Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F5k4MKGvO8hzO8KTSkpEPMX0P48.cer
File: F5k4MKGvO8hzO8KTSkpEPMX0P48.cer (raw, json)
Hash identifier: uth3okMO+vj7NEzwGlqGNoLzl2oMfeBQU08VbFlGZrI=
Subject key identifier: 17:99:38:30:A1:AF:3B:C8:73:3B:C2:93:4A:4A:44:3C:C5:F4:3F:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8F560573D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:06:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.229.142.0/23
IP: 91.247.228.0/22
IP: 195.35.109.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725671237437 (0xa8f560573d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:06:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17993830a1af3bc8733bc2934a4a443cc5f43f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:11:0f:98:d5:47:c3:ef:c7:4d:c4:d6:1f:
f7:9d:dc:57:0d:64:a1:fd:45:99:b1:2e:f8:c0:6a:
b8:b0:a1:63:76:bf:e3:1e:14:d7:80:77:80:ea:6e:
8c:d0:d8:ea:34:c5:b8:20:12:b7:24:63:1b:75:3d:
81:53:46:9a:2a:33:67:ab:d5:7e:fe:72:00:02:d4:
4e:be:2e:80:4b:33:87:f5:77:72:fd:79:4f:a2:f9:
61:d3:24:90:ca:58:9b:8c:85:02:eb:4b:26:3f:83:
c8:5e:db:05:06:2f:9d:54:1b:52:06:b5:33:2d:1f:
15:ff:75:18:6b:a6:a3:e4:fb:d2:48:03:e1:a6:7e:
d6:27:77:92:97:52:45:9e:67:0b:85:52:4f:23:fa:
27:78:f4:27:62:b5:c3:87:8d:95:26:75:c6:a5:98:
90:e4:10:2e:d6:d5:57:27:00:c0:f1:c0:3e:a2:60:
50:f2:14:4b:9e:ca:b2:dd:97:c9:ec:ba:2b:5d:51:
c5:ce:c1:26:cb:16:a5:32:5f:ef:52:c2:0f:0c:84:
f9:73:26:a4:48:9e:a0:7e:6a:20:e9:a3:43:f2:ba:
fd:4e:1f:91:45:96:a0:01:e6:fe:04:5c:dd:26:1c:
5b:ff:2c:e7:d7:7c:04:89:fe:0c:4f:10:31:ce:1c:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:38:30:A1:AF:3B:C8:73:3B:C2:93:4A:4A:44:3C:C5:F4:3F:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.142.0/23
91.247.228.0/22
195.35.109.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b7:bb:13:2b:ea:4a:13:93:c5:1c:7c:24:ba:e3:8f:f8:fd:
95:3e:29:7e:c8:07:2e:8f:f2:6c:2b:8c:db:df:ee:01:42:bf:
f2:a0:c3:c2:4e:d9:4c:13:90:88:44:91:c6:f8:bb:ea:33:4e:
41:c3:53:d7:7e:38:1a:5f:9e:8c:0a:f9:83:73:9a:2a:7d:22:
23:9f:14:6d:f5:9d:ef:23:fb:8b:9b:22:e2:30:2c:2b:ec:b5:
fe:b9:18:46:5d:ab:66:8e:ff:e0:12:ae:b7:70:6b:02:05:5c:
a3:1d:95:00:22:df:44:09:be:73:60:db:38:1b:58:90:2b:89:
bf:61:ad:52:f1:c6:b4:bd:31:41:d3:48:c8:36:e1:1e:90:39:
35:4c:cd:3d:45:ec:2b:90:28:22:30:90:a6:e0:40:e5:b6:23:
1e:9f:c2:2a:91:cc:52:a6:f6:36:7a:3b:47:08:80:ff:fc:e4:
45:73:d1:f5:ed:2a:d4:d7:ec:8b:f8:b8:21:5b:70:8e:2d:6f:
1a:40:c2:b4:70:bf:e8:ae:1f:c6:8c:50:55:e1:0c:91:ab:49:
43:59:b3:e1:a2:39:27:60:10:9b:bb:f2:ee:b7:d6:61:b5:eb:
b7:d2:5e:71:f4:8a:32:aa:a7:af:12:ee:c9:dc:99:b8:e4:02:
4f:04:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:29 2024 by rpki-client on console-ams.rpki-client.org