Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1qpAh_otuAMzKdpq_DkvF-HxIjE.cer
File: 1qpAh_otuAMzKdpq_DkvF-HxIjE.cer (raw, json)
Hash identifier: Fhzr1WKT9Hr3tpdKDiofp4x7aLlN5YP0qk0hjcx8rOY=
Subject key identifier: D6:AA:40:87:FA:2D:B8:03:33:29:DA:6A:FC:39:2F:17:E1:F1:22:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7D75EE6F0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/6b1d73-3842-4c70-ac88-63d6dd383a33/1/1qpAh_otuAMzKdpq_DkvF-HxIjE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/6b1d73-3842-4c70-ac88-63d6dd383a33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:27:31 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 193.160.102.0/24
IP: 193.160.113.0/24
IP: 193.160.130.0/24
IP: 193.160.136.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538849472266 (0x7d75ee6f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:27:31 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d6aa4087fa2db8033329da6afc392f17e1f12231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f6:40:ee:e7:85:f2:c9:e1:a8:c8:f4:6b:e5:
c2:9a:d6:4e:9b:3b:c4:bd:ed:16:f8:6a:ae:42:8a:
48:a9:a3:42:96:c2:3b:99:7c:64:49:1d:ce:01:fd:
ed:cc:0b:ad:16:63:16:b2:85:1e:3f:99:ec:57:65:
c7:15:75:66:ff:c0:43:19:7f:ad:8d:f4:a8:06:22:
1b:90:c2:66:88:a1:68:a6:e4:24:ad:95:35:6a:1f:
76:26:65:be:87:81:d3:52:e2:c4:c1:b2:dd:c6:58:
c3:36:69:66:19:b7:cd:07:2e:8b:4b:18:9f:37:c0:
61:75:85:ac:73:dc:ef:8e:67:1f:d4:94:9b:e0:cc:
67:50:70:bb:7e:ad:ed:9f:c7:0d:12:3a:e9:e3:36:
b9:9b:33:18:a9:03:bb:db:ba:ba:47:ba:04:b5:0a:
40:58:a5:40:60:20:e9:7c:10:50:7c:f4:18:10:c9:
0f:b6:39:45:55:8e:a9:8c:c4:c7:aa:9b:12:de:1f:
6f:94:bb:ad:2d:d5:f1:d2:a0:78:55:fe:91:40:6c:
4e:cd:5b:cf:65:70:c5:b3:ce:04:b1:8a:b9:c3:b0:
21:ab:27:4c:4b:47:53:94:ad:0f:e3:16:f0:85:39:
b6:54:eb:5e:47:87:c4:03:15:96:de:04:4d:83:57:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AA:40:87:FA:2D:B8:03:33:29:DA:6A:FC:39:2F:17:E1:F1:22:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6b1d73-3842-4c70-ac88-63d6dd383a33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6b1d73-3842-4c70-ac88-63d6dd383a33/1/1qpAh_otuAMzKdpq_DkvF-HxIjE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
193.160.113.0/24
193.160.130.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
08:83:de:c1:7c:52:5c:32:1c:38:87:c1:2e:1a:42:05:0f:55:
6d:e4:36:f7:93:8d:08:75:4e:0e:4c:da:76:86:c1:1d:35:03:
11:86:a8:bb:41:91:f2:4e:05:a2:45:5e:c9:1b:c7:69:19:9f:
e5:08:85:b6:0b:98:5f:d1:e6:94:b1:9e:16:cf:e2:5b:42:26:
c6:cd:86:57:fe:d5:db:59:7b:e7:52:a8:02:52:94:e6:d6:ba:
8f:c9:b6:2e:ff:35:5b:12:e0:60:12:40:4b:73:e0:e2:a0:60:
b3:d5:00:bd:4a:ab:6d:17:20:b0:3a:e5:01:c6:2a:2f:23:3d:
72:bd:f4:6b:cb:7e:8b:d0:46:5a:ce:76:ec:a9:d4:62:94:a9:
28:44:e8:f5:38:f9:10:6b:72:4d:25:03:9f:4c:3d:98:8d:f6:
cd:56:db:af:c7:b8:45:62:6d:96:9c:8f:19:78:bd:3a:59:fe:
c5:11:61:5f:d4:f5:41:f6:5c:82:10:72:18:d1:02:59:8d:7c:
96:12:eb:af:3b:c3:6c:52:b1:0d:c1:8f:fb:b6:fd:cf:d0:c2:
3d:b8:7b:50:ba:1d:c7:19:7d:6b:78:82:94:e9:ad:a0:4f:71:
48:bd:c6:6a:bb:17:58:cc:93:f6:f2:90:a0:4a:6c:3d:16:cc:
22:d7:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-fra.rpki-client.org