Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SNEf5MGJhDE3enISqL3ZVmAbdZw.cer
File: SNEf5MGJhDE3enISqL3ZVmAbdZw.cer (raw, json)
Hash identifier: HDgq9vKdlDjCBD7NQcBj5l5c8DvlGX5EzssAFjh3p4s=
Subject key identifier: 48:D1:1F:E4:C1:89:84:31:37:7A:72:12:A8:BD:D9:56:60:1B:75:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F23B6AD51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/220d7c-a691-44b8-86f8-7c36019189c4/1/SNEf5MGJhDE3enISqL3ZVmAbdZw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/220d7c-a691-44b8-86f8-7c36019189c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:57:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.177.202.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683498974545 (0x9f23b6ad51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48d11fe4c1898431377a7212a8bdd956601b759c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:f1:ba:81:8f:f2:c8:8a:ae:a7:fb:41:17:
c6:30:dd:3e:ee:2c:f9:7c:b6:c0:59:0a:1e:a2:1b:
04:25:3a:09:f7:61:04:db:15:aa:d7:6e:4d:ef:2d:
47:93:0f:55:53:b4:04:ed:99:60:e2:80:88:97:ed:
4d:02:a4:94:49:25:5b:7b:86:72:d1:92:a3:a5:14:
ba:a7:58:26:60:19:8e:84:f5:f2:01:e0:15:de:c3:
22:0a:41:2e:aa:3a:60:f2:62:37:90:34:ab:ce:1a:
15:14:e3:4c:24:e0:0c:08:1c:7f:b2:7f:7a:45:f8:
88:ee:c6:e8:67:0a:33:f1:01:e4:68:63:d2:68:ad:
98:fd:4b:63:ad:ed:4d:76:f7:da:ad:d4:53:e2:ad:
2b:fb:d5:79:f8:b9:9f:cd:e6:5d:51:23:7c:60:98:
a9:69:4b:30:eb:3a:15:e2:4d:27:d1:c1:7e:a5:28:
7d:7c:a4:d0:38:5f:97:84:86:f4:4c:06:a2:9d:7a:
5b:92:6e:f9:3f:73:f8:e5:79:bb:fc:1b:c5:c9:41:
9e:bd:71:2d:c6:29:c3:d4:86:7a:1e:ff:ea:08:f2:
9a:6f:bc:74:27:a5:8f:2d:2c:d1:af:2b:df:c0:71:
a2:4e:5b:c4:34:82:02:71:3e:73:f8:af:14:e7:a7:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:1F:E4:C1:89:84:31:37:7A:72:12:A8:BD:D9:56:60:1B:75:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/220d7c-a691-44b8-86f8-7c36019189c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/220d7c-a691-44b8-86f8-7c36019189c4/1/SNEf5MGJhDE3enISqL3ZVmAbdZw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.202.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:fd:16:fb:5a:7e:eb:da:78:c6:a2:a4:50:b7:c7:e6:dd:00:
6b:bf:3f:4e:1d:10:a4:a6:01:1e:7e:9d:c2:39:29:a9:41:34:
5a:f0:3a:1d:81:49:07:c0:dd:b8:92:be:83:63:90:0f:3b:94:
55:56:28:99:9e:c1:34:ae:e8:97:c8:22:8d:c2:01:c9:36:09:
fb:7e:0e:c5:17:e8:7b:52:05:0a:6f:ac:cf:34:c9:ca:96:1f:
71:6e:c4:88:b8:0d:8d:98:1e:02:79:d2:d2:b3:ed:17:bc:a6:
f3:52:7b:2a:fd:6c:00:ae:f1:8e:9b:26:d9:9b:eb:58:ab:b5:
40:39:ab:26:1c:49:91:7e:c4:d0:aa:fd:e1:53:22:ec:19:d2:
81:82:bd:d4:f6:2c:3b:b0:4c:be:bc:83:6e:c3:17:e9:ae:51:
a7:f8:a7:bd:16:56:bc:43:ab:61:40:75:b4:49:d1:c8:3d:6a:
f4:9b:63:88:59:8a:0a:26:16:ff:c8:8d:28:5d:fd:24:75:fb:
00:f2:1d:1e:91:96:45:db:04:9e:57:7c:b5:39:c0:65:10:62:
c8:11:5f:d2:a5:71:2f:08:1c:2b:d0:39:be:0c:1e:0d:bc:8f:
5a:b9:b6:d1:9e:28:ea:fe:70:2f:de:2f:c5:04:ae:2f:e7:f9:
60:8b:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:42 2024 by rpki-client on console-fra.rpki-client.org