Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2iRdieE1vZXjSO5MSfoOfy9W298.cer
File: 2iRdieE1vZXjSO5MSfoOfy9W298.cer (raw, json)
Hash identifier: fDKPcLLAoG7/Kp73fnmON2IZ7kmf0iL53IDhjtytLqo=
Subject key identifier: DA:24:5D:89:E1:35:BD:95:E3:48:EE:4C:49:FA:0E:7F:2F:56:DB:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AF0DB19A24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/2iRdieE1vZXjSO5MSfoOfy9W298.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Mar 2022 11:36:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 79.142.184.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751849019940 (0xaf0db19a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 24 11:36:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da245d89e135bd95e348ee4c49fa0e7f2f56dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:83:8d:2f:49:46:10:d2:eb:3c:ef:94:c3:
46:97:aa:de:3e:25:98:9d:37:ba:0e:95:16:d1:fc:
22:7d:59:25:61:fd:a9:c2:d1:c6:d5:ab:87:33:4f:
bd:c1:db:ed:5c:61:fe:87:ba:4b:a1:52:67:b3:a8:
81:04:a3:e7:92:6b:b6:a1:69:0b:2b:62:49:b0:55:
9c:46:c7:9b:98:c1:21:7c:e6:42:7c:70:6b:00:aa:
0b:cd:d1:60:7b:c6:e6:5f:39:2d:1c:55:dd:8c:3d:
2d:52:dd:24:00:6a:9d:06:39:d0:4e:fc:ca:41:63:
9f:c6:13:02:9a:0c:b1:e1:51:57:72:7c:52:79:c0:
ed:e7:43:18:8c:99:23:66:c4:4e:8d:bb:bc:6e:82:
9d:ef:bb:a7:6b:9d:54:49:cf:96:f2:2c:d2:22:7b:
7e:76:21:36:cb:2b:a5:76:38:35:76:1d:fd:cc:85:
c7:a3:6b:5d:a7:cf:ea:ab:f8:81:0b:a5:73:94:ec:
7c:5c:35:11:62:be:71:36:fc:25:c5:de:12:58:99:
9b:da:9a:62:5a:96:b5:f1:b5:b0:8b:d4:38:4c:c5:
3e:e6:a5:3b:2a:d1:34:be:0e:d4:7b:e0:d3:4b:9e:
cc:ea:c6:f1:c7:52:3e:5d:61:e2:19:80:7e:f6:84:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:5D:89:E1:35:BD:95:E3:48:EE:4C:49:FA:0E:7F:2F:56:DB:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/2iRdieE1vZXjSO5MSfoOfy9W298.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d8:9d:6f:80:de:a0:41:99:fd:78:91:96:fb:b7:1b:f0:5b:
54:63:f8:72:51:02:76:dd:54:f7:98:c0:7c:5b:3d:bd:cf:77:
7a:cc:0c:d3:46:3d:4b:bf:b9:99:f9:e6:0d:83:81:90:e7:2c:
42:70:fb:cd:95:36:28:61:b1:fc:2c:0c:c5:64:b9:ef:9e:d1:
11:dc:df:53:08:b3:f8:ec:4f:7f:ed:70:4e:d6:f3:6c:62:66:
df:a6:b2:03:5f:24:3e:3f:d9:2d:08:1f:60:43:d0:9d:f4:72:
8b:a1:7f:78:7f:c5:11:ca:e7:a8:9c:e8:f3:ad:2d:f0:01:ae:
e9:1d:14:a7:68:06:3e:95:d1:c7:79:54:e7:b5:cf:6f:01:87:
ea:b5:e5:e0:10:18:be:9d:d3:35:18:b0:1d:c4:36:42:b6:2e:
30:ef:d9:a2:bb:dd:25:ea:a9:9d:17:d0:da:ef:2a:06:d3:75:
d5:c9:d2:ad:88:f7:10:c6:d5:17:51:ed:d2:b8:f2:9f:4e:3e:
68:49:45:68:79:a6:d4:11:8b:38:ff:b3:33:34:55:10:be:dc:
4c:55:de:29:d0:36:60:d6:28:60:d4:8d:1c:2e:58:a2:76:18:
25:d3:c6:a8:45:54:28:e5:f0:de:fd:33:24:43:36:6c:3f:8c:
ba:bd:45:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-fra.rpki-client.org