Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1X0yFIPZST2aJlsnbaPmW8v-ZAA.cer
File: 1X0yFIPZST2aJlsnbaPmW8v-ZAA.cer (raw, json)
Hash identifier: /+CWSGjxZ91qlF7Wqd7Uys+eGGxbGFFigoBAMIx3l9Q=
Subject key identifier: D5:7D:32:14:83:D9:49:3D:9A:26:5B:27:6D:A3:E6:5B:CB:FE:64:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245DC941FA423D42C9E18F5CC87D395
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/1X0yFIPZST2aJlsnbaPmW8v-ZAA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.51.0/24
IP: 2a12:4500::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:dc:94:1f:a4:23:d4:2c:9e:18:f5:cc:87:d3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d57d321483d9493d9a265b276da3e65bcbfe6400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:95:a8:5d:09:02:1d:94:77:9d:3e:1e:45:
47:ce:61:ef:ab:de:e3:fd:7e:62:fd:3b:db:68:34:
8d:c6:76:cd:8e:9a:b4:98:c4:f0:fe:59:e6:bd:2b:
6f:db:81:ff:48:90:d6:66:26:25:39:23:1e:9a:c4:
da:9e:dc:88:8b:b3:54:1b:f2:f4:05:e7:91:e3:ea:
69:dc:3f:c1:8a:13:93:c8:7f:1d:91:16:7d:a1:11:
fe:5f:46:41:f6:c3:88:49:a3:33:56:51:3b:de:1c:
ed:71:e8:dd:4a:55:d1:14:d1:b7:17:63:b0:89:b1:
cd:35:e1:c0:00:10:e1:23:b8:86:4d:a8:bd:b2:60:
83:a5:6a:be:b7:3e:32:0b:19:38:bf:9d:65:f3:ed:
01:8b:48:b9:7f:3a:f4:84:6c:05:71:3b:59:6f:7d:
06:6e:d7:67:2e:2d:33:2f:6e:8e:cc:35:d5:a3:f9:
37:50:36:df:07:56:fa:e7:d4:ea:c5:c0:27:e8:2f:
97:5e:4a:71:a1:d5:17:d3:63:d9:cd:33:14:86:f2:
7b:cc:a0:69:69:57:dc:47:08:ac:79:b9:f2:9d:75:
3e:2c:be:5c:0d:5b:d1:93:30:b4:fb:e6:cc:33:be:
5d:ce:93:43:61:36:25:ce:22:19:29:01:46:c4:1f:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:32:14:83:D9:49:3D:9A:26:5B:27:6D:A3:E6:5B:CB:FE:64:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/1X0yFIPZST2aJlsnbaPmW8v-ZAA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.51.0/24
IPv6:
2a12:4500::/29
Signature Algorithm: sha256WithRSAEncryption
94:9f:cd:8c:c3:11:6c:0d:2f:5b:87:79:32:99:85:04:e3:fa:
a7:a6:71:4b:37:b5:fd:5b:c4:4a:38:9c:b9:84:df:23:f0:6a:
4c:fb:86:71:e8:ec:0f:f4:e3:d8:20:d5:ff:16:0d:41:e0:60:
cf:b6:47:e4:25:c1:52:c5:b7:74:ed:23:3f:83:c7:b6:02:54:
c5:b3:20:97:c1:9b:5c:5a:4f:7e:b7:9e:bb:f7:9e:df:20:04:
06:e6:30:86:64:68:9d:db:fc:5f:7b:e3:00:2f:d0:45:81:8e:
f3:2d:c5:aa:a6:18:53:4a:1e:22:b1:f1:86:ce:6d:00:3a:26:
20:14:7f:f7:6c:1d:fb:0b:16:28:09:63:36:6e:58:78:7f:af:
36:63:99:0d:4d:9d:81:7e:f8:79:35:64:ba:06:13:8b:27:b3:
91:d1:ca:ec:f4:b2:5d:c0:27:5f:ad:10:c3:5e:0a:11:d4:e9:
3a:c2:14:74:10:50:90:dc:45:22:3e:f1:62:9c:1e:03:38:cc:
a3:d6:da:79:47:b7:2f:90:bd:59:cd:13:39:25:7f:2e:02:9b:
32:5b:5c:86:24:04:14:e4:5b:a2:38:a6:0e:8f:33:84:85:48:
5d:da:da:42:b3:e7:38:6d:99:e8:50:60:3e:76:b1:ad:fd:f6:
c7:ce:24:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:20 2025 by rpki-client