Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IS-H1EOa4vh_BZXc02mFkswcOvs.cer
File: IS-H1EOa4vh_BZXc02mFkswcOvs.cer (raw, json)
Hash identifier: Mkn8i6QHNBzy3IPcdk7kBCugPM5TT51gz9oQc0gQAfA=
Subject key identifier: 21:2F:87:D4:43:9A:E2:F8:7F:05:95:DC:D3:69:85:92:CC:1C:3A:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99CA4AF80C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/bf8bc7-6a1b-4dc0-837b-3bd225910b37/1/IS-H1EOa4vh_BZXc02mFkswcOvs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/bf8bc7-6a1b-4dc0-837b-3bd225910b37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:01:27 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.162.15.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660523907084 (0x99ca4af80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=212f87d4439ae2f87f0595dcd3698592cc1c3afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:11:a9:fa:40:26:6b:70:36:be:69:8a:d8:
32:74:25:5e:fc:2f:4a:c3:1e:0d:59:72:9b:24:67:
eb:d0:af:6d:0d:9a:e5:70:db:de:0b:dc:c8:03:60:
ba:c9:b9:c7:21:2d:8f:cb:c6:93:32:ac:b9:84:a9:
50:ea:c8:a8:9a:a9:2c:6d:03:9c:e1:46:1d:c3:79:
60:bc:b9:50:2b:51:cb:3b:bb:68:65:ca:06:da:f6:
81:73:7d:ad:59:61:63:a9:0c:99:ac:d2:d3:66:98:
40:64:ae:5a:e7:dd:2d:50:7e:d7:20:1b:5a:f3:88:
fc:d5:91:ec:59:ad:da:33:f2:6b:5b:7c:ef:2d:56:
80:3e:cd:97:1a:23:a1:d3:6e:a0:82:b2:fe:46:35:
9e:85:c8:2c:4a:45:0e:58:ca:4b:d4:76:f0:66:6d:
67:2c:f2:95:3c:e2:d5:c8:a3:a9:45:0f:9c:c8:71:
3f:6e:ef:98:cc:fc:9d:92:fc:31:44:c2:d1:2b:95:
60:26:8f:ac:56:ea:1a:9e:d0:e6:30:81:d5:b3:8d:
21:cb:80:88:1e:09:2a:f0:7d:97:05:f5:5e:48:d1:
28:d3:a7:51:94:36:40:40:3f:65:23:3c:78:a1:d8:
76:b8:a3:a8:cf:45:38:9a:dd:9a:cd:84:4e:41:49:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2F:87:D4:43:9A:E2:F8:7F:05:95:DC:D3:69:85:92:CC:1C:3A:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bf8bc7-6a1b-4dc0-837b-3bd225910b37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bf8bc7-6a1b-4dc0-837b-3bd225910b37/1/IS-H1EOa4vh_BZXc02mFkswcOvs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.15.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f4:49:d2:1e:38:9f:be:99:ff:9c:34:31:d9:03:0b:f7:c7:
82:91:2a:d1:2f:3f:b7:d2:01:3f:a8:3e:bc:e9:b7:b1:41:3c:
ac:82:bc:8c:4e:f1:fc:01:6a:10:f6:cb:fb:71:38:1e:3b:2c:
e9:50:85:92:0b:66:ff:9f:c2:d4:1f:fa:65:3f:d3:90:4e:bf:
92:5b:2f:0f:56:de:bf:f5:fd:73:4c:a5:2b:79:f0:7c:c4:73:
49:cb:09:3b:b3:c0:e1:8a:ca:f4:8e:04:fe:43:26:c0:57:b7:
23:6e:43:2d:71:e5:f8:9d:45:4e:4d:f6:6c:97:06:ab:37:ee:
d0:03:d4:03:55:b2:96:a3:bc:ae:ed:93:ff:3d:94:62:82:2a:
47:6c:1c:66:68:dd:c9:c1:67:6b:d6:30:19:e4:b6:d1:b4:3b:
54:08:45:95:18:0b:13:18:6f:1d:55:eb:47:4d:b5:6a:df:d1:
98:2e:07:d1:68:ca:08:11:2f:97:25:de:78:f6:2f:b2:25:02:
b4:7e:6b:65:4b:e6:eb:54:47:75:ab:08:2c:5a:45:52:b4:d3:
53:f1:2b:10:dc:47:dd:db:2d:13:72:35:f4:d4:07:cc:65:76:
1d:43:e3:9b:3e:fc:12:6a:3b:40:ad:db:4d:27:a9:d4:70:89:
6e:e3:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:20 2024 by rpki-client on console-fra.rpki-client.org