Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-tbMLxIf7UxT2raBtTiEs-rlCVk.cer
File: 1-tbMLxIf7UxT2raBtTiEs-rlCVk.cer (raw, json)
Hash identifier: zOdHBmQoSf6KThZbDERIpWNti1G6XhSf9AU4k5SCqGg=
Subject key identifier: FA:D6:CC:2F:12:1F:ED:4C:53:DA:B6:81:B5:38:84:B3:EA:E5:09:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CF0EE580D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/82ff07-98d8-4442-9d54-e69809b950dc/1/1-tbMLxIf7UxT2raBtTiEs-rlCVk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/82ff07-98d8-4442-9d54-e69809b950dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:56:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.221.76.0/23
IP: 91.221.86.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674057050125 (0x9cf0ee580d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fad6cc2f121fed4c53dab681b53884b3eae50959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:80:1c:28:18:8a:8a:e3:d7:47:ce:d8:56:
bf:a6:75:3d:c2:e4:da:33:32:7a:b6:a3:16:cd:2b:
18:ba:d5:ef:25:eb:e5:e0:20:2e:2d:b7:13:e4:ac:
c0:00:3c:98:52:ad:16:5c:a9:5f:aa:aa:34:c9:91:
3d:43:5f:51:2b:cb:e5:4d:51:d4:37:3c:f1:db:c2:
47:15:1e:21:74:9b:68:f4:7c:af:43:3d:3c:b0:13:
11:f7:90:eb:f7:96:3c:ca:15:27:68:fa:05:95:6a:
0c:c0:b3:c8:7d:c6:4d:6e:61:5c:06:a9:d6:56:13:
a4:58:75:83:16:b9:14:80:c7:97:91:6a:93:72:2b:
37:8e:ca:1a:6b:26:82:1d:fc:e7:7c:b4:4a:50:8b:
bb:1e:b9:33:1b:63:e7:3c:29:8a:dd:b1:cb:cc:0c:
c7:cc:1b:13:ef:e5:9a:10:40:f4:82:66:26:52:20:
52:4e:7a:4f:95:a9:cf:0f:53:3e:ee:6a:5f:b0:b6:
5e:9c:73:19:24:d9:6c:dd:ad:90:48:33:8c:f7:c7:
72:21:2b:e0:6d:9b:0c:1f:96:cb:09:61:30:80:a0:
79:90:42:44:65:31:26:e8:f3:a2:92:01:ae:09:da:
35:26:8f:52:4d:d3:fd:3b:ad:6a:f5:44:cb:52:61:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D6:CC:2F:12:1F:ED:4C:53:DA:B6:81:B5:38:84:B3:EA:E5:09:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/82ff07-98d8-4442-9d54-e69809b950dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/82ff07-98d8-4442-9d54-e69809b950dc/1/1-tbMLxIf7UxT2raBtTiEs-rlCVk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.76.0/23
91.221.86.0/23
Signature Algorithm: sha256WithRSAEncryption
71:48:67:0b:dc:ff:54:2f:f2:57:f8:d6:51:3b:7d:64:be:0b:
2d:de:3f:dc:2a:b2:d3:3e:4a:35:ca:26:0e:fe:0c:bc:db:a0:
e1:b1:31:8c:40:11:b4:01:91:50:02:be:d0:7c:05:58:41:72:
2e:dc:e5:7a:67:d9:d3:1f:6b:9d:61:64:bd:2a:96:f5:31:4f:
b5:71:d8:d5:1d:b1:9b:71:53:4f:80:65:af:69:98:4f:82:64:
bc:33:91:ca:41:43:fd:eb:12:b3:2a:b3:dd:d9:90:02:99:8c:
f7:38:b4:62:b8:9d:32:00:19:4d:20:67:ee:1a:9d:54:4a:42:
bc:33:58:1c:a6:5c:ab:73:dc:7e:2e:66:a2:7e:49:0c:7f:91:
3e:2c:f9:d1:00:2f:9e:d2:e9:b2:23:6c:12:96:ba:a7:7a:0d:
50:51:c6:a0:74:47:9c:cb:7d:87:f7:b6:91:d4:77:3d:a1:dd:
ef:e5:a2:ba:c4:6d:e7:50:96:ae:ab:b1:3b:da:06:91:af:36:
3c:2c:97:96:d2:f3:15:8c:48:96:a4:79:dc:79:f0:22:82:d3:
75:50:f7:08:5e:cd:84:f8:61:55:c5:7d:54:32:b5:c5:0b:20:
00:7b:f9:20:41:89:db:e6:0c:ed:3e:7d:46:19:bc:32:1d:a1:
6d:e1:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:08 2023 by rpki-client on console-fra.rpki-client.org