Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.cer
File: 1-POT_Ccl0kYLaiuYF0bUdjQL4G0.cer (raw, json)
Hash identifier: hQnaqqpY8/e06UQpPfNx9fxoBhTwsaU63N16TvSeCzU=
Subject key identifier: F8:F3:93:FC:27:25:D2:46:0B:6A:2B:98:17:46:D4:76:34:0B:E0:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99EF2D4708
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:03:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.94.112.0/22
IP: 185.34.220.0/22
IP: 185.78.164.0/22
IP: 185.82.88.0/22
IP: 212.80.212.0/22
IP: 2a04:6280::/29
IP: 2a09:5800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661142718216 (0x99ef2d4708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8f393fc2725d2460b6a2b981746d476340be06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:56:be:f8:9b:93:42:7d:a2:56:80:4c:00:
a4:7f:8a:a2:aa:ec:7c:cb:43:6c:7e:11:6c:55:26:
5e:12:70:08:b4:30:17:19:1d:23:ae:17:c7:1a:d9:
b2:87:6d:a2:b6:56:aa:58:7d:e2:8e:69:db:1f:0f:
e9:2f:11:2b:89:65:2e:bb:96:d6:a8:14:9f:a9:52:
8a:9c:14:e6:61:cb:ce:ec:52:3a:71:b4:51:d0:e8:
f8:7e:97:bf:4f:43:fa:52:07:f9:7a:f2:83:82:c6:
55:14:a7:0b:7c:45:e3:1b:bf:e1:82:62:9f:eb:10:
ba:8b:52:c3:cd:1f:ac:63:fa:3e:be:cd:83:21:ae:
08:b0:78:27:96:58:50:d0:b3:8a:91:31:01:83:2e:
10:25:b3:d4:f1:24:c5:e5:e1:ea:5e:bc:3f:ab:35:
b3:6f:b8:29:7f:09:96:4d:cd:ef:9e:9c:ef:ad:30:
5e:bb:d9:21:df:fe:f9:0a:82:dc:bf:2d:10:52:73:
87:f0:97:d5:a0:de:14:07:7c:f0:1f:ea:5e:89:5c:
ee:65:77:d7:eb:b0:94:30:8e:d1:23:e1:8c:ca:e2:
29:e6:a4:6d:96:36:b9:c2:74:19:52:04:61:71:83:
2c:8d:bc:97:a9:61:38:09:f5:44:6a:f0:cd:b8:9c:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F3:93:FC:27:25:D2:46:0B:6A:2B:98:17:46:D4:76:34:0B:E0:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.112.0/22
185.34.220.0/22
185.78.164.0/22
185.82.88.0/22
212.80.212.0/22
IPv6:
2a04:6280::/29
2a09:5800::/29
Signature Algorithm: sha256WithRSAEncryption
52:2c:aa:a8:05:3a:f9:b0:2a:e8:68:9c:4b:5f:c7:ef:32:3a:
70:c1:1b:02:d7:d9:4e:c0:60:9f:ae:0e:30:70:49:2c:69:8a:
49:4d:fe:35:6d:15:7e:5b:5e:ba:11:8c:15:75:2c:0d:c8:34:
ac:4c:ff:ed:b5:69:77:ea:c5:45:6a:b3:58:4a:dd:ff:cf:5a:
88:18:cf:50:b4:8b:3d:cc:9b:12:04:fc:f5:85:34:11:b6:38:
89:af:0d:1e:63:5e:6a:7d:63:89:8d:39:39:28:01:c3:cc:5a:
f4:73:51:0c:b2:b1:a2:62:e0:50:21:15:88:aa:b6:00:0e:97:
60:54:1a:c5:2f:be:49:a9:43:b6:ae:a3:80:ee:ce:4a:38:42:
f1:61:12:ff:93:7b:5f:b7:ab:b2:98:71:24:38:4a:d5:77:9f:
1f:36:e1:db:0d:9d:65:89:11:b9:b3:09:1a:72:0f:f8:c9:fc:
48:4d:d2:a7:35:80:9a:1c:8f:9a:48:0a:1d:f2:43:c4:7a:7f:
70:25:1a:e9:0d:ef:aa:e5:52:dc:99:c7:a6:9a:ac:a5:d9:12:
cc:7a:f6:62:20:ef:74:c9:ee:ac:e5:fe:2c:62:a1:44:07:a7:
b9:63:60:c6:d5:1d:5d:b0:0d:b3:57:11:a3:b3:98:91:ad:ba:
14:3a:e6:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:39 2024 by rpki-client on console-ams.rpki-client.org