWd1Lo382cJVxVNmYz2esrVU7/sl+W2B8wFysm7CaELBpm+iM3JU248q91xrfR
qBQAFArV8/TXsx8AdkFHIrXKEw52S75cfUoJo9GTwhA+9y6Nnx1WsjJG2B/xPlz7
0lK3BlNXbD2apAbq3RMwb7hRPHoZXjhh0t8zHX/gXLTdL8kQtxFOEBzDTobwke5Q
1xaPKGDTOHMrZZtEOWZqg58KNL/QkVjoP/fHWJv4hxHZE4UYt+PFLA/sE6PE/dr3
ImGTbSaqDBr6XqQ1bHLigvzzb424nUsO6VSXUoiw5QIDAQABo4IC0zCCAs8wHQYD
VR0OBBYEFIGJGyYcYtq/d35VLrXsJ9d+SEE5MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2NmYmFjZC1kMDljLTRhMmYt
YWJmOS0zYmVmM2Y3ZTRkZWIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvY2ZiYWNkLWQwOWMtNGEyZi1h
YmY5LTNiZWYzZjdlNGRlYi8xL2dZa2JKaHhpMnI5M2ZsVXV0ZXduMTM1SVFUay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAw
BAIAATAqAwQCVmkcAwQCVmq4AwQCWS8EAwQCuUvIAwQCuU2oAwQCvPDMAwQCw1J4
MA0EAgACMAcDBQMqBWUAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMSeTANBgkq
hkiG9w0BAQsFAAOCAQEAoNwem+h80rehPQIHAM/2BpHvj8UFL7RMHjDPcTLIlrIL
ibhgUB2dlrAV20GFIvEy18bbkFzuXGS6ThLhzdPtRa5eeQnrRyIYb0EUIrnILaZS
Q55m5GauJ3fSaqhh/JgjT1xb9NVQTpH14AolCl43CtMluS64dXKWSATeKfMAM9xG
eoViahl3jaTip5CriW6/9JabIPTJiR8R3IuZ/YkEE6GCzf7M08RZW4Fx2Cgbua5z
7dKv8D4x/66BxXSZn43H8R2TuQea0jjyJnVu5rQr/fRc1jr/mhnu3tVZ1obxNvwA
79Frz4PySvhpRD8p5kZTY/bLFPT0x003XxU29+zUfw==
-----END CERTIFICATE-----
Generated at Thu May 1 08:16:52 2025 by rpki-client