Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1sF1waGCdwwHcMLO2oT8xRxMFqs.cer
File: 1sF1waGCdwwHcMLO2oT8xRxMFqs.cer (raw, json)
Hash identifier: bb3jqbZlOQPGzSAsQXXD4rDhoC1aV+VNnpIRL2VEBJk=
Subject key identifier: D6:C1:75:C1:A1:82:77:0C:07:70:C2:CE:DA:84:FC:C5:1C:4C:16:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B2EBF85C55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/1sF1waGCdwwHcMLO2oT8xRxMFqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Jun 2022 11:57:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 62.3.55.0/24
IP: 2a13:2c00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768463101013 (0xb2ebf85c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 8 11:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6c175c1a182770c0770c2ceda84fcc51c4c16ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:0d:27:8b:48:6b:02:49:b8:ff:d1:e4:fb:
3d:ed:5d:6f:83:34:ef:07:2f:cd:98:0e:d8:77:5b:
ea:4b:75:52:25:c2:45:b2:04:de:ca:5a:9e:bc:41:
25:2e:76:e9:a9:7d:36:77:b8:51:6f:f2:1a:d2:62:
42:fe:94:1f:04:a0:f2:bd:32:54:e1:3c:03:0e:c5:
f0:eb:1c:ce:73:a0:62:94:3c:07:44:cb:a2:6e:dc:
c6:88:b6:bb:c3:0e:e9:e0:f9:81:f4:4e:e5:15:f0:
b3:d1:5b:33:5c:87:b1:48:08:b4:f1:ab:04:9c:59:
b7:98:8b:60:08:67:27:ec:8b:15:51:76:69:9c:36:
13:e9:89:08:fd:b9:77:25:66:6f:48:7a:ed:f5:f2:
4b:41:ef:6a:11:45:b9:ca:5f:0d:cc:9d:2a:8e:e4:
25:9c:cd:fd:6f:76:64:df:50:cb:17:f6:43:e5:fd:
db:36:44:df:72:6d:dc:db:c9:1d:bc:1b:e8:50:94:
c5:fd:53:53:c5:60:fc:7f:f0:60:a8:b4:15:9e:c4:
3a:51:10:4b:ef:51:fd:74:00:28:66:42:10:69:2b:
1a:e9:af:1b:c7:2a:c6:4b:7b:eb:5c:00:05:7b:ad:
5d:bf:e0:c9:6d:ae:05:76:ed:7d:dc:7a:3c:b7:63:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:75:C1:A1:82:77:0C:07:70:C2:CE:DA:84:FC:C5:1C:4C:16:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/1sF1waGCdwwHcMLO2oT8xRxMFqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.55.0/24
IPv6:
2a13:2c00::/29
Signature Algorithm: sha256WithRSAEncryption
ac:8b:91:39:fa:2a:91:f3:ce:45:be:50:5a:de:a7:23:72:c0:
d9:ea:e9:c2:0b:72:12:85:37:f9:29:81:71:64:38:da:55:85:
55:1b:b9:15:bd:6a:e2:bf:04:12:fe:e5:c3:00:6f:e8:96:0c:
e4:cc:14:1e:b8:fd:88:52:c7:75:14:bd:19:c9:f9:23:28:c6:
25:27:c7:b6:1c:f8:6f:a4:a2:2c:4c:81:0f:bc:50:cb:da:70:
3a:a8:d9:72:e2:8c:8c:31:82:34:0d:6f:90:0d:7c:72:da:ef:
76:2b:b6:bf:ac:63:4f:3f:e7:32:ea:41:d5:c3:1a:86:74:76:
d1:52:da:9c:01:48:c7:c2:80:1e:03:65:b4:d3:1e:56:e2:91:
9e:f9:8c:b0:8c:3e:38:00:5f:b2:c7:9a:17:20:19:a7:ff:c5:
cd:37:94:43:2a:01:c2:24:80:56:bd:f6:f4:f3:70:20:02:05:
08:7b:a3:42:95:21:2e:63:95:cc:70:11:a1:a1:66:4c:89:c4:
09:b2:74:92:14:27:5b:7d:88:37:9f:ee:78:84:8c:f0:3d:37:
80:c1:8b:d8:3e:74:2b:df:f1:20:fd:92:65:3b:27:ec:e2:55:
e9:86:29:a4:e2:77:67:de:76:0a:a7:54:e4:42:2b:bc:a3:bc:
c1:5c:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:35 2024 by rpki-client on console-ams.rpki-client.org