Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J8VBc8j1o6B2thx3Fa9huPHopWg.cer
File: J8VBc8j1o6B2thx3Fa9huPHopWg.cer (raw, json)
Hash identifier: mWCkUgz21NGF0tDctxq0gNWBGghkUE7wDcWbQm9ogvg=
Subject key identifier: 27:C5:41:73:C8:F5:A3:A0:76:B6:1C:77:15:AF:61:B8:F1:E8:A5:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C96B924B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/5da15e-e8dc-4b00-99c8-17edb5738feb/1/J8VBc8j1o6B2thx3Fa9huPHopWg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/5da15e-e8dc-4b00-99c8-17edb5738feb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:53:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 92.62.124.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672543614131 (0x9c96b924b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c54173c8f5a3a076b61c7715af61b8f1e8a568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:1d:c3:ee:88:c1:e6:ed:70:dd:53:1b:06:
c8:8a:dd:85:56:a2:84:00:c6:54:04:3d:2a:58:bd:
ac:2c:5c:08:bc:ff:47:ba:f5:93:91:ce:b2:b6:89:
4b:75:d7:93:57:f0:27:2b:dc:6e:a4:99:72:7f:cf:
84:91:25:22:58:70:25:20:ce:6f:19:18:01:6f:0b:
1c:c3:d7:5f:e9:07:2e:0d:39:8c:9c:c0:b7:60:a2:
46:ff:08:0a:a0:cd:9f:8a:fa:c9:89:ab:ab:40:97:
d4:9f:53:15:45:6c:47:33:7f:77:92:56:1d:81:76:
a4:94:23:76:ed:2c:31:3b:94:8a:3e:25:c2:21:1d:
fa:08:a4:69:17:af:01:c9:78:e4:4a:44:29:36:f2:
80:a5:84:ba:4a:a7:52:a9:c9:d7:35:1a:a8:22:4f:
50:46:9d:2f:4e:bc:0e:ec:1d:65:cd:11:c8:97:0b:
eb:57:f0:cd:aa:67:20:5c:c2:c2:2e:19:ce:0d:b5:
eb:54:27:0a:d0:e0:4d:d4:a4:e6:ac:92:d1:cf:85:
20:13:37:0a:ba:3a:31:cf:2b:bb:4a:64:7f:fb:4d:
e6:84:de:36:08:d9:a1:c4:00:41:50:4f:98:36:09:
c6:21:27:0c:6d:96:6d:f7:2b:b2:43:b1:2f:73:47:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:41:73:C8:F5:A3:A0:76:B6:1C:77:15:AF:61:B8:F1:E8:A5:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5da15e-e8dc-4b00-99c8-17edb5738feb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5da15e-e8dc-4b00-99c8-17edb5738feb/1/J8VBc8j1o6B2thx3Fa9huPHopWg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:b4:92:29:55:4b:03:14:00:21:ff:8d:93:d4:bc:1e:4a:06:
48:1e:b2:ea:4c:9e:02:ec:87:d9:15:16:99:c3:5f:c0:4c:86:
a4:89:68:5d:47:d0:84:e4:6e:22:38:e9:93:b2:cc:ec:05:7a:
a8:85:6d:b6:a1:3c:b9:2c:bf:4c:95:04:d2:1e:3a:da:a2:4f:
70:01:02:aa:02:f0:10:6f:d2:b1:68:47:55:9a:68:27:d1:da:
9b:2e:76:ef:6e:75:d6:e8:fd:d8:36:a9:17:57:33:74:b6:89:
de:90:7c:c1:8b:b9:23:1d:2f:3d:e0:94:22:18:7c:9e:8d:c0:
93:9c:8f:b4:ca:e3:e5:6d:c0:b0:61:f0:96:2c:ca:12:1f:38:
33:96:0e:bc:70:ce:a1:e9:59:1d:18:8e:e1:43:3e:78:ad:86:
7d:e9:c7:94:35:f0:2b:73:b3:d9:85:5a:e1:5b:20:10:b6:6a:
72:61:93:14:09:38:21:3a:92:bc:38:70:4d:91:00:5e:0b:4e:
4d:a4:e1:e7:a5:4c:9d:60:05:ea:cb:0f:f2:1f:4d:d0:40:79:
65:30:7e:0c:93:5e:8b:8d:84:ca:18:28:8c:ae:3d:c3:d0:c5:
75:ff:ae:1e:73:02:96:3a:8d:cc:a0:dd:a6:cb:69:64:a7:ed:
2a:79:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:58 2025 by rpki-client