Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer
File: 1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer (raw, json)
Hash identifier: UgZGL8n2FS4wzU+GjPUVyhFFUF/v2e1l/+WKFtER45s=
Subject key identifier: D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 85053C99D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.mft
caRepository: rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/
Notify URL: https://rrdp.rpki.nlnetlabs.nl/rrdp/notification.xml
Certificate not before: Mon 04 Jan 2021 11:20:02 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 151.216.0.0/23
IP: 185.49.140.0/22
IP: 2001:7fc::/47
IP: 2a04:b900::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571318507991 (0x85053c99d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 4 11:20:02 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d724c2d90d5bcc9fda54755efc8c903acb01d02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:54:8f:5e:2e:74:0f:0a:1f:a3:c0:67:20:
e1:89:46:ed:79:8d:c1:60:7e:49:f0:a7:d1:13:06:
9d:50:6a:fd:0c:8e:e6:6e:aa:96:10:df:f5:19:c7:
6c:43:e3:77:f0:8a:3f:c2:63:94:67:86:92:bb:0c:
5a:59:0f:54:d1:fb:6f:b6:97:fa:62:ba:2c:43:76:
fc:d6:97:a7:92:54:ea:fe:2e:09:5b:87:14:c1:99:
f5:aa:a0:6f:00:40:53:eb:a7:82:d7:e4:15:4d:45:
7d:f2:2e:7d:d0:13:58:e9:b4:7e:b8:01:ce:2e:f7:
bd:41:2e:86:06:c0:fd:93:f5:22:01:9a:8a:3e:7c:
10:db:50:32:35:d8:c9:6a:02:c9:94:3e:c4:11:cd:
5a:0b:30:a9:4d:88:07:e4:47:b0:44:1e:b8:39:82:
a3:6f:53:3c:0b:e4:a8:f1:82:2e:70:c0:bd:d4:9b:
1f:a6:d5:9e:b3:40:b7:06:8a:9e:e2:3f:95:e6:de:
12:a8:2e:80:16:6a:3d:9b:f3:2c:ce:8d:6c:73:70:
37:c3:69:20:22:73:26:d2:f2:4e:fb:d2:ac:8f:18:
df:8e:e3:35:48:87:fb:46:fd:08:5f:24:41:87:cb:
cc:3b:b5:fa:51:08:f7:68:d8:ba:50:5d:17:92:5f:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/
RPKI Manifest - URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.mft
RPKI Notify - URI:https://rrdp.rpki.nlnetlabs.nl/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.0.0/23
185.49.140.0/22
IPv6:
2001:7fc::/47
2a04:b900::/29
Signature Algorithm: sha256WithRSAEncryption
6e:51:bf:15:a9:69:83:ae:a4:ca:cf:47:dc:1f:97:a9:0f:15:
75:ff:c7:47:88:a4:e8:6a:27:25:a9:9a:37:68:27:c1:04:e5:
29:b7:07:97:72:7d:3e:67:34:f1:85:2c:ea:9f:00:8f:1f:93:
73:5b:09:97:b3:d9:f2:1a:8a:7a:fb:9e:fe:ac:15:66:b8:47:
49:33:76:1c:9e:2c:e0:24:6f:19:e7:a9:0f:88:ef:6a:2f:3b:
2a:9a:49:6d:d7:88:08:09:ac:9b:e1:b5:ff:19:a6:47:f5:aa:
4e:b8:68:d0:67:1f:15:a0:b0:f3:c1:a3:e4:89:b1:68:91:cd:
64:d4:c1:9d:bc:87:1e:f3:2c:01:3e:14:59:85:fb:70:73:f4:
ae:15:8a:d8:93:72:40:f1:45:f6:05:00:9a:0a:72:da:01:1f:
75:e0:43:9b:02:e3:f2:10:c1:16:4b:69:84:33:70:c0:46:32:
59:ee:38:7c:08:f3:25:74:c1:04:50:8a:bd:80:20:d8:b9:e1:
95:c2:f4:0f:5b:36:94:f1:ec:54:74:80:b6:dd:0e:ab:df:56:
1d:8d:34:cc:0a:cc:04:77:45:e3:94:93:e7:91:32:97:5e:18:
55:92:dd:fd:5e:49:01:de:35:49:10:7f:70:ee:41:5e:a5:6b:
67:7b:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-ams.rpki-client.org