Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDnyICfb5uAFl0KBCaY0TJ8kXIA.cer
File: aDnyICfb5uAFl0KBCaY0TJ8kXIA.cer (raw, json)
Hash identifier: PvNfgAjzvrJqJ14JvaPB7bHcUFngY7e3R95UDDUl6FI=
Subject key identifier: 68:39:F2:20:27:DB:E6:E0:05:97:42:81:09:A6:34:4C:9F:24:5C:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 771BFDDB6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/14488d-504e-4ea2-b477-73146db901b0/1/aDnyICfb5uAFl0KBCaY0TJ8kXIA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/14488d-504e-4ea2-b477-73146db901b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:43:02 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 5.181.148.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511570729835 (0x771bfddb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:43:02 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6839f22027dbe6e00597428109a6344c9f245c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:60:d7:fb:6d:1b:c0:a5:20:2f:3b:33:f0:
d6:1c:6d:b5:b4:57:57:8a:60:1a:ae:d5:ea:50:10:
c3:df:a0:69:c2:48:42:ed:f5:89:81:c4:c2:96:3c:
81:73:74:bd:e0:1e:10:47:f7:f8:aa:52:c3:6b:8b:
84:41:a7:29:06:3b:2e:6c:88:b7:c7:c0:3d:68:13:
99:16:b1:7f:be:1d:14:f8:9a:b6:68:ee:62:72:63:
b7:85:32:25:2e:45:27:7e:40:06:0e:cc:27:82:95:
e2:29:3b:f0:e8:c6:81:35:28:54:20:0b:b0:b3:2d:
2c:8e:1e:23:df:59:a1:22:f5:ba:28:c2:58:61:f4:
5a:91:5e:c4:c0:2c:b3:e9:af:e5:c3:43:3f:da:57:
4d:82:9b:a2:31:66:73:02:34:e1:cc:38:8a:fd:62:
4c:2d:5b:33:ad:a4:3b:10:56:eb:ee:1f:1a:a4:08:
3f:43:0f:7d:d6:9a:6c:66:4c:ff:08:3a:9b:4b:cb:
4f:2a:c1:33:28:09:bb:bd:85:b0:c7:99:7d:cb:e7:
f4:68:26:cb:47:f6:23:ce:69:80:c6:e1:55:b8:a8:
de:00:19:d5:39:41:23:48:18:f0:5a:e4:a6:a4:25:
1f:7f:36:ef:58:19:28:67:c4:87:d0:5d:a1:b1:11:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:39:F2:20:27:DB:E6:E0:05:97:42:81:09:A6:34:4C:9F:24:5C:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/14488d-504e-4ea2-b477-73146db901b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/14488d-504e-4ea2-b477-73146db901b0/1/aDnyICfb5uAFl0KBCaY0TJ8kXIA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.148.0/22
Signature Algorithm: sha256WithRSAEncryption
14:68:3d:5e:04:9e:0c:dc:2f:a1:54:8a:7f:6e:32:01:38:ae:
53:47:ec:e7:96:6e:e3:50:c6:84:90:68:3c:08:b7:1f:15:2a:
14:7d:0c:cd:3b:8f:c7:3d:c5:99:e8:fc:a5:2d:16:12:87:53:
14:09:6a:47:06:e2:d8:42:6b:5c:fb:e7:60:83:0e:8c:4d:30:
1b:70:79:c2:2f:cd:8c:33:50:bf:81:8a:7e:0e:80:a9:ac:34:
ca:3a:75:06:46:77:5a:7b:a9:ec:18:e8:0a:c4:8f:84:da:65:
0a:8f:ca:e5:62:92:2b:87:4c:4f:e9:ce:b3:83:fc:8c:25:17:
10:5c:e3:ed:b3:83:1c:e7:2a:34:77:05:9b:5e:3c:20:89:09:
28:6b:64:6e:62:0d:91:59:c5:19:cc:f8:ce:f3:58:bc:09:10:
47:ba:4c:83:f1:db:41:26:8c:7c:10:a5:9e:85:2c:15:de:4a:
63:64:75:09:8d:b2:f6:90:b9:c0:bd:df:e6:5d:c8:1b:1b:4e:
ab:c6:16:0d:77:e4:7b:ba:d7:ec:61:40:58:ed:97:32:a1:b7:
44:93:fe:ee:ba:63:02:6a:e3:57:68:56:33:e3:63:a7:45:85:
8a:84:f9:aa:52:01:d1:db:2c:98:29:ea:b0:2b:e6:58:ed:2e:
3c:6d:d3:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-fra.rpki-client.org