Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AX4GZT5q7RVkKQG4PEq0ClrNKM.cer
File: 2AX4GZT5q7RVkKQG4PEq0ClrNKM.cer (raw, json)
Hash identifier: dBIckYatiUXZ9RBiktJBYWVVFczT+sr1XLz1YN46W1E=
Subject key identifier: D8:05:F8:19:94:F9:AB:B4:55:90:A4:06:E0:F1:2A:D0:29:6B:34:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 5E40A10D33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/710fbf-0e9a-43a9-8276-a3c48fbbf073/1/2AX4GZT5q7RVkKQG4PEq0ClrNKM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/710fbf-0e9a-43a9-8276-a3c48fbbf073/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 15:08:22 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 185.234.152.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404811222323 (0x5e40a10d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:08:22 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=d805f81994f9abb45590a406e0f12ad0296b34a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:70:5b:04:d1:ed:7b:12:7d:4a:c6:3c:ea:
21:d7:ae:bd:08:ea:c4:67:d8:ad:0e:b2:7a:f2:88:
d6:1d:10:6e:a5:19:b6:fa:ec:0a:3c:61:13:e7:22:
a2:39:84:93:e3:5f:4d:5d:69:99:3a:a9:3e:39:53:
fe:a8:5f:d9:93:4f:67:0a:84:95:d4:da:db:dd:dd:
5b:5f:4e:e0:7f:b1:43:24:ce:f9:3f:89:fb:31:06:
60:7d:95:80:a1:d1:3d:26:c2:36:62:2b:35:30:f0:
5b:7a:24:b5:c0:41:15:a4:83:43:11:57:10:f9:87:
50:5a:b7:b3:1c:3b:9d:c0:26:31:e6:af:0c:bf:61:
57:08:f9:61:64:1c:f8:dc:5d:91:62:00:06:69:a8:
97:d2:18:47:c5:03:66:93:df:3a:7f:ef:b1:0d:74:
ad:31:7d:bd:9e:2b:c1:6d:d2:51:1b:c5:1e:eb:0e:
2e:b9:4b:cf:e3:0c:dd:5b:dd:4b:59:67:21:d7:e3:
21:1b:9c:63:8b:07:91:d4:97:06:40:d6:36:fd:23:
ba:3f:24:4a:ee:03:c6:ea:76:22:92:5d:29:65:36:
6e:0f:a0:c5:a3:f5:f6:36:3b:12:37:52:35:de:86:
d4:c1:b2:5d:ff:2e:a1:a0:6d:36:fe:fc:d8:7a:9d:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:05:F8:19:94:F9:AB:B4:55:90:A4:06:E0:F1:2A:D0:29:6B:34:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710fbf-0e9a-43a9-8276-a3c48fbbf073/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710fbf-0e9a-43a9-8276-a3c48fbbf073/1/2AX4GZT5q7RVkKQG4PEq0ClrNKM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.152.0/22
Signature Algorithm: sha256WithRSAEncryption
40:4c:74:33:c9:83:d7:26:c1:d1:21:57:28:8c:00:59:57:87:
6a:c3:36:7b:72:8d:37:47:a3:1a:be:cf:10:14:b9:61:06:e6:
7f:2a:1b:7e:2c:9d:19:cb:a8:2c:54:39:80:05:54:a8:c2:92:
6b:06:2d:c2:0b:af:ee:10:02:a5:81:f6:63:61:07:bb:ce:db:
ab:cf:10:d8:78:f3:bd:4f:36:83:f0:5f:57:00:d7:4f:c7:6a:
f5:c2:3f:1c:f8:51:90:01:cf:dc:97:82:e8:f1:ac:2f:2d:9e:
e9:f8:45:82:a6:6f:22:98:9f:ce:bb:9d:0e:52:ab:a0:f7:df:
02:23:5b:0b:22:78:bd:5d:64:9b:f0:45:e7:a5:d7:ee:5c:4b:
e2:85:b0:4d:25:20:53:e3:25:cb:22:92:7e:8a:d6:c7:b4:7f:
87:a6:17:6c:cb:3a:1f:e5:b8:f4:c2:ae:0d:01:fa:87:d0:a3:
27:d0:02:7f:c7:58:58:cb:f4:af:db:d2:59:b2:f8:b4:1a:34:
bf:2c:bd:f5:17:5f:dd:83:d0:de:98:b7:75:36:d1:e5:5d:80:
ee:af:2b:d1:24:c9:2b:85:d0:9c:34:6d:ac:c5:37:82:f8:10:
c6:f1:91:0b:59:74:bf:37:e5:c5:eb:3a:ca:d5:c2:98:25:bc:
f9:c0:88:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:40 2023 by rpki-client on console-fra.rpki-client.org