Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JttFt8kQiv60wkx1z7F5-Cz7OoI.cer
File: JttFt8kQiv60wkx1z7F5-Cz7OoI.cer (raw, json)
Hash identifier: j5Iui91Eke88FIc5kuGnJNQ7IkC8ElQ1gGOZH2Kl0ls=
Subject key identifier: 26:DB:45:B7:C9:10:8A:FE:B4:C2:4C:75:CF:B1:79:F8:2C:FB:3A:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01823A7E678B9F1389B4D66B0C64A3F18CC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/5fe0b1-7862-4096-999b-eafca2a015cd/1/JttFt8kQiv60wkx1z7F5-Cz7OoI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/5fe0b1-7862-4096-999b-eafca2a015cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Jul 2022 12:32:18 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39371
AS: 200569
IP: 45.129.60.0/22
IP: 2a0e:44c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:7e:67:8b:9f:13:89:b4:d6:6b:0c:64:a3:f1:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 26 12:32:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26db45b7c9108afeb4c24c75cfb179f82cfb3a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:2f:3b:37:11:68:de:74:7c:47:e2:f7:23:
ea:e0:7b:7d:e9:0a:c1:19:8d:9c:02:11:24:44:8f:
79:81:c1:ff:e5:b9:53:7c:7d:84:84:92:03:26:e2:
25:df:fc:3e:d6:21:93:b8:15:15:54:5b:ab:84:2d:
88:ad:49:e0:d8:1a:2d:78:fd:d4:f1:2e:99:2f:f1:
88:9a:19:88:88:fa:75:cf:b2:b3:73:ab:dd:56:5f:
f7:be:70:c3:2d:6f:a8:16:af:0b:0f:dc:30:0c:72:
23:10:8b:eb:84:8e:78:4a:b9:32:97:ac:45:68:47:
72:1f:d3:43:4f:0b:a5:c2:e2:68:ad:38:be:d5:22:
1b:25:6e:64:05:68:20:80:a4:de:78:6c:23:e9:00:
d5:56:49:e1:bc:24:3a:dc:de:1f:54:13:29:87:64:
4d:5e:68:0a:ac:53:a7:cd:b0:7e:27:fa:4d:fa:9c:
9f:78:4d:af:ad:20:04:77:e1:d8:bd:03:1f:87:cc:
2a:a9:45:77:ff:f3:b1:fa:e3:c5:c8:1d:02:4e:67:
dd:64:13:79:7e:fa:de:1d:56:0a:92:2c:8b:42:24:
2a:22:0c:14:33:71:24:1a:ff:47:30:1f:68:f1:ec:
2b:66:4d:0d:14:d5:49:87:53:1a:80:54:41:25:61:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DB:45:B7:C9:10:8A:FE:B4:C2:4C:75:CF:B1:79:F8:2C:FB:3A:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5fe0b1-7862-4096-999b-eafca2a015cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5fe0b1-7862-4096-999b-eafca2a015cd/1/JttFt8kQiv60wkx1z7F5-Cz7OoI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.60.0/22
IPv6:
2a0e:44c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39371
200569
Signature Algorithm: sha256WithRSAEncryption
65:60:00:67:ed:c2:ee:3e:99:3c:50:1b:41:7e:36:6c:ce:fa:
fe:b9:50:f3:42:eb:be:3d:15:29:b2:75:cf:f4:bc:c6:8d:97:
71:7e:ea:98:d0:5b:72:50:75:af:65:85:4e:65:9a:eb:dd:88:
33:8b:56:7a:57:c5:cc:27:92:7e:2d:fd:70:bd:b9:f9:c2:c4:
a9:ac:6d:5f:6e:c4:0c:c1:fe:c0:07:db:16:a5:49:39:56:17:
35:63:c6:29:03:8a:33:11:b8:b2:8f:38:1e:db:09:0a:84:04:
29:3c:28:e8:86:2e:eb:98:32:03:e0:85:31:8a:8b:d4:cf:86:
d1:00:84:2e:f4:c1:eb:7c:c5:91:17:5f:95:3f:b3:3a:d1:1c:
61:72:77:ec:01:2c:6b:cf:5b:b5:41:70:1e:f1:72:a8:a4:35:
d0:80:77:ed:7d:ad:bc:c0:37:19:5a:16:20:91:67:c8:13:f5:
9a:44:43:40:82:5f:8c:29:e3:cb:51:0f:9c:c1:3b:cf:bc:83:
e2:9f:fb:fe:fc:91:3c:77:13:8f:c1:7b:0b:b9:33:8b:82:53:
70:d2:ca:8c:82:6b:f7:1e:7b:1f:11:67:2d:93:43:ea:40:ee:
f7:a1:5e:b3:25:7e:d4:8d:77:5f:c5:1c:07:08:f7:7f:d7:e7:
b4:98:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:49:31 2025 by rpki-client