Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-HogQUVenKwai3G54t5MSEZxkaU.cer
File: 1-HogQUVenKwai3G54t5MSEZxkaU.cer (raw, json)
Hash identifier: /wmQC4FfLxl4T6G4GyqICENJmQkIo3Vvg8ZSqfZOYaU=
Subject key identifier: F8:7A:20:41:45:5E:9C:AC:1A:8B:71:B9:E2:DE:4C:48:46:71:91:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 8035294CDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/c61674-a342-4f9d-ad0b-892d23ae1b38/1/1-HogQUVenKwai3G54t5MSEZxkaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/c61674-a342-4f9d-ad0b-892d23ae1b38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 04:44:39 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 194.124.244.0/23
IP: 194.124.250.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550647712987 (0x8035294cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:44:39 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f87a2041455e9cac1a8b71b9e2de4c48467191a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:3d:72:79:02:ee:8f:2a:e0:56:53:85:0b:
36:1e:a2:ff:0a:ab:e2:e5:b3:42:f1:a8:98:ab:2a:
31:00:cd:92:ce:6d:86:e8:50:22:37:c9:b1:a5:63:
73:cd:d6:9e:f3:2b:5f:57:34:87:02:86:4b:5e:8f:
20:fc:83:62:8b:cc:d5:69:ad:1b:32:56:b8:36:02:
4b:e0:71:58:95:0c:21:f9:f9:81:bb:f5:09:63:75:
da:68:d6:b0:a8:67:c7:30:ee:68:fb:ac:0e:7e:78:
95:8a:b1:be:0f:fb:7b:0f:76:f2:64:e5:d5:eb:36:
83:8b:87:0d:78:d1:8f:a6:4a:3d:36:ce:a0:5e:05:
55:87:ce:a8:cf:10:26:c0:bc:0a:e0:a4:64:ff:b9:
52:38:d6:95:7f:fd:7a:a1:3d:86:5c:a9:43:61:4c:
2e:47:b2:f6:13:4b:68:75:b7:fd:76:56:87:e6:57:
22:d9:3f:72:99:0b:af:2d:ec:93:79:3c:cd:c1:da:
cd:e8:f1:14:72:5b:40:66:91:2a:ea:1b:63:0c:70:
63:bf:a9:d6:78:93:9f:54:2d:62:8d:6e:1a:36:04:
fa:35:82:65:69:34:8a:c7:bb:d9:f2:e5:85:b5:0b:
33:60:bb:51:24:2d:cc:b3:52:f5:8d:bb:6d:7a:2d:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7A:20:41:45:5E:9C:AC:1A:8B:71:B9:E2:DE:4C:48:46:71:91:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c61674-a342-4f9d-ad0b-892d23ae1b38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c61674-a342-4f9d-ad0b-892d23ae1b38/1/1-HogQUVenKwai3G54t5MSEZxkaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.244.0/23
194.124.250.0/23
Signature Algorithm: sha256WithRSAEncryption
74:12:eb:70:f1:52:df:97:c5:f9:f1:63:28:38:e1:6e:5a:0e:
96:b8:b3:7f:66:6e:4a:b6:64:81:6b:6c:8b:d0:f3:64:20:4c:
e1:28:41:28:4f:2d:c8:6a:8d:2b:4d:6f:d5:0e:6e:eb:69:1f:
aa:b3:60:c5:85:a9:84:c5:1f:a3:c4:f6:e2:df:49:46:bf:3b:
dc:dd:d6:5c:b7:0d:de:7a:bf:78:97:93:5d:a8:85:63:d6:f0:
c2:4c:d8:b6:7d:bb:7a:1d:a7:bb:a5:76:42:8c:74:14:91:5e:
f0:5c:1e:3f:03:ba:57:46:84:40:bc:dc:16:94:23:5a:e7:7c:
56:8e:10:09:86:bc:b8:90:c8:08:a0:af:54:d1:0c:3c:a4:39:
a2:fb:8b:f1:9c:9b:fd:79:a0:af:85:80:a6:8a:49:b7:2a:1b:
35:04:55:69:28:3d:67:9d:f1:7c:cc:13:c2:86:9c:bb:35:d9:
ae:cd:c7:77:74:57:50:9d:e9:7e:f0:f1:dd:d1:aa:a1:b6:81:
36:8e:a5:34:be:02:90:e9:f7:64:6c:cb:a8:4a:f2:87:c4:80:
74:f1:e1:5b:51:c3:2b:53:3b:8b:c7:8e:e5:22:51:de:2a:99:
ab:97:63:20:e3:c0:4f:96:ca:58:80:53:59:5b:11:8b:d8:04:
f5:8c:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:06 2023 by rpki-client on console-fra.rpki-client.org