Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
File: pE99h8-pJ96E0QSzJshqu8Yt0vw.cer (raw, json)
Hash identifier: QdQbzxWOhpgs9blQB1ypfIda3yDTb3nPjbZWHMB2JtQ=
Subject key identifier: A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBE97F8D72A6A9F82B73667DF207C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:18:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.181.236.0/22
IP: 45.14.120.0/22
IP: 45.95.76.0/22
IP: 91.213.74.0/23
IP: 91.213.120.0/23
IP: 94.154.3.0/24
IP: 95.214.240.0/22
IP: 2a09:f080::/29
IP: 2a0e:d80::/29
IP: 2a0e:4800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:e9:7f:8d:72:a6:a9:f8:2b:73:66:7d:f2:07:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:90:87:74:b9:6e:ae:9b:c5:a3:fc:2a:7e:
61:89:9b:90:da:62:64:95:08:25:46:a9:f8:f9:c9:
ec:a2:31:93:37:d7:80:94:87:7d:b2:ce:4d:5b:d1:
11:e7:df:2e:67:e7:8b:c7:22:a1:7a:ef:8a:c4:e9:
97:4b:9d:bc:19:a2:cd:cf:75:bd:9c:8f:8b:97:fd:
f0:64:a1:1c:a1:de:41:2d:ec:08:49:58:66:1e:1f:
12:8a:61:06:4c:27:3e:bd:dd:6f:ac:b6:1f:53:0a:
d7:39:5a:1e:4c:bb:b1:77:bd:8a:6f:0c:57:19:b2:
8e:d0:93:74:4a:a4:55:31:c1:b3:e6:6d:9a:53:c4:
39:34:23:48:2d:51:7c:5d:bb:5f:46:84:62:75:f9:
c8:60:d6:8f:76:5b:30:6c:64:5f:67:49:68:67:83:
6f:e7:12:1e:c5:e9:cd:7c:5c:ad:d5:e0:89:b4:7d:
42:dd:d0:27:30:dd:68:7e:e9:cc:fb:24:75:46:78:
c8:7f:97:43:1f:98:95:57:9c:60:ff:e8:55:96:70:
f9:d2:f8:65:a2:74:ea:be:46:ee:90:b8:82:14:1f:
eb:f4:42:b2:53:c4:9c:4b:25:90:76:2a:f8:80:4d:
90:33:f7:df:2e:fa:c1:40:07:f4:07:16:4e:80:a1:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.236.0/22
45.14.120.0/22
45.95.76.0/22
91.213.74.0/23
91.213.120.0/23
94.154.3.0/24
95.214.240.0/22
IPv6:
2a09:f080::/29
2a0e:d80::/29
2a0e:4800::/29
Signature Algorithm: sha256WithRSAEncryption
08:86:e8:e0:80:b3:c5:e3:cc:72:33:fc:35:15:20:8e:20:cd:
49:df:33:dc:f5:1b:a7:f1:9c:7d:84:5b:c2:bc:d7:b5:f5:37:
6b:c7:ef:5c:51:24:9e:6a:57:d1:7c:4f:67:1c:ab:0c:43:cf:
99:3c:0b:55:c6:ff:7b:4c:59:d5:a2:22:bd:e5:de:30:22:b9:
4f:16:40:05:ae:e3:9d:e3:f6:a1:c5:bd:34:6e:c9:71:44:41:
81:a9:2c:24:fb:a3:ec:63:eb:c6:35:a7:9a:a7:74:f2:9f:b7:
88:28:e4:0b:7a:a6:ca:da:75:96:a1:c1:96:36:b6:4d:42:82:
84:9f:1a:c8:ae:e2:5d:65:83:af:09:00:4c:64:49:86:76:f0:
20:f8:18:35:ff:dd:45:15:c5:fa:65:7b:5b:01:74:07:7c:39:
7b:aa:f9:bd:26:81:d3:d4:d4:d7:76:1c:9d:aa:66:5e:30:a7:
48:78:78:04:62:ed:fb:df:5a:a8:fd:f1:71:a0:e1:8a:5c:21:
67:8d:a6:74:78:a7:6f:77:34:e0:90:be:e7:bd:77:c9:a5:43:
f8:b9:01:7c:a8:8c:39:16:8c:f1:c6:d4:fd:df:25:69:fe:a9:
39:34:91:f2:bd:41:0b:1d:de:8d:b5:00:9f:b2:7c:1a:01:8c:
7f:3f:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:55:00 2025 by rpki-client