Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kr3peKeWAjr7qbriuDx0HDrwho.cer
File: 4kr3peKeWAjr7qbriuDx0HDrwho.cer (raw, json)
Hash identifier: tc5J4Ar65kmkP9bmWm9u/DJrZv7/n02mVRP6BQfeT5A=
Subject key identifier: E2:4A:F7:A5:E2:9E:58:08:EB:EE:A6:EB:8A:E0:F1:D0:70:EB:C2:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A46D0544E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/fa9ff2-ed55-409a-b6a0-f9de5e23f163/1/4kr3peKeWAjr7qbriuDx0HDrwho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/fa9ff2-ed55-409a-b6a0-f9de5e23f163/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:05:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.143.140.0/22
IP: 2a0e:e840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706203698400 (0xa46d0544e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:05:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e24af7a5e29e5808ebeea6eb8ae0f1d070ebc21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:a5:3d:32:01:a4:61:40:7c:78:68:ee:33:
f2:b9:a3:56:bf:68:3a:86:a4:b3:95:0a:11:ff:a4:
b2:e5:b7:8d:ae:70:8d:a8:2b:96:15:6f:05:28:76:
5c:5a:e0:f8:62:5e:50:b0:3b:c9:d1:3d:31:9d:6b:
28:7d:6f:31:37:2b:7f:4d:5e:5b:b6:bf:46:13:bc:
1d:ef:2b:13:20:76:9b:d9:88:88:12:78:bd:63:af:
30:cc:3d:fc:a1:5e:88:14:8a:41:14:1c:0f:2b:2f:
0c:e7:9f:52:08:bb:47:de:7b:26:4e:ad:b7:84:43:
e1:1c:3a:5b:c8:c5:a6:ba:63:3e:03:7d:0e:4a:dd:
b3:5b:2b:1f:53:1e:a5:7d:33:3a:5b:db:45:aa:29:
a3:f4:b4:5b:9e:8f:6d:64:b6:f4:7a:f4:4f:4d:b8:
b1:f4:1c:74:52:38:62:06:34:e4:a4:e9:6a:55:74:
a9:a3:6a:66:3e:c7:69:96:c2:a1:41:74:3b:a9:ba:
e0:e7:4d:49:15:b9:6a:e4:7b:bf:e3:83:d5:f1:4b:
b4:57:6f:eb:d1:d8:b2:63:56:a7:d6:60:50:80:67:
76:4c:5b:7e:df:9e:69:27:e7:66:2f:ca:44:63:0f:
f1:21:bb:96:f3:38:92:7b:7c:5d:f9:e5:44:e8:49:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4A:F7:A5:E2:9E:58:08:EB:EE:A6:EB:8A:E0:F1:D0:70:EB:C2:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fa9ff2-ed55-409a-b6a0-f9de5e23f163/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fa9ff2-ed55-409a-b6a0-f9de5e23f163/1/4kr3peKeWAjr7qbriuDx0HDrwho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.140.0/22
IPv6:
2a0e:e840::/29
Signature Algorithm: sha256WithRSAEncryption
10:d8:6f:f2:35:41:b0:41:d6:df:29:0b:7f:10:94:ce:26:25:
33:f5:54:9f:52:aa:19:b3:68:23:2b:ba:c4:62:46:73:c0:f7:
bf:95:bd:81:63:86:36:47:7a:1c:5d:a2:11:3b:b7:02:cf:6b:
0f:b2:e0:d9:79:d0:7a:66:52:92:39:1e:c5:3c:a1:a5:bd:26:
2d:27:26:34:a4:7e:a2:10:fb:4e:92:98:98:ba:4e:4c:d0:43:
32:62:5a:4d:de:af:ba:c6:bc:9d:80:d3:78:74:54:36:3c:87:
de:9b:06:9e:ad:1d:57:e7:95:c5:5a:f2:66:cf:9e:a9:1f:bf:
b1:ca:8b:c6:77:01:24:00:41:5b:fb:33:d2:40:40:73:7f:96:
fd:86:07:45:fd:62:20:ac:09:9f:33:73:97:a1:b0:88:4b:10:
6e:10:72:90:b9:4d:e8:fc:16:8c:da:f2:40:83:31:00:c5:a0:
59:af:d5:04:3d:ce:4d:03:8c:df:78:7d:9e:d2:a7:4b:7f:79:
aa:be:0b:31:54:59:9b:82:5c:14:07:83:cf:53:1c:01:9f:d2:
76:2f:92:b4:15:bb:d1:b5:df:49:81:79:5c:04:7c:4a:2d:10:
43:8d:79:07:22:47:98:e5:ae:1e:ff:40:c8:a0:c3:be:fd:71:
3b:3f:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:33 2024 by rpki-client on console-ams.rpki-client.org