Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2N-fdCKmBzUOtlch3st4iWO3RMM.cer
File: 2N-fdCKmBzUOtlch3st4iWO3RMM.cer (raw, json)
Hash identifier: jzbrbJP3vC7nEJITmdxbjIx7NGvkiVvQOWAB0O1koxI=
Subject key identifier: D8:DF:9F:74:22:A6:07:35:0E:B6:57:21:DE:CB:78:89:63:B7:44:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1AA31E4C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/c862b5-fa0e-4aa6-95f2-c2267d96201e/1/2N-fdCKmBzUOtlch3st4iWO3RMM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/c862b5-fa0e-4aa6-95f2-c2267d96201e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:58:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.226.48.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694345131207 (0xa1aa31e4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8df9f7422a607350eb65721decb788963b744c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:21:7e:d1:48:07:86:a0:e8:2f:8a:62:af:
b5:f2:0a:5b:2f:8d:68:ff:cc:ad:58:ad:2c:e7:15:
cc:96:a7:c4:d2:89:24:bd:be:e1:33:10:4a:81:8a:
f6:82:c6:f5:f4:36:2d:f9:6e:eb:2c:96:5c:99:31:
8e:cc:0d:d5:db:ff:b4:50:59:6c:53:97:47:b3:98:
c3:37:8b:1e:4d:d5:0c:9c:24:16:c3:fa:52:fb:e2:
0c:21:a3:db:4c:90:23:4c:b8:66:d2:36:88:f9:6a:
3f:a0:d3:a2:ee:8b:52:28:50:e9:94:e7:e1:e0:33:
a6:a1:06:21:41:9f:e6:d9:7c:ac:52:50:37:f9:4e:
1c:12:e2:1a:a1:fa:a1:3f:23:1b:30:50:27:5e:96:
c1:b1:3c:0c:48:bf:a0:13:04:47:ee:ba:33:cc:03:
ce:fa:b6:9c:3f:b7:1e:99:37:30:5e:40:24:ee:e5:
bf:1b:6d:75:4a:53:9d:fe:7c:bd:74:48:80:9c:4d:
d8:2f:51:07:73:7a:9e:2b:0a:08:a5:bc:ef:97:73:
d9:c1:a7:4e:0a:92:4b:d6:5b:c4:9b:47:26:1c:37:
39:08:d4:cb:ea:18:56:29:1f:41:e6:38:e3:cd:66:
c1:65:e0:ed:21:b1:e4:ca:1b:b6:d4:85:3f:4b:c8:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:9F:74:22:A6:07:35:0E:B6:57:21:DE:CB:78:89:63:B7:44:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c862b5-fa0e-4aa6-95f2-c2267d96201e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c862b5-fa0e-4aa6-95f2-c2267d96201e/1/2N-fdCKmBzUOtlch3st4iWO3RMM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.48.0/22
Signature Algorithm: sha256WithRSAEncryption
84:e1:4a:72:fe:38:fa:27:52:0e:1e:3b:0d:25:ed:69:de:53:
0c:d3:20:a8:fb:b7:36:3c:a7:c8:a7:7b:ff:5e:4f:44:93:80:
19:f4:60:cd:cc:c9:8a:89:c4:38:19:0b:c1:00:cd:47:c7:4b:
29:d7:c2:ba:0d:35:bf:dd:c8:00:a2:0e:38:d2:c1:24:aa:88:
c6:95:70:03:ed:77:36:ca:d8:60:27:e4:11:ff:78:0d:2e:74:
30:08:7c:53:2a:f6:84:0d:ad:53:48:58:bb:58:ec:c2:77:7a:
63:cb:32:b8:e6:3f:d0:2e:b8:08:66:34:c5:82:52:cf:ae:b4:
f4:78:ee:a0:16:a5:08:9f:18:b1:f6:6f:4d:17:28:0c:b5:3c:
42:57:cb:0b:d4:fb:35:a7:76:91:85:77:e5:57:40:b7:b3:de:
8b:e7:9a:da:63:7e:99:3b:61:aa:17:60:b9:b6:9a:6b:98:80:
36:09:4c:b5:e4:8e:aa:99:41:e0:fa:3c:e5:88:cd:84:e9:d5:
ce:90:ac:7b:a8:0e:11:a5:fc:06:1c:f1:29:15:21:c5:d9:44:
da:0a:a7:ee:95:9a:2e:bb:88:9d:39:fd:7d:04:23:49:4d:c3:
5a:a4:05:0f:84:82:6a:4f:39:c3:f5:4d:02:93:34:b1:76:e4:
38:1e:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:41 2023 by rpki-client on console-fra.rpki-client.org