Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KwxtKY8oMsqgyx4a2n_fDPMA2OE.cer
File: KwxtKY8oMsqgyx4a2n_fDPMA2OE.cer (raw, json)
Hash identifier: x2x2xweO06RueNZsrxydnhr0JeGYRCelYiylqF4kRDo=
Subject key identifier: 2B:0C:6D:29:8F:28:32:CA:A0:CB:1E:1A:DA:7F:DF:0C:F3:00:D8:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4ED0DF3626E12B7418EC73B8B02FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/KwxtKY8oMsqgyx4a2n_fDPMA2OE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.168.132.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:ed:0d:f3:62:6e:12:b7:41:8e:c7:3b:8b:02:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b0c6d298f2832caa0cb1e1ada7fdf0cf300d8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:ac:6a:d2:b6:fb:64:48:ed:43:dc:a0:74:
e1:ad:04:97:58:0b:50:e1:58:de:19:1e:73:7b:aa:
5a:c8:b2:48:00:d8:75:82:9b:a5:64:99:43:73:4e:
6f:5b:3c:8f:0a:91:f8:20:d4:2f:b4:2d:e1:0b:f8:
e0:aa:12:be:d0:7f:19:69:50:7e:71:6c:f6:a8:6e:
27:96:4f:ea:24:c0:d3:3d:59:15:e8:77:ce:12:7d:
43:f6:e4:8e:54:db:82:c3:77:85:1b:43:b9:97:63:
e8:3e:7b:49:b3:ed:21:a3:26:45:47:11:02:af:45:
f2:5f:6b:8d:5d:d9:a3:19:31:0f:ee:16:30:08:96:
0d:ad:2b:bb:44:e6:83:27:19:5d:21:44:c1:b2:18:
fc:1c:18:ea:e7:a6:8d:b2:82:5f:30:f5:96:0d:0d:
30:56:d8:a2:b3:fa:5e:f9:8e:3e:43:45:94:cd:39:
97:93:13:ca:49:cd:92:27:be:40:ae:4b:b0:e3:55:
38:69:0f:39:59:e6:46:24:47:9a:b8:15:e8:c1:2b:
11:86:40:c3:e2:6c:f3:bb:df:2e:10:47:33:30:83:
73:6d:0f:1e:10:06:23:7f:27:16:76:d8:46:27:fb:
9e:d1:d7:85:b9:c4:90:bc:8a:0f:57:29:91:32:7d:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:6D:29:8F:28:32:CA:A0:CB:1E:1A:DA:7F:DF:0C:F3:00:D8:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/KwxtKY8oMsqgyx4a2n_fDPMA2OE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.132.0/22
Signature Algorithm: sha256WithRSAEncryption
92:b9:be:9d:81:52:eb:16:de:03:cb:f1:42:00:cd:19:fc:24:
91:19:cd:f9:9a:30:ff:49:c2:68:bd:c7:5d:bf:ab:5e:92:fb:
3e:f7:8e:d6:2a:44:02:75:83:9e:29:2d:28:53:33:3c:3d:8e:
c7:c4:f3:04:e2:f2:2a:ba:b6:8b:77:b2:c4:6b:2c:a6:cd:d7:
db:f4:52:d7:fb:29:49:3f:af:08:70:80:6b:96:e9:a0:7e:a9:
df:11:d3:47:a4:b9:66:bb:18:ef:01:0f:e7:72:89:d9:68:95:
45:97:d3:5d:49:8a:89:9b:c7:28:1a:f7:c1:1f:37:f0:80:c7:
fc:59:78:9e:f8:a9:e6:0c:4f:b9:09:50:c5:fb:d5:6e:ae:00:
b9:a2:70:7b:e2:d5:42:54:b2:f0:cf:fd:78:6c:3e:4e:56:a8:
5d:f7:e3:d1:b8:f3:b8:f1:24:72:c5:42:64:c1:d5:da:45:d7:
6c:5b:13:21:d9:d5:ba:4a:82:50:f4:77:2b:88:2b:8b:97:0a:
5d:99:1c:68:2d:23:06:1c:4c:ff:94:8e:6d:16:62:b5:b8:c4:
0a:0e:9a:04:d0:e4:a4:38:89:e5:da:9a:43:29:03:ee:23:d7:
5b:ce:32:06:05:9b:5f:c6:eb:13:f9:c3:ff:3f:32:c3:94:f2:
6c:6c:6a:a4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVq9O0N82JuErdBjsc7iwL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjBjNmQyOThmMjgzMmNhYTBjYjFlMWFkYTdmZGYwY2YzMDBkOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfWsatK2+2RI7UPcoHThrQSXWAtQ
4VjeGR5ze6payLJIANh1gpulZJlDc05vWzyPCpH4INQvtC3hC/jgqhK+0H8ZaVB+
cWz2qG4nlk/qJMDTPVkV6HfOEn1D9uSOVNuCw3eFG0O5l2PoPntJs+0hoyZFRxEC
r0XyX2uNXdmjGTEP7hYwCJYNrSu7ROaDJxldIUTBshj8HBjq56aNsoJfMPWWDQ0w
Vtiis/pe+Y4+Q0WUzTmXkxPKSc2SJ75Arkuw41U4aQ85WeZGJEeauBXowSsRhkDD
4mzzu98uEEczMINzbQ8eEAYjfycWdthGJ/ue0deFucSQvIoPVymRMn24MwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCsMbSmPKDLKoMseGtp/3wzzANjhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzg0NzBk
Zi1jYjE5LTQxOTQtOWQ4ZS1lMTkwNTNiZTY2ZWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvODQ3MGRm
LWNiMTktNDE5NC05ZDhlLWUxOTA1M2JlNjZlZi8xL0t3eHRLWThvTXNxZ3l4NGEy
bl9mRFBNQTJPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuaiEMA0GCSqGSIb3DQEBCwUAA4IBAQCSub6d
gVLrFt4Dy/FCAM0Z/CSRGc35mjD/ScJovcddv6tekvs+947WKkQCdYOeKS0oUzM8
PY7HxPME4vIquraLd7LEayymzdfb9FLX+ylJP68IcIBrlumgfqnfEdNHpLlmuxjv
AQ/nconZaJVFl9NdSYqJm8coGvfBHzfwgMf8WXie+KnmDE+5CVDF+9VurgC5onB7
4tVCVLLwz/14bD5OVqhd9+PRuPO48SRyxUJkwdXaRddsWxMh2dW6SoJQ9HcriCuL
lwpdmRxoLSMGHEz/lI5tFmK1uMQKDpoE0OSkOInl2ppDKQPuI9dbzjIGBZtfxusT
+cP/PzLDlPJsbGqk
-----END CERTIFICATE-----
Generated at Mon May 12 13:58:56 2025 by rpki-client