Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TFmzMbx10usv8aCubPx-Lxc9QV8.cer
File: TFmzMbx10usv8aCubPx-Lxc9QV8.cer (raw, json)
Hash identifier: FL9S00kqjRq9q8RnqlwE5hvyoz7mwwkfYQxYu9cmeV0=
Subject key identifier: 4C:59:B3:31:BC:75:D2:EB:2F:F1:A0:AE:6C:FC:7E:2F:17:3D:41:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6C6AAA52D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:06:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 212.87.196.0/22
IP: 2a09:e800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716297643309 (0xa6c6aaa52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:06:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c59b331bc75d2eb2ff1a0ae6cfc7e2f173d415f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:1a:a8:58:14:4f:71:20:2c:db:23:1d:51:
c7:be:4b:de:d6:ca:78:5d:eb:ec:d2:dc:71:98:a1:
c7:da:16:df:a3:e9:e2:3f:5b:c0:01:67:54:5f:e5:
b9:b7:7b:73:be:3e:f5:8a:d0:5c:94:85:30:26:9c:
81:b6:97:49:53:d1:3c:8b:4d:e4:2f:76:69:7b:12:
fd:f1:32:91:e4:79:0d:6e:b1:12:09:61:d0:09:7a:
2e:85:98:44:1c:d3:e5:d0:4e:b8:5c:f4:f0:af:ab:
62:6a:9c:b2:fd:58:da:9f:04:41:a2:bf:a8:9c:64:
e5:14:fe:e6:35:b1:ee:81:9f:cb:24:b7:ff:18:24:
67:73:a2:f5:17:ff:6c:fc:e0:ba:8b:d3:c8:0c:b3:
82:18:57:e8:1a:76:0a:fb:b5:bc:a6:2c:13:02:81:
1a:5e:f4:e9:8c:8f:86:6d:06:c4:be:a3:5c:3f:4b:
a8:4e:ec:41:6d:a0:64:3e:c2:b1:7b:32:f3:cf:6f:
a7:07:27:4c:8e:8e:35:61:31:c2:72:e0:04:1d:03:
df:53:cb:4b:85:d2:8b:d9:48:8d:72:d0:25:1c:6a:
ea:9e:08:ee:80:aa:89:d9:e6:80:7d:45:bb:c9:a0:
cf:90:e1:ba:de:0b:5a:56:e6:38:a1:8e:91:d9:7f:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:59:B3:31:BC:75:D2:EB:2F:F1:A0:AE:6C:FC:7E:2F:17:3D:41:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/22
IPv6:
2a09:e800::/29
Signature Algorithm: sha256WithRSAEncryption
03:8c:32:89:03:4a:f9:33:e3:6c:63:36:b4:f8:c3:ef:8b:b4:
e0:9c:27:7c:3b:d7:c1:e5:b7:8f:fe:89:fd:6b:38:84:62:45:
f9:82:81:00:56:5e:e1:8a:79:f6:4d:bd:f4:56:12:e6:44:ee:
98:80:bc:0e:f8:23:e8:0b:6e:ef:ec:73:8c:e8:eb:43:b4:34:
31:f9:1c:ca:85:08:f0:b0:c3:97:bb:73:95:93:7b:ae:34:9d:
cc:7c:15:69:42:c0:38:d2:90:96:e0:6f:78:ae:7b:23:67:49:
c0:8d:5a:cc:f1:6f:a6:e0:3e:c6:12:8b:4d:74:95:52:d9:6d:
92:f3:91:58:e2:9e:44:3e:58:22:0d:46:0d:3c:95:32:36:cf:
66:f2:ab:5a:7c:c2:7b:68:62:d8:b7:89:55:21:97:30:7b:32:
c2:5b:2f:47:a8:d1:6f:be:bc:85:85:39:fc:1e:b3:fb:5c:ae:
09:b5:15:dd:4f:2b:b0:8c:3b:50:e1:7c:b0:ae:6a:31:72:d6:
80:76:02:6c:f7:98:1b:bf:b2:7f:5a:81:32:09:ef:bb:9c:81:
87:4f:31:42:32:11:f0:d3:a4:20:96:86:b0:95:60:3d:a8:22:
39:da:90:6a:68:1b:b5:43:ef:f1:17:3f:e3:7e:9f:2a:f7:1d:
be:c0:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-fra.rpki-client.org