Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H3ddmWJZd0LOcOGtY9R7ulWlU0s.cer
File: H3ddmWJZd0LOcOGtY9R7ulWlU0s.cer (raw, json)
Hash identifier: UHHeBdM3skEf2iL0+mW7nRq4HGJ2R+xYl8k1G68CRhg=
Subject key identifier: 1F:77:5D:99:62:59:77:42:CE:70:E1:AD:63:D4:7B:BA:55:A5:53:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9BB0DE4D34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/H3ddmWJZd0LOcOGtY9R7ulWlU0s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:56:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 31184
IP: 193.22.253.0/24
IP: 195.74.40.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668687289652 (0x9bb0de4d34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f775d9962597742ce70e1ad63d47bba55a5534b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:39:e3:de:8b:0e:83:98:9d:03:ed:11:39:
41:dd:f7:a4:93:8f:6f:d3:cb:9f:e1:e9:db:41:86:
d0:1f:69:42:b6:de:22:dc:d4:13:e2:cf:65:d1:2a:
d4:40:18:5c:54:7f:25:1b:b2:57:a6:5f:5d:ba:f5:
a7:6b:ad:11:f2:e5:1b:8a:10:7e:26:c0:e7:2d:8a:
65:98:05:48:8a:3b:aa:3a:ed:9f:e7:21:86:d3:18:
04:99:3c:9c:bf:72:f3:bf:b9:2a:4c:3d:52:63:77:
d1:dd:f5:10:cf:db:19:9c:ae:77:0f:73:88:09:42:
9e:d5:8e:33:05:21:35:1c:30:56:ce:e3:31:a3:61:
c1:00:3b:2f:3e:b9:05:fd:e3:a5:15:b0:a0:9f:9f:
79:2c:ab:9f:fb:3d:55:20:11:19:c2:2b:5f:39:a4:
13:86:e1:b4:cd:e5:c2:52:75:d4:32:3f:ea:06:2e:
16:55:74:98:db:c6:03:77:77:29:22:e7:41:fd:bb:
2b:48:95:ab:f9:0b:ba:f4:9d:91:20:1d:ce:44:b9:
0a:5d:d0:c5:05:ff:69:2b:43:ac:82:11:d2:1a:98:
88:6b:36:c5:75:94:1c:5d:7a:7f:cf:65:ce:d6:12:
19:db:a2:e9:2e:ac:8e:e2:03:23:a6:7d:2a:0d:af:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:77:5D:99:62:59:77:42:CE:70:E1:AD:63:D4:7B:BA:55:A5:53:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/H3ddmWJZd0LOcOGtY9R7ulWlU0s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.253.0/24
195.74.40.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31184
Signature Algorithm: sha256WithRSAEncryption
48:85:c5:bd:06:4c:41:9f:44:ef:8d:ed:51:9f:4e:25:d1:cf:
6a:3a:f3:37:c4:11:e8:0f:a8:94:3e:3e:71:c5:ae:f4:f3:f4:
03:a3:4a:ab:e4:bf:c8:4d:3c:22:8e:16:ac:a9:14:9c:82:17:
b1:5a:75:1d:03:6e:68:c0:06:24:19:0e:65:59:22:7e:e1:01:
56:25:8c:3c:01:5a:0b:45:3e:b9:05:04:6b:75:19:84:2b:9e:
55:34:4f:76:09:2a:0b:db:64:5f:8d:96:88:0b:34:5b:bd:52:
0d:5d:68:7c:b7:e3:31:39:c1:ac:6e:1f:71:7d:3d:26:3d:00:
33:91:99:c0:67:d9:7d:83:65:58:57:d7:7d:8c:69:02:43:c3:
f4:a6:b9:df:c0:f2:81:46:a8:a2:40:1f:ea:dc:e5:38:55:02:
3e:c1:b6:0c:ef:14:52:52:2a:a2:9e:de:6f:04:99:67:9a:c3:
b9:0a:12:53:24:35:92:86:01:0d:32:d5:62:88:e5:cc:7d:53:
48:0d:75:64:e1:06:c2:02:a3:64:95:f7:c6:a6:c1:21:7d:6a:
0a:f7:71:85:72:51:41:1f:69:fc:50:ba:90:a0:a9:a7:0b:ec:
8f:6a:19:a1:3a:f5:40:75:95:74:8e:ff:af:c1:e2:43:4b:cd:
23:b8:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:35:29 2025 by rpki-client