Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0HWlLN59TGUGbx3fRY6u-qbnbUA.cer
File: 0HWlLN59TGUGbx3fRY6u-qbnbUA.cer (raw, json)
Hash identifier: GGUXzMyKJWcvSB9S4bqwL7oW903yrEVtG4tYo6o3zMk=
Subject key identifier: D0:75:A5:2C:DE:7D:4C:65:06:6F:1D:DF:45:8E:AE:FA:A6:E7:6D:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01836A50DAC47665204F309AAD979998DFBB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/c95e71-43f2-4b0a-9aee-5a3e823c27a6/1/0HWlLN59TGUGbx3fRY6u-qbnbUA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/c95e71-43f2-4b0a-9aee-5a3e823c27a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Sep 2022 12:27:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.236.16.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:50:da:c4:76:65:20:4f:30:9a:ad:97:99:98:df:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 12:27:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d075a52cde7d4c65066f1ddf458eaefaa6e76d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:40:9e:55:ca:fb:65:ff:0b:eb:b0:ed:6d:
e5:d3:68:52:34:83:89:35:99:49:51:a3:14:cd:05:
a5:98:ec:98:f3:d6:6f:f8:4d:2c:26:53:cc:4a:1c:
59:de:3f:d1:72:b7:c9:94:c9:52:9e:0d:67:68:51:
94:2f:c5:ac:45:98:fe:6c:14:7c:e0:b9:1b:d8:40:
b2:bd:a5:4d:a4:0d:4b:59:b3:9c:21:5d:68:d9:e9:
97:45:41:7d:50:60:a5:14:9c:5e:cb:d9:15:5e:f6:
0e:ce:e0:c2:cc:9f:42:e5:30:ea:54:ef:d5:af:83:
2c:a4:ed:56:67:63:f1:90:fd:cd:d4:70:98:c2:f0:
87:44:6e:84:22:96:bb:d4:65:e1:6d:eb:f9:ba:7e:
d2:6f:60:9e:15:cb:29:2c:a6:2d:4f:eb:ac:04:8e:
21:2b:64:15:39:29:41:ba:4a:17:30:43:19:34:22:
b2:a6:28:81:57:0e:a2:cc:0b:37:33:9e:c7:93:99:
bd:61:3c:26:ed:61:1d:b5:b8:7a:46:34:39:18:7e:
24:12:50:85:fb:25:d7:4c:bb:6f:9a:10:88:9e:1c:
b4:c2:26:c0:5b:4c:8a:df:d9:25:c2:b8:ce:e4:8e:
a5:cb:7f:ea:12:11:a7:10:92:94:e2:fa:29:9c:74:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:A5:2C:DE:7D:4C:65:06:6F:1D:DF:45:8E:AE:FA:A6:E7:6D:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c95e71-43f2-4b0a-9aee-5a3e823c27a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c95e71-43f2-4b0a-9aee-5a3e823c27a6/1/0HWlLN59TGUGbx3fRY6u-qbnbUA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.16.0/22
Signature Algorithm: sha256WithRSAEncryption
98:5e:81:7a:3e:63:b2:d7:b1:cb:87:ac:37:e6:6f:ae:4c:1b:
56:89:ae:33:39:6d:b0:b3:54:c8:07:4d:96:9a:5f:a8:96:20:
a0:4d:98:69:e5:6f:18:26:d4:2c:df:0d:8d:6d:3a:d9:da:4a:
e8:3f:c1:a7:b1:a1:c2:ce:88:e4:a5:52:99:60:ec:b5:b6:87:
33:30:36:d6:4f:4c:6e:9a:2b:d0:e3:2f:6d:85:b4:1e:e5:63:
a0:54:f0:1b:87:41:59:1c:c1:41:cc:ab:79:c2:59:3c:db:ee:
28:6a:4a:d8:11:b4:5e:79:20:e3:41:f1:e1:35:70:20:5f:3d:
db:32:39:09:0d:58:86:f2:17:bc:35:2d:47:9f:13:84:39:2a:
39:45:42:13:96:d2:15:5b:7f:bd:0d:0c:3d:d9:d1:33:ab:1d:
33:c1:df:73:55:d9:ad:98:e6:dd:f4:a1:83:66:e3:81:21:6d:
8f:ac:65:a3:00:29:ab:ba:bb:e8:a6:d8:88:7e:5b:2d:ce:b1:
bd:26:f7:70:e3:ec:10:1d:42:8a:fe:a4:cf:68:1a:fd:76:23:
e9:e8:1c:ab:3c:9f:aa:59:1f:23:9f:0c:8c:24:78:d5:bc:0d:
3a:fa:10:12:c6:aa:82:6f:11:d8:82:8b:af:07:20:66:49:71:
e5:62:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:02 2024 by rpki-client on console-ams.rpki-client.org