Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P0bQfaj7MmUOrCOMBjmOQseF554.cer
File: P0bQfaj7MmUOrCOMBjmOQseF554.cer (raw, json)
Hash identifier: NdN1Y0P0Q6vla0JnzvSRRdj1JBeDf1ZmEMR/zI9dWjo=
Subject key identifier: 3F:46:D0:7D:A8:FB:32:65:0E:AC:23:8C:06:39:8E:42:C7:85:E7:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A717F6D1ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/91f225-85c7-432f-b5ea-2920afa77fef/1/P0bQfaj7MmUOrCOMBjmOQseF554.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/91f225-85c7-432f-b5ea-2920afa77fef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:55:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 5.133.108.0/22
IP: 5.181.12.0/22
IP: 45.10.248.0/22
IP: 45.15.72.0/22
IP: 45.92.172.0/22
IP: 45.129.4.0/22
IP: 45.132.16.0/22
IP: 85.208.84.0/22
IP: 91.188.228.0/22
IP: 193.42.116.0/22
IP: 193.168.130.0/23
IP: 194.35.116.0/22
IP: 194.50.72.0/23
IP: 194.50.170.0/23
IP: 194.93.28.0/22
IP: 2a09:2480::/29
IP: 2a09:6580::/29
IP: 2a09:7a00::/29
IP: 2a09:8440::/29
IP: 2a09:a100::/29
IP: 2a09:c000::/29
IP: 2a0c:ac0::/29
IP: 2a0d:e140::/29
IP: 2a0e:2180::/29
IP: 2a0e:21c0::/29
IP: 2a0e:43c0::/29
IP: 2a0e:4b00::/29
IP: 2a0e:6940::/29
IP: 2a0f:6c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717661589997 (0xa717f6d1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f46d07da8fb32650eac238c06398e42c785e79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:81:e9:99:82:62:48:7e:a1:22:0f:08:ec:
8a:9c:c1:6f:c4:71:61:33:23:0c:a4:a3:ab:36:7f:
32:ab:58:5c:f2:bd:8d:d7:e9:41:ec:34:9e:97:75:
8c:c8:a4:b1:ff:be:3e:f4:4c:5c:53:66:b9:3b:91:
66:97:0c:c4:4a:19:2e:68:2e:f3:19:bb:22:79:43:
58:1b:66:f4:ac:ef:86:b7:bd:bf:61:50:2c:9c:80:
5c:9c:63:94:76:52:8b:bd:b9:55:d8:ea:56:8f:f9:
64:15:44:4e:a9:2b:17:15:4d:cf:a8:ac:c5:95:7e:
aa:04:d9:79:19:d4:da:ce:15:28:06:a8:70:ce:b9:
8f:b5:c8:c3:f9:75:a1:8c:54:44:81:13:9d:63:53:
50:3b:0a:91:40:57:54:a9:ba:e4:c7:d5:da:82:b4:
84:35:a0:8b:3a:85:0c:5f:a2:cd:5e:87:da:0a:45:
f3:02:96:ac:35:a6:ac:1c:66:0d:a2:50:bc:56:ab:
62:2b:3a:70:46:12:a4:ea:a6:b6:39:aa:ca:35:ee:
2d:46:e0:83:f9:6d:76:9a:c6:a1:fb:8d:8d:e1:9d:
89:d6:ea:56:79:d4:ef:24:9a:92:1b:cf:d3:ed:0f:
d0:f8:f3:a3:44:07:a8:2d:dc:4d:b0:04:b0:74:46:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:46:D0:7D:A8:FB:32:65:0E:AC:23:8C:06:39:8E:42:C7:85:E7:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/91f225-85c7-432f-b5ea-2920afa77fef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/91f225-85c7-432f-b5ea-2920afa77fef/1/P0bQfaj7MmUOrCOMBjmOQseF554.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.108.0/22
5.181.12.0/22
45.10.248.0/22
45.15.72.0/22
45.92.172.0/22
45.129.4.0/22
45.132.16.0/22
85.208.84.0/22
91.188.228.0/22
193.42.116.0/22
193.168.130.0/23
194.35.116.0/22
194.50.72.0/23
194.50.170.0/23
194.93.28.0/22
IPv6:
2a09:2480::/29
2a09:6580::/29
2a09:7a00::/29
2a09:8440::/29
2a09:a100::/29
2a09:c000::/29
2a0c:ac0::/29
2a0d:e140::/29
2a0e:2180::/29
2a0e:21c0::/29
2a0e:43c0::/29
2a0e:4b00::/29
2a0e:6940::/29
2a0f:6c0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:62:69:4c:e2:e6:f4:8b:c0:52:31:15:e3:44:81:22:c1:49:
ca:ad:38:dc:ef:c8:fd:ca:2d:c9:89:6b:1f:a2:b4:94:f6:44:
a5:7f:40:72:44:da:6f:e0:1b:4a:09:fe:51:3a:93:d7:36:c5:
d8:c3:a1:e3:70:39:3b:d8:df:97:55:ec:89:2a:e0:1e:de:ba:
8e:6e:90:db:f8:4f:10:82:e0:4b:c5:06:c6:58:82:1d:4d:0e:
c2:a7:c1:68:e8:c2:27:7d:ee:6d:07:7d:20:ab:5a:76:ef:72:
ec:a2:a2:a4:d2:64:c5:38:63:26:83:54:96:eb:22:18:21:c2:
ba:d0:6b:86:bd:d9:25:f1:3a:3b:b8:ed:ee:5a:c4:6b:67:8e:
a2:b7:ee:b6:69:9b:2f:d0:f6:1d:07:39:93:41:41:cc:ec:7d:
c6:21:53:1f:86:a8:6e:48:ac:0a:f7:4e:bb:ea:1d:f9:cc:3f:
f6:fb:b1:1c:73:d8:be:ac:d6:dc:ca:20:7c:fd:e2:dc:b1:4d:
4e:0a:a2:e0:c0:e5:8d:a5:b2:aa:e3:c4:cd:54:82:30:b7:b7:
03:e3:bf:95:c1:1c:bc:30:78:6d:83:86:ce:fc:0a:9f:33:e7:
19:b6:a1:56:d9:0c:e9:03:19:dd:fe:ff:56:7a:e0:f8:50:1d:
ae:3b:a4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:48 2024 by rpki-client on console-ams.rpki-client.org