Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3LN6PX1xrI8y8q2YYk6CA0UQy5Y.cer
File: 3LN6PX1xrI8y8q2YYk6CA0UQy5Y.cer (raw, json)
Hash identifier: GL+wxQsmb1IgdbXlFVUTpY3A3NiPvAs3kRfrgCKxnlE=
Subject key identifier: DC:B3:7A:3D:7D:71:AC:8F:32:F2:AD:98:62:4E:82:03:45:10:CB:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7BAE0F6409
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/a78f38-31c2-4c21-9f63-941387ccd69d/1/3LN6PX1xrI8y8q2YYk6CA0UQy5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/a78f38-31c2-4c21-9f63-941387ccd69d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:43:40 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 193.111.30.0/23
IP: 193.111.90.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531201221641 (0x7bae0f6409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:43:40 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=dcb37a3d7d71ac8f32f2ad98624e82034510cb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:b6:16:74:9d:c1:e1:68:3a:61:6c:6f:54:
cc:5d:4b:a0:43:9c:3f:2f:4f:5d:d5:49:74:76:5d:
50:41:d3:03:1f:1d:d4:36:57:25:09:ed:5e:b2:5f:
04:99:ed:e1:47:0e:18:5f:fa:b2:09:01:50:42:2e:
69:cf:4d:73:7c:31:5d:32:b8:4e:de:2e:71:42:1b:
c9:75:bd:80:41:1a:e2:eb:56:f1:e9:e4:05:91:b1:
54:7d:f7:06:86:81:a1:9e:d0:af:ef:f0:5f:bb:1b:
e0:cb:4a:8a:f5:e0:01:72:82:d1:a4:5e:11:97:a7:
85:fb:5a:8c:eb:96:63:a0:61:96:4f:fa:d2:74:43:
e7:58:8a:1f:3f:e2:67:cf:5f:89:64:b4:76:09:a5:
19:aa:9a:c6:3e:8f:fd:aa:c4:9d:45:9e:69:55:55:
eb:17:9e:3f:d2:7b:1a:d5:c8:e2:84:2f:c9:0a:09:
7d:8f:4c:64:51:11:a8:e8:dc:e9:78:6a:97:30:b8:
59:c4:be:f5:df:60:0a:d5:69:e4:57:35:cf:33:9c:
45:f7:95:9b:90:99:0c:66:6f:f5:23:9b:e0:b0:c4:
03:ee:d3:5b:88:dd:84:9e:27:f1:dd:ae:dc:70:9d:
cc:12:47:61:f0:41:8a:40:fe:c8:35:3a:82:d3:b8:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B3:7A:3D:7D:71:AC:8F:32:F2:AD:98:62:4E:82:03:45:10:CB:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a78f38-31c2-4c21-9f63-941387ccd69d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a78f38-31c2-4c21-9f63-941387ccd69d/1/3LN6PX1xrI8y8q2YYk6CA0UQy5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.30.0/23
193.111.90.0/23
Signature Algorithm: sha256WithRSAEncryption
74:1a:cd:01:e8:ab:af:b5:86:7a:e9:ec:34:a6:88:ec:77:55:
3c:36:95:a1:5f:b4:f0:94:3e:34:8d:4c:c7:3e:ad:45:37:6f:
a2:c8:f1:56:a9:31:80:8e:37:39:b8:f9:52:78:9a:a2:80:dd:
a5:57:83:31:38:97:9f:7d:20:e4:5d:cd:68:4e:9b:30:89:9f:
42:16:00:7e:65:b8:a9:59:c7:05:79:66:00:ae:4e:78:01:e0:
68:33:86:1b:ed:50:b6:7c:1d:a7:ab:e4:a9:18:f1:5f:21:46:
dd:4f:a3:16:9e:53:a0:86:7b:58:33:9f:89:c8:3d:43:cc:6a:
cd:b1:9c:1a:d0:ee:6a:ae:ac:bd:a8:4b:3d:33:2c:82:cf:76:
7f:db:7f:e2:52:a2:64:1b:9c:25:92:bd:ce:35:9f:1a:b1:3a:
a5:15:1a:de:eb:cf:78:46:34:58:da:31:46:75:08:52:45:e9:
5a:aa:5a:a4:6a:9b:67:07:11:ca:ae:5f:c5:eb:2e:89:b8:10:
29:64:f9:50:1f:00:4c:a8:ac:9d:69:54:08:37:03:43:bc:53:
69:b1:6d:c0:00:fa:d1:de:21:8a:74:f4:13:f2:ae:44:e1:bd:
de:72:ba:b1:64:e2:fa:a5:b0:e0:da:0a:f9:dd:37:e3:06:68:
ec:f9:e6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:29 2023 by rpki-client on console-ams.rpki-client.org