Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Ls1MgDZcMMKTugPn12TwGKuspU.cer
File: 1-Ls1MgDZcMMKTugPn12TwGKuspU.cer (raw, json)
Hash identifier: Gf6rBHAjZgwyN5BwWIiRyUkrHQkELxKiHaNI4fBCils=
Subject key identifier: F8:BB:35:32:00:D9:70:C3:0A:4E:E8:0F:9F:5D:93:C0:62:AE:B2:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 58AD69953E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/487114-1123-4fbd-b8c5-fd79e9e2f0b4/1/1-Ls1MgDZcMMKTugPn12TwGKuspU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/487114-1123-4fbd-b8c5-fd79e9e2f0b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 14:40:34 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 91.132.248.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380866499902 (0x58ad69953e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 14:40:34 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=f8bb353200d970c30a4ee80f9f5d93c062aeb295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:f6:4d:4a:8a:2b:31:d9:23:e9:a0:4f:6e:
5e:ae:11:51:d4:66:fa:27:f0:96:f1:d1:36:39:5c:
07:34:74:64:2f:3d:08:73:da:d5:5e:f9:9f:e5:fb:
cb:8f:44:a5:0e:0c:53:9c:9a:46:19:63:a4:b9:95:
d2:91:91:b7:6c:aa:3a:b6:94:7e:5d:b8:12:f8:9a:
2a:ce:ce:21:a4:3a:86:1d:d5:be:0e:e2:b5:9e:df:
59:bb:69:43:62:78:9f:b6:8e:cf:9a:db:ea:a2:64:
92:b3:ac:a9:8b:cc:6d:59:60:f2:a8:bc:95:41:ee:
37:13:08:92:9d:fb:ad:0a:a4:b8:68:b7:8f:7e:93:
b8:f8:42:7c:3c:0d:b1:76:1c:1d:1d:b8:25:c6:0f:
9f:2e:5e:39:67:a3:31:08:da:f5:3f:e6:08:43:98:
c4:62:79:78:4a:b1:73:99:93:e7:ec:78:46:4d:86:
9c:07:c5:a3:4a:00:99:c2:13:fc:f8:1d:78:45:07:
c0:89:6c:ab:4e:74:b7:ca:e2:80:38:c0:df:02:2f:
a0:dc:d5:77:01:1e:97:54:6d:09:e6:7e:a9:2f:cc:
4c:ca:db:26:9c:19:d0:0a:37:c2:f0:f2:fb:43:19:
a0:3c:b2:52:63:f3:59:43:87:22:ad:6d:ba:dc:1b:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:35:32:00:D9:70:C3:0A:4E:E8:0F:9F:5D:93:C0:62:AE:B2:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/487114-1123-4fbd-b8c5-fd79e9e2f0b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/487114-1123-4fbd-b8c5-fd79e9e2f0b4/1/1-Ls1MgDZcMMKTugPn12TwGKuspU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.248.0/22
Signature Algorithm: sha256WithRSAEncryption
00:1e:89:af:60:aa:fc:7c:30:3c:fe:55:d5:dd:88:59:d5:d3:
9f:83:94:11:61:89:9f:ee:e2:b0:e5:92:87:64:4d:cb:61:99:
67:34:7e:d8:16:51:1a:71:5f:d5:56:a8:23:f2:fd:1a:b3:89:
df:2b:c8:e2:b5:fb:ef:fc:15:7e:7c:7c:c0:3b:0b:9e:6e:98:
20:38:54:50:f5:8c:bf:2c:50:0c:54:95:dc:f8:21:ab:61:e3:
57:a5:84:38:cb:19:7e:a9:12:6d:16:49:da:72:c0:76:92:90:
44:23:62:65:00:4f:be:99:43:89:d8:37:7c:f2:e5:87:dd:67:
8f:c4:53:8b:fa:11:2f:0a:39:54:8c:01:f9:5c:c4:41:f7:f9:
92:cd:88:67:c4:95:9d:86:e5:97:14:6f:96:4e:26:b2:79:cc:
9a:e0:e3:47:e8:f0:dd:68:89:80:78:05:f5:fd:46:64:a8:4e:
79:05:6c:89:4d:51:e4:b9:a2:16:cf:63:bb:79:ef:9c:c4:7f:
1c:d9:33:c3:c9:e6:2c:5f:b6:59:0b:bb:b7:ae:67:bf:f4:f6:
64:0c:be:4a:20:30:65:5b:dc:0b:ce:09:be:a5:09:0f:ba:a2:
52:32:23:c7:90:d5:d9:f2:8b:0e:a6:74:ee:27:0c:a8:14:26:
67:f0:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:06 2023 by rpki-client on console-fra.rpki-client.org