Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g5yHF4_ygJlHLy9_6XFr_BO2gkA.cer
File: g5yHF4_ygJlHLy9_6XFr_BO2gkA.cer (raw, json)
Hash identifier: QtfdDJrkXzz9ANqRNuEkuFCrOofWd1seujDSmlFs3Bc=
Subject key identifier: 83:9C:87:17:8F:F2:80:99:47:2F:2F:7F:E9:71:6B:FC:13:B6:82:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D715E5898EF995DBE8A2CC691A29C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/g5yHF4_ygJlHLy9_6XFr_BO2gkA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.157.160.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:15:e5:89:8e:f9:95:db:e8:a2:cc:69:1a:29:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=839c87178ff28099472f2f7fe9716bfc13b68240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:52:2a:34:9c:68:b7:54:e8:aa:e0:51:c8:
24:cf:22:35:e8:d6:e1:b5:c4:15:6c:22:37:ab:93:
0d:60:9a:e8:1e:a7:95:7f:5c:ef:17:37:d3:c1:29:
97:b4:f1:31:d7:8c:eb:14:ef:ee:72:a5:14:26:a8:
fd:ba:9d:6e:53:25:da:f7:b4:1c:e8:8d:2c:8c:49:
2b:b6:26:5f:e7:51:d2:3a:66:0d:16:02:17:ed:e0:
7c:0d:6a:2c:1b:62:1c:62:d1:07:dc:bc:ee:d0:15:
07:82:7b:eb:c6:07:4e:b7:ff:c3:d8:59:c5:18:2c:
b4:2b:78:5a:8b:e1:ac:31:62:19:bb:69:0e:0f:df:
b8:a4:0a:1e:ad:fc:79:09:5b:eb:28:9f:38:e9:eb:
1b:85:17:3a:08:9c:f3:13:05:2d:23:0f:58:ee:b1:
c2:2b:3b:34:0a:6a:fe:9a:6a:87:b5:95:36:29:c3:
cf:d9:1e:22:80:1f:e4:6e:36:70:b6:42:62:3e:64:
0a:a4:77:33:71:e9:cb:1a:a7:a9:14:29:8c:ea:35:
57:d3:b6:2a:d3:3d:aa:d8:e0:4f:f1:82:49:d2:eb:
08:46:6d:69:39:88:b9:95:e0:8e:f7:08:2f:98:2e:
6b:8b:9f:b8:d8:53:fe:e1:66:fc:8e:c9:d6:fc:99:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:87:17:8F:F2:80:99:47:2F:2F:7F:E9:71:6B:FC:13:B6:82:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/g5yHF4_ygJlHLy9_6XFr_BO2gkA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.160.0/22
Signature Algorithm: sha256WithRSAEncryption
97:5e:47:11:f0:eb:54:f3:4b:b2:46:37:27:61:59:73:4a:37:
d0:5c:ce:bf:6b:bc:23:bf:f4:56:04:9d:73:3c:fb:8c:3a:dd:
70:8d:db:8d:27:1a:1e:88:28:e7:a6:6e:4b:5b:61:1e:19:74:
63:bf:44:7e:e3:c5:b0:1c:77:89:64:44:fd:77:44:bf:9f:a8:
fd:dd:47:e6:c4:0f:4e:1a:f2:9b:09:4a:a2:b9:e3:b6:56:d4:
3d:8a:62:67:5c:b1:42:27:b4:d7:06:40:57:5d:7e:58:cc:91:
e4:7a:58:e7:70:dc:86:ab:a4:7d:1b:4f:80:37:e3:99:dc:9b:
1a:62:da:b7:12:a4:ac:3a:8d:d4:5b:09:b9:17:52:79:30:a2:
82:b4:c3:eb:e1:1d:4b:e6:4c:c5:a4:1c:dc:a8:f0:15:27:be:
12:44:89:f5:ff:03:85:d2:56:ea:19:93:c1:64:99:a2:55:63:
e9:3a:39:03:6f:91:04:0f:7d:b4:e2:42:4e:00:18:df:53:96:
e6:57:a8:1f:2a:ec:59:ef:53:e8:29:de:2b:17:31:04:db:7d:
05:9e:a4:35:01:df:af:c7:20:cc:1f:d4:56:c9:9c:63:cc:42:
ee:5c:9c:e0:de:a4:ca:83:27:f1:f4:ee:63:22:13:93:ed:98:
b7:e6:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:40:11 2025 by rpki-client