Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uoAmsYUu1v-m0D2Om7cbSEZA1Nw.cer
File: uoAmsYUu1v-m0D2Om7cbSEZA1Nw.cer (raw, json)
Hash identifier: akzZZwoXDHfZPym7vYy3p92lDXHjBOavLfkacFh9UZo=
Subject key identifier: BA:80:26:B1:85:2E:D6:FF:A6:D0:3D:8E:9B:B7:1B:48:46:40:D4:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FB0DA734A886CE51185E6A837F0553
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/uoAmsYUu1v-m0D2Om7cbSEZA1Nw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.17.201.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:0d:a7:34:a8:86:ce:51:18:5e:6a:83:7f:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba8026b1852ed6ffa6d03d8e9bb71b484640d4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:77:80:01:6d:6f:12:9c:54:e2:87:f8:50:
5a:cd:e3:e5:44:e6:e0:58:80:9d:14:a4:f6:bc:90:
74:5e:a3:0b:f1:4f:2f:a1:9e:13:c5:d9:d2:33:9f:
0d:c1:c1:e6:92:56:c7:43:cd:9f:d4:6c:49:97:b8:
21:c5:65:95:93:19:0f:13:41:50:62:b0:56:c6:27:
62:c6:5b:1b:5c:af:84:71:9a:3c:79:b6:ad:4b:67:
40:5b:ca:b5:56:d9:8b:bc:98:d4:8f:83:cf:93:84:
da:67:c7:af:ae:2b:e1:14:ab:6b:d8:63:d3:e9:60:
42:a1:15:00:99:dc:31:13:e4:f9:68:2b:c1:e0:57:
72:1a:1a:d3:d3:78:fd:45:73:25:2e:ea:bf:1d:d8:
44:c5:02:55:d1:12:11:11:9f:30:3a:25:e1:5a:bc:
92:df:99:ac:5b:44:d1:6d:a9:16:cb:06:a4:cf:f5:
f5:15:f8:24:7f:40:03:4a:ac:59:99:d4:92:98:e7:
72:69:e4:ac:d4:8a:cc:0b:20:fd:0c:34:98:af:9c:
3b:a8:8d:67:78:6d:44:26:cb:13:72:e5:34:79:9e:
93:1e:97:80:7b:45:75:8a:b4:25:eb:d2:06:65:38:
6e:af:a7:da:c6:d9:95:ec:31:c8:42:85:06:9a:4b:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:80:26:B1:85:2E:D6:FF:A6:D0:3D:8E:9B:B7:1B:48:46:40:D4:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/uoAmsYUu1v-m0D2Om7cbSEZA1Nw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.201.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ca:e9:bb:24:81:39:de:c2:9e:07:6b:74:ee:57:03:e4:de:
6e:e8:ab:02:e2:d1:26:af:e9:94:5a:cb:8d:ab:ff:64:2e:b8:
9c:b4:10:64:a8:52:b5:a8:b1:d7:ce:64:24:6b:0f:dc:07:75:
2b:79:3d:b0:21:bc:55:c8:78:45:52:eb:33:be:e5:93:f8:7d:
14:6d:4a:cc:7b:71:1f:0b:20:4c:da:7d:31:35:52:6b:ab:ff:
a7:dd:98:07:7f:67:cc:30:a3:ff:3e:6d:e9:96:91:56:98:0b:
38:95:cf:1b:84:b0:c6:71:6c:4e:61:c9:06:62:c4:e1:4e:fa:
ed:96:62:a6:38:f1:41:4f:fc:e1:cd:ec:fd:86:34:26:f9:42:
5b:d1:78:18:af:5c:af:7c:5c:46:77:f6:47:1b:19:a1:00:c4:
65:30:9f:46:5d:b3:aa:7e:a1:95:d0:bc:9a:7e:40:14:59:35:
69:9d:c4:a2:8e:f0:a3:c4:3d:71:03:90:c0:8b:29:5a:c2:e5:
12:e4:79:b2:99:37:d7:65:d8:5d:bc:16:41:e5:db:d5:7e:61:
88:0c:c3:d2:4c:af:2e:da:09:c7:6b:e6:0a:ea:de:f7:d3:af:
3a:64:f5:97:8a:34:40:43:ba:a2:2d:0b:46:e8:c7:51:ab:8f:
20:50:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:53:56 2025 by rpki-client