Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pj9uFFK2slu0CifWiZQg-kXPRD4.cer
File: pj9uFFK2slu0CifWiZQg-kXPRD4.cer (raw, json)
Hash identifier: Orl9oQ8BxWXmyMQZz5bD9LXYVDcvJXBjC9aeFIQr3iM=
Subject key identifier: A6:3F:6E:14:52:B6:B2:5B:B4:0A:27:D6:89:94:20:FA:45:CF:44:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188E74E485BDB7D4F35EAA79E5754B4C604
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/pj9uFFK2slu0CifWiZQg-kXPRD4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Jun 2023 08:10:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 13154
IP: 193.105.161.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:4e:48:5b:db:7d:4f:35:ea:a7:9e:57:54:b4:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 23 08:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a63f6e1452b6b25bb40a27d6899420fa45cf443e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:0d:41:a7:de:59:71:ec:21:32:44:1a:85:
db:45:f8:8e:49:27:4d:1e:a7:22:37:fc:f8:4c:57:
a7:84:a2:e6:bd:e1:6f:6c:3a:9b:ae:4c:9d:1e:07:
27:05:5a:ac:66:86:57:0f:17:58:3a:61:c8:8d:6d:
33:d1:89:c5:af:2c:cc:f2:23:dd:c9:ff:44:b3:8c:
20:38:36:b7:d2:e9:f8:c9:61:de:9c:60:7c:b7:8c:
3e:84:ad:f8:ba:e2:db:03:43:8b:03:a8:08:96:75:
68:b5:a4:6a:b9:ca:11:86:53:bd:f7:ef:ed:c6:ae:
78:36:7f:81:c2:cc:0d:69:c0:43:c8:e1:47:67:90:
64:b5:7c:ac:70:5b:82:94:36:0e:48:6a:29:38:71:
f2:fc:5b:38:9f:5d:35:74:4a:7c:cd:49:bb:83:2b:
cd:f8:fe:02:af:1b:e8:76:52:13:de:af:70:10:99:
64:98:94:d4:d4:a5:d5:73:94:ad:ca:f0:62:e1:bb:
a5:16:2d:31:05:40:e7:c0:a9:39:3f:17:73:ec:30:
ee:06:cf:68:9b:ab:3b:7d:c1:87:47:cd:07:e5:50:
f2:87:59:41:67:ac:1b:30:51:da:85:7f:b8:c3:d8:
3a:b9:ee:41:4c:db:e0:65:70:4d:e9:95:6d:da:ab:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3F:6E:14:52:B6:B2:5B:B4:0A:27:D6:89:94:20:FA:45:CF:44:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/pj9uFFK2slu0CifWiZQg-kXPRD4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.161.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13154
Signature Algorithm: sha256WithRSAEncryption
2d:7d:e9:2d:23:6e:9d:1e:c8:fb:63:11:30:ef:cc:57:4f:9d:
2c:c6:50:bd:f9:62:90:f9:02:f2:60:44:70:88:32:17:0a:da:
69:8f:62:b1:c8:fb:42:ec:d6:0e:56:83:48:df:ac:bc:df:55:
ef:3b:c5:af:f7:f7:bf:10:02:ca:d4:b4:c9:0d:a3:47:12:4e:
00:aa:42:13:5d:05:4c:14:95:26:d5:6f:8c:8a:8b:55:b0:2d:
66:12:62:05:d0:c7:11:f8:4c:66:79:51:70:eb:3f:56:17:62:
9e:68:94:56:59:4a:8a:ff:7b:1c:ef:43:08:80:40:5b:7f:68:
df:f3:50:6f:f4:61:0c:29:33:cf:bd:47:ed:83:cf:33:e5:41:
bb:5c:13:39:4d:cd:6c:10:a7:0b:4c:5e:81:4d:54:8a:e4:8e:
a1:99:e9:3c:6b:cd:b2:17:87:40:06:dc:8e:b2:00:31:2d:32:
33:9d:bc:14:0b:4e:b6:f9:d2:7a:83:6d:e0:11:2c:a6:20:29:
fb:5a:68:7b:e9:8f:99:ab:bd:b0:23:fc:1d:40:ae:bc:b6:d6:
8c:de:86:cd:45:9b:34:9c:fc:62:20:75:60:96:a2:a4:f7:dc:
34:7d:b5:23:fd:45:9e:21:d3:e1:dd:0a:4a:be:6a:06:36:37:
d5:24:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:34:23 2025 by rpki-client