Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hI7PpnCbOS11otvEgwyjbF2-3o.cer
File: 3hI7PpnCbOS11otvEgwyjbF2-3o.cer (raw, json)
Hash identifier: ASYPqsIQhRZXVjFPQBQ5J+QFL5xv4duCVyaE4OqwI1A=
Subject key identifier: DE:12:3B:3E:99:C2:6C:E4:B5:D6:8B:6F:12:0C:32:8D:B1:76:FB:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A78DA3824F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/3hI7PpnCbOS11otvEgwyjbF2-3o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:01:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.178.54.0/23
IP: 193.178.112.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719635841615 (0xa78da3824f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de123b3e99c26ce4b5d68b6f120c328db176fb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:44:51:f4:ce:f1:0a:58:1e:31:54:22:44:
91:6c:0d:5f:3c:a1:e7:77:2b:e7:25:84:86:df:c3:
5a:34:63:c2:99:ae:48:61:04:2f:86:c9:ee:06:07:
19:89:33:7c:57:c8:05:06:46:25:1d:63:10:45:21:
02:4b:c0:f3:be:b2:3d:d3:56:a3:f3:8b:0c:dc:5a:
7d:05:6f:26:90:b6:2a:b0:77:5f:44:2e:cd:6e:da:
8b:95:e0:4d:90:7b:b7:9f:37:e5:97:be:ec:69:9f:
a5:70:73:63:f4:57:9b:9c:b7:21:7d:fb:ef:52:af:
4b:a5:42:fe:86:4f:0b:ee:30:39:0f:69:d6:03:d0:
25:24:b3:0b:1d:c3:60:7c:8a:f7:21:db:77:d3:8b:
94:7f:ee:68:d3:62:83:34:e9:ff:56:d8:e5:82:1a:
4e:c9:ce:46:66:26:70:57:56:e5:ec:6f:16:68:62:
9e:72:0a:48:91:17:1c:a4:8f:98:81:f1:e4:82:90:
7e:a3:6a:8b:61:ea:18:3c:77:87:5b:3c:f0:20:40:
86:c7:fa:8e:b0:f5:27:7d:da:46:c1:a3:1b:56:fc:
79:56:c0:b4:ed:bb:ac:e5:ba:49:2c:c6:26:66:69:
78:d9:96:f1:06:05:dc:ca:45:97:c5:59:8e:53:c2:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:3B:3E:99:C2:6C:E4:B5:D6:8B:6F:12:0C:32:8D:B1:76:FB:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/3hI7PpnCbOS11otvEgwyjbF2-3o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.54.0/23
193.178.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:df:1e:a3:9d:31:c6:1d:30:a2:b3:bb:09:da:77:2f:8f:ff:
11:fa:59:99:f4:6c:d6:4f:cd:20:39:f1:e7:0e:d3:fc:cf:8f:
7e:8a:d5:25:65:bb:46:a8:33:9b:94:83:d8:db:58:09:ad:3b:
6c:e9:ea:33:23:09:c1:57:32:24:d1:4d:25:b6:d6:5d:b9:11:
3b:66:3d:4d:29:1f:8d:49:07:10:2a:7b:ae:a2:dd:69:fc:8d:
7d:ec:f5:ab:c8:6b:0d:86:4f:d9:95:bf:87:bd:c6:48:46:55:
90:2b:e0:3c:c6:89:3c:3e:c9:a1:bf:70:fa:81:de:8b:98:fc:
5a:0f:3c:86:1e:5c:18:b2:84:d7:33:3b:8f:96:5e:ed:00:0f:
11:66:2c:6e:89:74:05:07:48:60:66:da:65:10:04:0d:a8:ce:
e9:c8:de:9f:fd:87:ea:00:f6:1c:67:dd:09:6c:16:5d:06:2c:
95:10:83:30:16:dc:98:23:c3:a2:a0:a8:8b:b0:d6:49:72:8d:
06:c7:13:2d:2f:9d:25:85:7a:f7:c8:44:97:b5:e7:22:7d:c6:
08:11:8e:d1:bd:8e:0e:eb:d3:1a:81:56:96:21:9f:3f:57:50:
cb:d8:6c:04:15:12:04:50:c7:13:ee:23:ad:cf:22:03:6f:8b:
33:13:3c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:44 2023 by rpki-client on console-ams.rpki-client.org