Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
File: yPb13sCbx6EgMEVpm6BYKV0440Y.cer (raw, json)
Hash identifier: E31t65bBmxIFZATlQtVNygTyb8LuKt/f5H2TGw9XIIw=
Subject key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708A0336378DABF0DA31E7514A13822E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:32:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 20807
AS: 21335
AS: 25408
AS: 31484
AS: 42113
AS: 42631
AS: 44727
AS: 48201
AS: 48532
AS: 198295
IP: 37.9.128.0/21
IP: 62.182.88.0/21
IP: 77.244.16.0/20
IP: 77.247.160.0/20
IP: 80.70.224.0/20
IP: 80.246.240.0/20
IP: 81.94.16.0/20
IP: 83.136.240.0/21
IP: 84.52.64.0/18
IP: 91.202.220.0/22
IP: 92.39.224.0/20
IP: 94.247.240.0/21
IP: 109.68.136.0/21
IP: 109.167.128.0/17
IP: 176.221.8.0/21
IP: 178.162.0.0/17
IP: 185.7.200.0/22
IP: 185.45.60.0/22
IP: 185.202.212.0/22
IP: 194.24.240.0/23
IP: 194.246.112.0/23
IP: 195.64.140.0/23
IP: 195.177.120.0/22
IP: 2a00:1c78::/29
IP: 2a03:8280::/29
IP: 2a03:cf80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8a:03:36:37:8d:ab:f0:da:31:e7:51:4a:13:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:47:6b:e5:e2:98:50:f2:ad:88:a6:62:4d:
95:7d:c4:a8:6b:fc:76:6c:1e:c2:26:c9:fc:b9:b2:
67:09:31:f1:e2:f3:e6:48:84:06:4b:8c:96:9f:82:
d5:1c:0d:7c:f8:b5:f1:69:7d:34:e9:fb:25:e1:4d:
01:ad:ee:54:47:9e:95:44:10:cd:0c:d9:bd:eb:2a:
95:64:88:ff:76:28:40:0e:9e:c7:09:40:f4:cf:27:
18:95:5b:b4:8c:83:c0:69:d6:25:17:86:52:09:6a:
bc:55:e0:9b:dc:5a:5e:db:28:08:dc:d8:12:23:0b:
f1:15:69:36:ee:35:64:eb:24:e7:61:45:4f:b9:5a:
2e:db:a4:4e:6c:b2:4a:19:37:fb:3e:ea:b1:9e:0b:
b4:d3:5f:32:e8:7b:6b:85:77:19:55:ae:e3:10:1f:
2b:40:15:3f:7c:3d:52:eb:31:b6:9a:55:50:cf:19:
c8:6a:91:dd:6a:ed:be:6c:b3:eb:c3:c6:c0:35:43:
26:94:df:e1:7f:54:52:09:c3:57:0e:81:12:41:ea:
17:06:0c:8b:bc:d7:20:70:ae:00:6c:03:2e:19:11:
f3:df:40:d9:e2:1b:84:e3:83:e9:4f:4e:20:ec:60:
c9:b0:6a:5b:73:a7:58:81:55:bd:3d:31:7d:02:26:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.128.0/21
62.182.88.0/21
77.244.16.0/20
77.247.160.0/20
80.70.224.0/20
80.246.240.0/20
81.94.16.0/20
83.136.240.0/21
84.52.64.0/18
91.202.220.0/22
92.39.224.0/20
94.247.240.0/21
109.68.136.0/21
109.167.128.0/17
176.221.8.0/21
178.162.0.0/17
185.7.200.0/22
185.45.60.0/22
185.202.212.0/22
194.24.240.0/23
194.246.112.0/23
195.64.140.0/23
195.177.120.0/22
IPv6:
2a00:1c78::/29
2a03:8280::/29
2a03:cf80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20807
21335
25408
31484
42113
42631
44727
48201
48532
198295
Signature Algorithm: sha256WithRSAEncryption
