Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1JmUbGzo9K_xkfY-6r6V-kSsyJo.cer
File: 1JmUbGzo9K_xkfY-6r6V-kSsyJo.cer (raw, json)
Hash identifier: g49Q9iSO+Z8QcrT/KQjEKx9u9KDDWol3QZ58emowbG4=
Subject key identifier: D4:99:94:6C:6C:E8:F4:AF:F1:91:F6:3E:EA:BE:95:FA:44:AC:C8:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0A99AD06C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/1JmUbGzo9K_xkfY-6r6V-kSsyJo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:59:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.154.140.0/22
IP: 2a0a:3680::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690040262764 (0xa0a99ad06c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d499946c6ce8f4aff191f63eeabe95fa44acc89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:28:fe:ea:01:f1:a3:ab:03:cc:4a:e6:54:
79:5b:38:96:9d:8b:94:39:17:29:44:db:2c:d7:75:
80:b7:49:c4:5f:0d:c3:ac:0a:a7:ca:32:e5:72:96:
43:2c:49:89:40:41:2e:b0:2b:4c:5b:0b:32:33:ff:
8a:77:06:b4:d1:b5:7b:89:7b:8e:4f:4b:0e:7f:dc:
b7:9d:25:56:64:a5:fc:68:e6:4d:b8:47:e5:fd:05:
5f:3e:ed:17:80:1a:5a:16:e8:ee:46:d3:96:a1:28:
f0:f0:87:35:09:e8:e9:cd:36:76:44:d1:bf:7c:cd:
6e:12:a1:ad:5e:d2:01:f3:9d:20:63:71:c7:9d:da:
1a:5a:7e:74:52:5f:dd:82:45:b4:4b:b4:72:e1:02:
47:29:58:c9:8c:19:9d:01:72:ee:dd:ba:46:43:cc:
1d:7a:ff:68:e9:72:d6:c1:65:14:c7:d1:b1:cf:b7:
4c:45:47:48:34:ea:f3:6c:18:54:18:09:c0:50:36:
8c:0c:77:11:09:39:ad:29:48:08:7f:7e:d7:75:7c:
37:0c:0c:2f:0e:51:bf:1e:81:91:aa:d1:4b:e7:fc:
56:bb:b5:3f:f1:5f:f0:7a:ae:f7:82:55:eb:ea:76:
5f:74:50:91:f8:f0:89:d7:a9:fe:a8:5e:73:5d:71:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:94:6C:6C:E8:F4:AF:F1:91:F6:3E:EA:BE:95:FA:44:AC:C8:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/1JmUbGzo9K_xkfY-6r6V-kSsyJo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.140.0/22
IPv6:
2a0a:3680::/29
Signature Algorithm: sha256WithRSAEncryption
55:91:0a:1c:d4:19:6e:74:2f:75:0a:07:65:50:a2:c9:12:11:
6e:34:9c:ed:0f:aa:c6:82:d7:63:16:5f:d8:87:d9:4c:87:7d:
02:be:72:a2:ec:55:5d:c8:f9:fa:63:d5:b8:c2:a6:c6:b7:bf:
7c:74:13:33:fb:d5:f9:ec:36:06:85:17:44:da:fd:c3:d8:ba:
1c:bf:ce:e3:51:46:5f:e3:b8:e5:a0:8b:dd:6e:15:8d:ee:7e:
70:5b:af:93:91:5a:19:5f:1c:ab:d3:ac:5e:34:8a:e4:f7:98:
d2:33:d2:3a:dd:4b:06:b4:c4:f4:f8:ee:0c:d6:87:11:a2:8d:
4d:f9:f6:d4:48:78:52:e4:1f:8b:7d:7f:67:53:2e:76:ef:78:
da:a6:29:46:cc:ad:5e:e1:7b:f7:fb:19:60:b3:ac:39:e6:28:
32:59:a5:fd:5e:3f:61:29:08:09:9b:a3:84:39:12:e5:41:b1:
d0:8a:12:30:2d:0f:fe:f8:26:51:c9:f8:c3:f6:d1:98:f3:48:
7b:25:57:12:ab:71:c6:37:03:c9:00:5b:46:16:55:1b:48:ff:
cd:25:0a:f3:f6:3f:6e:13:63:06:fc:ff:49:f5:8b:cc:0b:c1:
a5:6f:ec:e6:02:48:8f:8d:59:24:00:5f:2a:af:67:69:82:f7:
f8:c9:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:10 2024 by rpki-client on console-fra.rpki-client.org