Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2rNxGIHnA7JC97mYDDIhfVO2VTg.cer
File: 2rNxGIHnA7JC97mYDDIhfVO2VTg.cer (raw, json)
Hash identifier: XqUzceKtZuLJ9KsDHwGLFqsxQCJTyXzczyX5Tu2j1Rk=
Subject key identifier: DA:B3:71:18:81:E7:03:B2:42:F7:B9:98:0C:32:21:7D:53:B6:55:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 5F4D73ACB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/231fb8-c53c-4cf8-a8d9-d90b8ef95609/1/2rNxGIHnA7JC97mYDDIhfVO2VTg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/231fb8-c53c-4cf8-a8d9-d90b8ef95609/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 15:13:33 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 185.156.152.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409321319606 (0x5f4d73acb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:13:33 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=dab3711881e703b242f7b9980c32217d53b65538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:9a:4a:8a:a8:13:68:ca:4c:29:ec:d0:c3:
b6:4e:ba:f3:45:76:09:be:33:b0:fc:28:de:53:74:
59:53:ae:f5:f6:9c:4f:2d:0b:90:21:bf:8d:b7:2c:
11:0b:71:97:9c:66:d6:f3:52:69:15:62:b8:40:04:
53:52:9a:06:42:89:82:58:2c:d9:f5:69:2c:41:2c:
01:70:16:91:92:44:2a:89:c0:6b:b8:e9:7b:89:0c:
be:de:e4:52:e7:ce:3f:4f:5b:6a:94:c4:06:19:31:
aa:10:e4:d1:bc:60:21:46:92:6f:78:28:8f:05:8f:
a7:87:5d:6f:44:87:f8:21:d4:1d:83:a8:11:95:93:
63:0d:f7:26:58:39:5c:e3:dd:1e:1a:7f:9b:d5:81:
26:0f:82:4b:ab:ad:1a:0d:d1:9e:51:fa:06:2a:be:
79:02:e6:96:97:cc:c9:e6:9e:34:b0:51:a6:bd:12:
41:87:51:66:04:d8:1b:6d:d1:13:f0:bd:68:9f:96:
64:1c:12:05:1f:f9:6a:f7:05:20:70:70:60:bb:a8:
a7:aa:16:2e:3d:a5:91:73:3b:e9:da:a9:b1:b4:fc:
3a:37:7e:34:1b:89:61:ff:8a:4a:d7:7b:55:0b:b9:
de:df:dc:8b:06:95:19:8e:99:76:75:0f:e5:64:a4:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:71:18:81:E7:03:B2:42:F7:B9:98:0C:32:21:7D:53:B6:55:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/231fb8-c53c-4cf8-a8d9-d90b8ef95609/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/231fb8-c53c-4cf8-a8d9-d90b8ef95609/1/2rNxGIHnA7JC97mYDDIhfVO2VTg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.152.0/22
Signature Algorithm: sha256WithRSAEncryption
77:3c:09:af:06:1a:8d:e3:c4:c1:fc:37:8c:92:65:e6:50:aa:
45:a5:a5:0a:fc:c4:05:5a:39:e2:74:0a:0b:e6:23:96:a4:4e:
83:55:ba:13:ca:79:e0:88:7c:9e:97:df:26:c7:84:d0:f8:94:
5c:a4:10:84:af:92:5c:6b:76:32:fa:40:16:71:a0:0a:80:25:
a0:54:02:a1:6b:51:ba:f5:ed:1d:94:75:27:de:20:42:55:32:
91:41:90:07:92:f7:5c:5b:c9:5c:34:c5:8a:32:d1:dd:ba:9f:
a2:13:89:38:cd:6d:36:23:44:45:93:95:15:be:4e:56:24:d3:
db:39:54:f0:9e:67:85:a6:d4:ad:cc:19:42:53:a3:28:e8:6a:
a0:e6:6f:8b:a7:65:a0:8f:27:fa:64:a4:35:98:9a:f5:16:fc:
c5:13:b9:0b:15:0c:ce:84:34:74:79:a6:2a:9e:93:ec:d6:82:
26:85:f7:3d:4a:0d:62:e9:1a:71:02:8a:6f:85:f8:f7:b9:d9:
84:8f:be:a8:c7:12:f7:62:cb:89:fe:27:b1:1c:1a:2a:60:1b:
65:ab:72:cf:54:8b:b0:91:4d:ca:ce:99:70:8c:ab:81:cb:f5:
05:c5:01:16:e3:cb:56:5c:08:f2:c7:a0:5f:bc:2a:32:14:ff:
a0:87:3a:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:50 2023 by rpki-client on console-ams.rpki-client.org