60:08:e2:14:a8:fd:e7:12:0e:f7:52:fb:df:e4:21:44:2d:55:
ee:21:c2:3d:dc:b2:81:54:00:64:11:9c:94:d7:3a:58:51:63:
6f:19:b6:59:1b:23:7f:09:3f:89:08:22:1d:3b:c0:5c:ad:39:
7c:9e:98:55:26:fe:c3:58:5f:a0:15:ce:a4:97:bc:3e:fa:32:
c6:44:8b:26:33:70:b4:14:6b:02:9f:a7:5a:fc:bb:9f:1e:67:
83:1c:a4:e8:34:4e:6d:ab:69:04:a2:56:12:d8:21:68:92:d1:
96:94:80:fb:a1:23:8d:32:d1:42:f2:64:bd:ec:34:15:ef:3b:
0f:d7:c7:e2:4f:38:c5:7f:2b:ad:f2:8b:bc:b8:e8:cf:f6:29:
7e:a3:9e:be:1f:93:c0:64:e6:e2:3d:39:df:00:9d:d9:31:1b:
3e:0b:b4:6e:e8:03:fb:1f:7a:34:dd:53:41:a9:8f:b6:29:05:
df:dc:b4:12:dd:2b:bb:6f:9d:5a:88:ed:64:a9:5e:55:b8:d5:
3e:3c:31:d9:ad:8c:26:b5:be:8b:35:69:c1:7f:36:81:7c:c6:
a4:60:b5:ba:51:c9:b6:1f:49:43:d2:c3:10:de:53:0f:78:df:
0a:3e:60:5e:ad:e6:25:db:7b:13:60:95:56:ea:8e:b5:4c:de:
e7:84:d0:e2
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgISAYVwigM2N42r8Nox51FKE4IuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGY2ZjVkZWMwOWJjN2ExMjAzMDQ1Njk5YmEwNTgyOTVkMzhlMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArftHa+XimFDyrYimYk2VfcSoa/x2
bB7CJsn8ubJnCTHx4vPmSIQGS4yWn4LVHA18+LXxaX006fsl4U0Bre5UR56VRBDN
DNm96yqVZIj/dihADp7HCUD0zycYlVu0jIPAadYlF4ZSCWq8VeCb3Fpe2ygI3NgS
IwvxFWk27jVk6yTnYUVPuVou26RObLJKGTf7Puqxngu0018y6HtrhXcZVa7jEB8r
QBU/fD1S6zG2mlVQzxnIapHdau2+bLPrw8bANUMmlN/hf1RSCcNXDoESQeoXBgyL
vNcgcK4AbAMuGRHz30DZ4huE44PpT04g7GDJsGpbc6dYgVW9PTF9AiY8+QIDAQAB
o4IDbzCCA2swHQYDVR0OBBYEFMj29d7Am8ehIDBFaZugWCldOONGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzQ4Y2I4
Ni0yNzUwLTRkNmEtOGE3MS0xYmU1MjU1NzY4NjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvNDhjYjg2
LTI3NTAtNGQ2YS04YTcxLTFiZTUyNTU3Njg2My8xL3lQYjEzc0NieDZFZ01FVnBt
NkJZS1YwNDQwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHEBggrBgEF
BQcBBwEB/wSBtDCBsTCBkQQCAAEwgYoDBAMlCYADBAM+tlgDBARN9BADBARN96AD
BARQRuADBARQ9vADBARRXhADBANTiPADBAZUNEADBAJbytwDBARcJ+ADBANe9/AD
BANtRIgDBAdtp4ADBAOw3QgDBAeyogADBAK5B8gDBAK5LTwDBAK5ytQDBAHCGPAD
BAHC9nADBAHDQIwDBALDsXgwGwQCAAIwFQMFAyoAHHgDBQMqA4KAAwUDKgPPgDBD
BggrBgEFBQcBCAEB/wQ0MDKgMDAuAgJRRwICU1cCAmNAAgJ6/AIDAKSBAgMApocC
AwCutwIDALxJAgMAvZQCAwMGlzANBgkqhkiG9w0BAQsFAAOCAQEAYAjiFKj95xIO
91L73+QhRC1V7iHCPdyygVQAZBGclNc6WFFjbxm2WRsjfwk/iQgiHTvAXK05fJ6Y
VSb+w1hfoBXOpJe8PvoyxkSLJjNwtBRrAp+nWvy7nx5ngxyk6DRObatpBKJWEtgh
aJLRlpSA+6EjjTLRQvJkvew0Fe87D9fH4k84xX8rrfKLvLjoz/YpfqOevh+TwGTm
4j053wCd2TEbPgu0bugD+x96NN1TQamPtikF39y0Et0ru2+dWojtZKleVbjVPjwx
2a2MJrW+izVpwX82gXzGpGC1ulHJth9JQ9LDEN5TD3jfCj5gXq3mJdt7E2CVVuqO
tUze54TQ4g==
-----END CERTIFICATE-----
Generated at Sat May 10 05:03:19 2025 by rpki-client