Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2de83JV1QBfY8ewGIryREp3pD0g.cer
File: 2de83JV1QBfY8ewGIryREp3pD0g.cer (raw, json)
Hash identifier: ZjVqSgt3A0xxBU2MZv84DARYiaIqtPmmaFm+9V4fURc=
Subject key identifier: D9:D7:BC:DC:95:75:40:17:D8:F1:EC:06:22:BC:91:12:9D:E9:0F:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 5F325DDC01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/c8f0e7-e369-4f8f-8836-6cbe6db4da91/1/2de83JV1QBfY8ewGIryREp3pD0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/c8f0e7-e369-4f8f-8836-6cbe6db4da91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 15:13:02 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 91.188.200.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408866905089 (0x5f325ddc01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:13:02 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=d9d7bcdc95754017d8f1ec0622bc91129de90f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:77:d1:6b:62:06:1f:65:4e:3d:80:fe:5c:
c0:e5:f9:3d:7c:20:ec:a0:9e:fa:f8:ab:bf:85:4d:
74:05:a9:35:d9:ca:d4:26:a7:f4:47:d3:2d:a2:37:
78:fc:c3:0b:63:fb:7d:f7:a2:2e:f2:c8:ca:b9:40:
11:41:e6:5f:22:3c:f8:ed:4a:a9:2a:fb:fa:92:6f:
28:85:37:13:12:bb:eb:71:c4:fd:f7:28:e8:c5:75:
0e:41:9f:95:40:67:57:bf:0e:4c:6c:10:b9:88:d8:
ff:3d:67:37:70:22:a8:b1:25:8c:70:5e:45:b5:27:
a7:db:51:59:b0:03:67:f2:d9:16:c5:d3:f5:24:58:
6a:48:6f:e9:9c:bd:3a:f2:22:9f:90:63:77:e9:42:
ac:71:31:19:25:26:2c:be:2b:f1:3f:c8:1e:49:53:
3b:37:4f:87:83:98:35:4e:c8:6f:8e:82:07:80:65:
e5:b5:31:59:b5:cf:12:5d:4b:1e:cc:d7:e1:43:51:
ea:18:4a:d1:1d:97:5e:44:ca:6f:cd:00:8d:14:6b:
a6:1b:4b:72:17:b3:7f:f5:1e:69:f1:5b:89:d0:7d:
15:fb:82:c3:57:a6:a5:5c:a9:0e:be:4b:8f:4e:05:
05:c8:cf:ee:da:c7:e1:86:ac:aa:c8:98:fb:41:0d:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:BC:DC:95:75:40:17:D8:F1:EC:06:22:BC:91:12:9D:E9:0F:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c8f0e7-e369-4f8f-8836-6cbe6db4da91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c8f0e7-e369-4f8f-8836-6cbe6db4da91/1/2de83JV1QBfY8ewGIryREp3pD0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:8b:00:a5:35:01:72:83:87:7b:9f:e7:dc:d7:0f:32:c0:28:
3b:32:c4:ed:da:94:03:89:5c:d4:e5:f0:59:83:7e:ba:af:ba:
e1:85:bf:81:df:b7:d5:70:8d:09:2c:d2:96:b2:62:b7:c7:81:
b9:9e:6a:a7:f7:13:76:8b:64:21:4a:d1:4d:81:b7:9f:81:b1:
a1:7e:ad:c0:ea:17:f0:44:8f:76:4c:05:ac:eb:d2:88:c1:d1:
f2:b8:0d:d6:83:99:ce:fe:3c:0a:1d:1e:62:a9:7f:76:ed:89:
57:49:ae:8f:7b:df:bd:94:cb:05:18:87:f6:9e:29:cd:99:18:
dc:dd:c4:8e:cb:11:c5:bb:96:f4:db:23:2d:78:92:eb:f0:2f:
59:05:4e:3f:1e:ef:5a:b4:fa:5c:ba:54:0a:12:23:d7:af:21:
1e:6a:60:23:a2:f5:50:69:a5:99:39:52:24:e9:74:c9:d3:7e:
5b:72:e5:bd:55:0b:9b:f5:82:8c:ba:e2:34:d4:dd:30:be:75:
62:42:2d:bc:aa:c0:e5:bb:d4:39:e3:46:08:c7:23:5c:44:02:
91:fa:9a:45:55:ab:46:a8:d8:58:38:b3:b1:98:61:20:94:b8:
8e:97:7d:37:38:14:76:33:c7:04:14:b7:8e:69:0a:f2:5e:07:
70:bc:1a:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org