Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zp-LxZWqgiAd9TWDWjcRK5jZtYA.cer
File: zp-LxZWqgiAd9TWDWjcRK5jZtYA.cer (raw, json)
Hash identifier: q0JUBe6lbyIJWAnxkaS8c9FtSh/xVhWfe1K9PZWZBzI=
Subject key identifier: CE:9F:8B:C5:95:AA:82:20:1D:F5:35:83:5A:37:11:2B:98:D9:B5:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65A126FBE059A614A1B76D796C5442
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/1b09b5-c264-46ba-9fa9-7c5fe5ffbe03/1/zp-LxZWqgiAd9TWDWjcRK5jZtYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/1b09b5-c264-46ba-9fa9-7c5fe5ffbe03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2001:678:554::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:a1:26:fb:e0:59:a6:14:a1:b7:6d:79:6c:54:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce9f8bc595aa82201df535835a37112b98d9b580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:76:a5:2a:ca:2d:9a:d3:11:f5:94:f8:7d:
bb:54:63:db:31:54:10:e9:3a:07:27:5d:a4:e1:42:
cf:c1:d2:f4:7f:f0:96:7c:44:44:27:ab:bc:3d:e3:
c9:3b:c9:61:7a:2a:69:bc:d7:db:34:67:b7:70:99:
d8:39:2e:ef:1c:f4:8b:0c:42:58:cc:37:93:49:bc:
5c:aa:ba:f2:a2:b3:e8:e7:14:53:22:4d:5b:b4:a9:
ac:9d:39:89:d1:09:f1:80:69:5c:db:db:45:26:ec:
ed:41:4e:f2:d0:4c:63:81:b3:98:88:0f:a2:50:98:
9c:7e:c1:97:89:55:14:3f:1f:4f:d3:80:2a:c9:8e:
2b:e2:84:e9:cb:a9:53:69:da:17:9d:e1:6d:08:0d:
fa:8b:b1:f1:bd:5a:d3:5c:7c:e1:d7:0e:05:a2:98:
11:e1:af:24:9d:1d:e5:a6:a4:24:3d:f1:bd:3f:5a:
d6:0e:d7:64:1b:13:45:27:a8:4b:2f:c6:bb:6e:36:
5f:78:bf:cd:bb:6c:26:65:d9:2a:1d:bc:c0:8f:cd:
e9:67:04:06:19:5e:9d:75:ee:27:72:90:c1:7b:1a:
1e:2e:04:3e:73:55:c5:5a:d0:3c:b4:dc:cf:49:ba:
4e:87:01:2b:f8:fc:5b:da:79:de:a0:26:66:79:62:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9F:8B:C5:95:AA:82:20:1D:F5:35:83:5A:37:11:2B:98:D9:B5:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1b09b5-c264-46ba-9fa9-7c5fe5ffbe03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1b09b5-c264-46ba-9fa9-7c5fe5ffbe03/1/zp-LxZWqgiAd9TWDWjcRK5jZtYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:554::/48
Signature Algorithm: sha256WithRSAEncryption
31:36:be:62:3b:b9:ce:5f:a2:f8:99:36:15:2d:1b:a5:7b:5a:
06:41:69:3e:57:84:e9:24:94:f5:ad:f2:f9:75:2e:90:22:21:
6c:83:2d:2e:5c:c0:2f:19:4f:09:45:f3:a4:18:8f:9d:8d:3c:
3a:0e:64:94:d7:e6:51:50:9b:ae:fd:65:ce:0d:9c:e2:05:72:
05:bf:bb:17:eb:bd:2a:e4:33:01:52:dd:ea:b4:16:1a:63:d2:
af:3a:9a:10:b8:31:2d:4e:d1:65:ac:c2:ec:92:ca:58:79:cb:
8f:dc:4e:97:9f:2b:99:3b:06:7f:fe:29:4a:42:c4:c6:f3:17:
68:3b:38:21:5d:60:55:48:7f:e5:aa:9e:ee:0e:01:ab:50:e6:
93:da:26:dd:6f:68:6a:19:ba:7a:25:90:c1:92:3f:d4:6b:1a:
31:0a:7c:ac:f1:77:5e:1e:9f:77:04:bb:1f:0d:eb:9a:3d:d4:
d0:14:fb:a9:76:9b:20:4c:28:81:94:f6:a9:a8:0e:d4:ad:4b:
90:05:1f:3d:fb:62:e5:7e:01:a6:5f:d3:a5:a0:7c:9f:d1:e8:
3f:7d:ce:b4:7a:42:da:f7:55:70:35:31:cb:e8:cc:13:3f:28:
8b:10:17:db:3f:d1:05:07:55:45:68:da:0d:33:ca:92:b5:3d:
f2:78:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:01:57 2025 by rpki-client