Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IDVOIBXuDBeb8DrtM3MxT95vEd4.cer
File: IDVOIBXuDBeb8DrtM3MxT95vEd4.cer (raw, json)
Hash identifier: gIeonyc6xDGQQ7ifb32lN3fzcTHUs7pbfA2mFRO/gWw=
Subject key identifier: 20:35:4E:20:15:EE:0C:17:9B:F0:3A:ED:33:73:31:4F:DE:6F:11:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D68BD79F46AFDFB5133E61DD093C6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/IDVOIBXuDBeb8DrtM3MxT95vEd4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:04 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.41.253.0/24
IP: 2a11:3080::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:8b:d7:9f:46:af:df:b5:13:3e:61:dd:09:3c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20354e2015ee0c179bf03aed3373314fde6f11de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d5:34:45:3e:9f:1a:e7:c3:23:fc:1c:44:3d:
61:96:e9:d9:67:33:70:bf:77:04:65:c4:19:73:36:
db:5b:aa:e8:f3:4f:5e:ae:27:84:b7:5b:94:51:37:
86:a3:3d:3f:2e:4d:47:6d:66:a2:8b:ad:bb:db:6f:
a1:47:e1:0e:9e:34:3b:28:3e:98:48:2f:5b:f0:09:
cf:5d:ea:70:d1:95:20:a9:cc:d1:75:5c:df:ec:9a:
78:82:3c:90:14:46:31:a9:07:97:28:11:57:55:f7:
ed:42:57:28:02:61:a8:29:12:10:51:49:20:d4:76:
8a:ad:2d:e1:a9:17:60:13:03:43:e6:ab:10:ec:77:
8e:2c:fc:a8:4e:5d:23:db:4c:48:9a:c6:14:67:0d:
04:e6:15:f0:81:b5:d9:b7:b6:55:c2:fc:34:78:ad:
4a:de:e8:15:67:a9:b6:9e:dd:19:3b:f4:0d:46:29:
f9:5a:2e:ad:bd:39:7e:ff:52:87:83:c7:ca:29:b5:
66:58:2a:fe:e8:94:ba:6f:b7:ae:b6:bd:58:cb:b6:
44:10:d9:41:d6:b8:4b:52:7c:41:6e:b9:7a:a2:2f:
2c:69:16:ba:dc:15:9b:f4:00:fe:6d:89:c3:0c:22:
b8:4f:82:94:ff:7e:37:20:3f:49:da:f9:9d:10:b7:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:4E:20:15:EE:0C:17:9B:F0:3A:ED:33:73:31:4F:DE:6F:11:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/IDVOIBXuDBeb8DrtM3MxT95vEd4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.253.0/24
IPv6:
2a11:3080::/29
Signature Algorithm: sha256WithRSAEncryption
a1:d3:8d:56:18:41:19:13:44:94:43:b9:29:06:77:cb:7a:77:
3e:13:e1:33:92:52:a3:5f:5d:f4:45:e9:4f:96:ed:1f:69:fe:
ba:e6:19:72:57:f9:67:3d:0e:e4:48:ef:1c:71:97:1d:31:c6:
b1:16:cf:d5:a5:45:c8:cc:d2:d3:e7:4d:94:7f:67:27:57:15:
c8:27:97:e2:5e:e5:d1:06:9d:07:c1:96:49:81:7a:eb:e8:6b:
98:c2:6c:a8:98:ac:f4:57:01:50:17:4c:5e:97:88:b2:cd:17:
2a:5c:3b:43:05:40:b8:65:d6:9c:a7:ab:30:d2:54:64:70:b4:
89:81:08:81:46:3c:af:30:26:06:53:d4:86:0b:8d:eb:e2:1e:
0a:0d:43:32:9b:0c:5a:ca:88:72:ce:6a:7c:aa:aa:11:c4:4d:
66:db:fa:29:69:cb:8d:b5:16:aa:7b:9c:ec:9b:39:2e:69:29:
c3:7d:0e:53:7c:5a:34:5c:57:6b:cc:21:86:da:bf:68:a4:c5:
30:02:5a:38:c2:1c:72:4e:74:b8:2c:97:1a:97:9d:ac:0d:b8:
08:5b:64:fb:0c:9b:4f:d4:0f:d1:a9:a2:b8:fe:4a:72:af:4b:
ce:5b:fa:c3:5a:4f:87:5f:43:6d:2d:80:86:c4:a1:f5:16:0d:
36:35:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:23:12 2025 by rpki-client