Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0ukrmNpOIB2hfb-bfLgXUn4-IKo.cer
File: 0ukrmNpOIB2hfb-bfLgXUn4-IKo.cer (raw, json)
Hash identifier: WdgXYtFyvCLcP6s1GEk9KTifEHmvHvukTwfv0JA/oak=
Subject key identifier: D2:E9:2B:98:DA:4E:20:1D:A1:7D:BF:9B:7C:B8:17:52:7E:3E:20:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 5F561895AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/520ba2-a4fd-4be4-8c4f-75a47885b0fd/1/0ukrmNpOIB2hfb-bfLgXUn4-IKo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/520ba2-a4fd-4be4-8c4f-75a47885b0fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 15:13:41 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 185.206.144.0/22
IP: 2a0b:12c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409466344874 (0x5f561895aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:13:41 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=d2e92b98da4e201da17dbf9b7cb817527e3e20aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:c1:a6:9f:88:c5:dd:29:8f:6c:6a:ec:94:
5c:19:07:3a:9c:7b:73:47:64:0a:13:50:42:03:2b:
ea:96:76:b2:7d:b4:21:d6:f8:3e:4e:c2:03:53:a7:
4a:8e:b8:64:ed:4c:77:c6:78:c5:96:90:bc:03:9f:
04:7f:46:41:06:ca:39:41:21:27:d5:87:70:f9:c3:
b9:50:22:b9:09:70:a1:6c:b7:40:20:97:10:43:0c:
d5:e9:a1:a2:f7:9c:42:18:7c:50:3c:39:81:4a:c3:
dc:5b:7b:8d:a6:8f:5a:ca:aa:7b:bf:8b:26:16:4d:
ce:68:13:23:40:c6:1d:72:8b:19:d3:ca:c4:60:a9:
a8:f1:3f:ce:5d:b2:26:ae:64:a7:0b:3d:89:e1:16:
de:78:bd:b4:25:14:8b:90:11:ae:94:98:9b:23:ae:
ae:f7:3e:2e:ca:03:81:7a:9d:ed:9e:be:af:04:fb:
f8:5d:3f:e1:53:03:6b:01:d4:5b:86:f5:bc:b3:d5:
5d:d7:1f:ae:38:13:62:32:f6:14:b1:c3:94:32:b9:
2e:d9:d4:62:cb:4d:09:51:35:5f:17:27:1a:1b:d9:
00:d0:06:45:57:c9:2f:4e:96:6e:7f:12:06:6f:ef:
bd:0f:a2:87:49:d6:8d:2c:c6:24:15:b5:9a:fa:0c:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:2B:98:DA:4E:20:1D:A1:7D:BF:9B:7C:B8:17:52:7E:3E:20:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/520ba2-a4fd-4be4-8c4f-75a47885b0fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/520ba2-a4fd-4be4-8c4f-75a47885b0fd/1/0ukrmNpOIB2hfb-bfLgXUn4-IKo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.144.0/22
IPv6:
2a0b:12c0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:c0:9d:80:91:a7:15:1e:bf:41:55:98:60:24:8e:52:20:31:
f6:18:b5:05:c4:5a:a7:ee:3b:4f:fc:41:a3:89:d4:a7:c9:03:
1d:06:78:41:8e:fb:95:fb:ed:3c:5b:27:74:92:a6:25:eb:ae:
2b:d3:51:0b:30:a3:a4:f4:70:75:38:e6:4a:63:5c:dd:7d:11:
fc:e7:e2:0d:d7:2b:8e:44:44:84:5a:15:ce:4c:5e:08:2e:99:
ad:0d:b4:d8:eb:fc:54:53:11:4c:39:06:df:bd:64:93:e2:82:
62:5e:79:22:44:94:5a:c6:6a:72:01:46:7d:bc:92:6b:12:dd:
4c:39:97:d7:20:59:69:af:69:af:bc:29:f1:4e:88:56:3c:3e:
f8:ca:77:bc:20:38:ff:a8:f0:75:42:c6:ef:81:d6:e7:c5:85:
e9:86:cf:3d:6e:fe:ca:45:6e:c2:70:81:a0:46:33:fe:86:1f:
2b:55:fd:e6:09:ff:e9:64:02:79:22:96:fa:1f:5d:c9:93:22:
84:d2:8f:77:b3:f6:61:23:66:4a:ac:10:cf:86:c9:b8:a7:35:
f2:51:dc:b9:1c:91:e9:6e:e8:c3:00:f2:85:da:74:f0:a4:ae:
39:e7:43:91:74:89:60:67:28:69:26:e0:0e:6f:af:b4:93:de:
24:98:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:54 2023 by rpki-client on console-ams.rpki-client.org