Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LllIJGJr5AaM5T8lqavkDLZUkA.cer
File: 1-LllIJGJr5AaM5T8lqavkDLZUkA.cer (raw, json)
Hash identifier: b1WT/wi5tPgkyjPolpIqJcms7jvR8gHyhVxK05hg3jc=
Subject key identifier: F8:B9:65:20:91:89:AF:90:1A:33:94:FC:96:A6:AF:90:32:D9:52:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 6FEE64EE36
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/2db433-b9bf-4eb8-9afd-cfadb4504479/1/1-LllIJGJr5AaM5T8lqavkDLZUkA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/2db433-b9bf-4eb8-9afd-cfadb4504479/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Oct 2020 22:07:27 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 193.37.44.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480740961846 (0x6fee64ee36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 1 22:07:27 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=f8b965209189af901a3394fc96a6af9032d95240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:88:0e:b2:c7:37:c3:c0:13:9b:d7:c8:de:
8b:d4:4b:1c:56:85:e0:f3:a2:64:20:8c:a9:0d:0d:
fd:af:6b:e3:f3:df:f5:39:31:ff:6e:10:4a:91:02:
8b:61:51:8c:17:6d:a4:da:b1:8a:06:2e:d9:81:4b:
6d:44:b2:fc:4d:76:9a:fc:d9:80:a6:bf:b7:5d:2a:
ca:43:97:a1:82:c9:a9:55:ab:03:a0:38:6a:0f:37:
3a:fd:33:db:3e:ea:d9:e8:45:54:d5:4c:1c:9b:4c:
2e:f1:3a:86:a1:3c:5b:f7:b0:bc:2b:6b:a8:ad:ed:
25:31:a0:31:c8:5f:f9:da:f2:ae:fa:34:06:10:05:
14:2e:f4:56:31:41:4d:fd:be:e6:26:57:1d:2a:07:
cc:b5:de:c9:73:02:88:db:b6:5d:83:ef:18:69:75:
3a:c8:71:42:f6:d6:d4:66:8e:29:cf:da:dd:e8:47:
fa:e8:be:05:a4:9b:ca:37:81:69:19:14:66:39:a1:
fb:10:50:67:4e:86:ac:6c:9e:da:4e:d4:f2:fa:97:
ca:d9:a5:ca:56:6e:74:5c:2c:4c:80:3e:c8:ca:af:
01:34:51:f9:a7:ec:84:88:de:2d:60:ec:5f:ef:95:
6e:0d:b4:ae:72:fb:d4:ba:9a:fe:af:5e:b0:0b:6a:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B9:65:20:91:89:AF:90:1A:33:94:FC:96:A6:AF:90:32:D9:52:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2db433-b9bf-4eb8-9afd-cfadb4504479/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2db433-b9bf-4eb8-9afd-cfadb4504479/1/1-LllIJGJr5AaM5T8lqavkDLZUkA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.44.0/22
Signature Algorithm: sha256WithRSAEncryption
69:49:c5:48:b6:3b:4f:17:db:20:af:c7:c3:8e:38:14:ea:eb:
ab:8c:84:46:b0:17:dc:88:3e:04:79:7e:97:51:0d:e7:5d:c2:
a3:3d:f1:48:50:5e:8b:32:2e:2e:2b:30:7b:03:f9:02:38:ed:
d9:96:38:54:c9:50:eb:09:de:10:e2:90:30:e3:1b:26:6f:96:
14:ad:63:2d:31:6a:fb:d1:58:6b:fb:bf:82:4d:63:91:9e:1b:
3c:15:01:60:a0:43:52:a1:1b:74:bd:63:c3:3d:17:62:91:db:
bd:b7:4e:63:04:05:8d:4c:d0:80:46:6d:6a:3d:1a:20:b4:dd:
68:af:d3:a5:6f:3a:cd:99:79:17:13:4d:fc:e5:5e:70:4d:31:
9e:1a:1e:d9:57:5d:54:6d:94:4f:0e:e3:a1:df:da:c7:84:5c:
6f:14:5b:66:90:b4:51:b7:26:b9:84:82:e8:c5:6d:b0:6b:11:
d5:54:26:b1:a8:68:58:56:6f:50:62:e3:e6:d9:58:76:d5:c0:
8b:79:6d:8d:f0:0d:8e:20:20:58:11:f7:72:01:b8:19:2d:7f:
5a:a5:07:0c:ef:69:3f:d4:2d:c8:e2:2b:1b:26:9d:83:ab:4e:
9e:7a:99:8c:13:b0:d9:dc:43:9e:c6:96:62:6d:d6:8b:cb:75:
1d:0a:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:06 2023 by rpki-client on console-fra.rpki-client.org