Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2mQOKKG1DnV4a_a_ZPbvRVog5tM.cer
File: 2mQOKKG1DnV4a_a_ZPbvRVog5tM.cer (raw, json)
Hash identifier: MuaVOXrcjWAE9UKPah+MNM1LgiY9eX418YrtAQi6H3c=
Subject key identifier: DA:64:0E:28:A1:B5:0E:75:78:6B:F6:BF:64:F6:EF:45:5A:20:E6:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 82EEE067EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/a0ceb7-ee03-41c7-a624-0d66b6f44593/1/2mQOKKG1DnV4a_a_ZPbvRVog5tM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/a0ceb7-ee03-41c7-a624-0d66b6f44593/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 06:53:38 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 193.200.62.0/23
IP: 193.200.96.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562353432559 (0x82eee067ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:53:38 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=da640e28a1b50e75786bf6bf64f6ef455a20e6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:fc:8f:58:c6:4d:9f:c4:16:7a:5f:70:c1:
30:ec:ef:e8:e7:71:0a:dd:dd:18:55:d9:1f:de:57:
0f:49:10:6b:bc:e2:b0:b6:96:8e:a0:aa:23:74:b3:
9b:d5:65:41:3d:b9:14:7b:d7:16:1d:09:10:f5:45:
f7:9b:3e:58:54:66:51:28:80:e0:f6:47:8e:b0:43:
e3:ba:e3:05:6c:08:73:33:bc:1c:13:88:fb:33:0a:
b6:c4:6f:0b:5c:67:ad:08:79:62:36:0e:99:a4:53:
fe:1d:e1:b0:47:b0:0a:de:6a:72:35:14:04:bb:9b:
3a:27:72:f3:27:34:51:5e:de:f2:f2:1c:80:91:37:
21:ff:6d:5c:ef:e4:e0:10:60:66:c6:68:73:41:a4:
1b:37:0f:9a:0f:79:3d:b5:26:71:9d:f1:16:47:79:
2e:43:17:55:a7:6d:43:d1:6f:c3:74:77:db:88:e4:
a8:de:4b:34:43:b8:07:e2:40:11:48:fc:b8:20:b6:
f3:01:60:b4:8b:6c:c6:7e:07:37:7f:52:e9:19:60:
fd:bf:7b:37:14:90:3b:99:b7:c6:9f:a9:e3:f0:44:
e6:38:80:a9:fe:e5:22:a7:90:75:6c:19:8f:c7:0b:
6a:96:2e:d9:ab:b7:dd:a5:67:c8:e5:d2:94:6b:1d:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:0E:28:A1:B5:0E:75:78:6B:F6:BF:64:F6:EF:45:5A:20:E6:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a0ceb7-ee03-41c7-a624-0d66b6f44593/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a0ceb7-ee03-41c7-a624-0d66b6f44593/1/2mQOKKG1DnV4a_a_ZPbvRVog5tM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.62.0/23
193.200.96.0/23
Signature Algorithm: sha256WithRSAEncryption
13:6d:53:b5:76:e0:f1:b3:80:b5:b4:b9:18:13:81:ee:43:a1:
ac:9d:33:ee:cf:c4:6a:e7:8c:b5:97:c0:7f:b8:18:b8:c0:85:
ef:81:1f:d8:e1:52:fd:e0:67:e0:80:96:27:86:28:47:99:d1:
fd:e8:ce:11:57:9d:dd:6c:86:d9:02:cc:a8:ef:be:6f:f1:7e:
32:56:a0:7f:ac:d3:08:44:90:40:00:7a:66:60:ad:6a:c6:d5:
98:a7:29:aa:51:a3:bd:ed:e5:2d:41:28:6a:bc:96:c8:d3:c3:
4b:8c:28:03:1c:66:41:62:20:24:39:44:dd:b6:a5:5d:8b:c9:
73:3c:4b:47:54:ba:f2:9a:7b:eb:d6:66:9d:48:23:cb:4b:8f:
c6:65:f2:a4:25:4e:0a:cd:ff:ca:42:9f:05:ee:c4:65:24:64:
0e:94:4d:e3:4b:c1:d3:1f:82:ed:14:a8:64:6d:5f:f4:74:43:
ec:9e:d6:9a:7c:02:11:4a:12:d3:2a:43:aa:cb:19:2e:ef:f2:
89:2e:f4:f5:7a:87:25:21:49:2c:39:cb:50:13:88:8c:64:20:
4b:05:e2:59:59:05:68:60:28:7e:88:e5:da:76:01:ef:be:57:
33:38:05:53:39:99:e8:ad:bd:3f:c6:7a:ea:b5:8e:ba:b1:ea:
17:c4:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-fra.rpki-client.org