Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aSkzpMxOHXO4Q-6zE79oQL63JZw.cer
File: aSkzpMxOHXO4Q-6zE79oQL63JZw.cer (raw, json)
Hash identifier: cZoj2pSM9fvQ6Zy1oT882RS9csZxrV+4ARAGzlSrmt8=
Subject key identifier: 69:29:33:A4:CC:4E:1D:73:B8:43:EE:B3:13:BF:68:40:BE:B7:25:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A029F3876A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/aSkzpMxOHXO4Q-6zE79oQL63JZw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:55:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 58280
IP: 45.129.224.0/22
IP: 2a0e:5040::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687898593130 (0xa029f3876a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=692933a4cc4e1d73b843eeb313bf6840beb7259c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:a2:4e:85:b9:95:4d:3c:2a:96:56:e2:68:
50:88:80:0b:d3:91:ac:16:5e:82:58:c3:24:cf:c9:
58:8f:6a:d0:71:4d:f2:70:f1:b4:55:15:7f:2a:5c:
9b:75:fb:2d:ce:7c:ac:c8:01:05:87:1a:fe:e9:5f:
17:60:50:1e:9b:3a:76:09:18:f1:06:ba:9a:fb:e5:
ca:bb:66:5c:01:11:db:e2:40:98:77:89:15:df:4d:
f0:04:8f:e5:c4:21:8b:87:67:28:2d:3b:99:9d:da:
55:cf:c4:44:66:de:c4:8f:26:d1:c2:c8:44:8d:52:
d5:b8:9d:4b:fd:5a:a3:2e:04:6b:8a:ab:26:e6:a1:
16:6d:0c:84:f4:0e:18:c6:70:f8:9a:ea:d6:15:1c:
fc:be:1c:fe:92:cb:40:da:22:53:d0:56:6b:cb:68:
98:56:dc:79:43:cd:04:06:04:30:6d:7b:1d:12:57:
58:a9:31:cb:27:7d:3c:1c:40:3e:06:d1:8e:2a:bf:
ab:9b:de:f0:6f:fa:a9:5a:2f:b6:e6:27:29:ff:89:
cf:31:e9:0a:6d:6e:d4:6e:21:04:ae:df:ce:2e:32:
11:92:c8:1b:49:77:e9:95:38:2d:fa:f3:56:1c:d3:
78:da:85:cc:10:fc:bc:fe:46:a9:72:6c:b1:e0:b6:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:29:33:A4:CC:4E:1D:73:B8:43:EE:B3:13:BF:68:40:BE:B7:25:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/aSkzpMxOHXO4Q-6zE79oQL63JZw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58280
Signature Algorithm: sha256WithRSAEncryption
0a:36:8e:b3:4d:f5:53:eb:ba:94:00:1a:66:14:8f:33:9c:36:
bd:cf:91:ac:b8:26:1a:f8:50:fd:d7:91:2c:aa:2a:64:12:e1:
a3:fe:7b:32:a6:d6:d3:87:80:07:58:49:ce:91:0a:20:ae:38:
be:1c:a9:39:54:bf:6b:21:29:97:4c:35:9b:9e:c6:67:f3:30:
5f:eb:06:c0:05:e1:18:1d:3e:e4:76:21:7f:49:fe:93:9a:bf:
03:19:67:fb:cc:ca:5c:60:b2:78:52:f6:46:d4:98:73:c0:ca:
46:0d:18:c9:0e:fe:9d:a6:c7:30:43:5d:7f:49:2f:27:bb:c8:
96:2f:cb:0e:54:48:6a:5a:84:ca:7d:c8:30:6f:d6:30:94:48:
b0:6c:bf:48:f4:0a:89:4f:c8:31:51:7a:d0:4e:c5:ed:db:47:
e2:d4:8a:1b:b7:d6:05:aa:5e:2a:05:4f:11:46:1f:bc:fd:68:
0e:fd:30:f6:64:63:ad:29:5e:19:fe:b7:fd:a3:36:8e:34:4d:
cd:4c:bc:d3:26:c6:4d:80:39:f7:86:e4:43:c8:38:96:27:76:
8b:d8:a0:30:45:61:65:e0:91:54:b6:3f:3b:6f:40:4e:9f:bb:
a6:cc:9f:09:25:30:79:93:58:50:de:62:6d:3e:b5:44:a8:70:
54:40:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 02:47:44 2025 by rpki-client