Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3z8pXGX7zyAfb2HqqMQ23fP2SdU.cer
File: 3z8pXGX7zyAfb2HqqMQ23fP2SdU.cer (raw, json)
Hash identifier: LjHr5Z7M+2b/toL/gEVyd8Zleg9wvbGAZvbUWzysfgY=
Subject key identifier: DF:3F:29:5C:65:FB:CF:20:1F:6F:61:EA:A8:C4:36:DD:F3:F6:49:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A26B9F8C35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/3z8pXGX7zyAfb2HqqMQ23fP2SdU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:54:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.92.224.0/22
IP: 2a0a:4980::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697590320181 (0xa26b9f8c35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df3f295c65fbcf201f6f61eaa8c436ddf3f649d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:71:f2:56:17:dd:2a:10:b0:72:29:6e:e0:
4e:4b:6d:62:92:c4:1c:76:82:21:52:47:a3:ac:8f:
74:b0:ff:b1:1a:55:18:7d:c6:03:35:65:e6:1f:92:
e6:43:f0:4a:84:de:fe:8f:f3:b8:cb:4a:17:39:5e:
50:4d:36:a9:4d:fc:56:15:ee:f4:4b:6f:03:b4:db:
39:35:11:98:ae:b9:51:ba:34:0a:65:4a:35:a9:f3:
93:80:03:e2:49:96:8b:8b:63:eb:8e:7e:4c:6a:6f:
6d:4c:11:2d:f3:f8:3e:0f:bf:4b:79:3f:f0:60:ca:
c3:22:f5:00:8a:36:7d:d6:60:5b:ca:a4:ed:5e:a1:
5f:34:bb:99:49:b1:b8:f0:68:02:81:51:8c:80:fa:
b8:82:2f:3c:9b:6d:c8:9e:51:54:09:5a:ae:cd:16:
ca:c8:18:9a:2e:03:cf:eb:48:d0:bd:3e:ff:b9:55:
73:f1:73:a9:2a:11:c7:e4:21:60:84:17:ba:9b:5f:
10:ff:dd:33:df:eb:eb:5a:8a:b7:86:0f:fe:07:17:
dc:62:10:ff:f4:bd:af:4f:3d:ac:dd:b1:f4:44:7d:
b9:5a:8c:c8:c1:8d:04:d4:45:e8:df:ab:6b:b3:bd:
b0:43:17:3c:a2:95:f3:27:11:a0:67:d0:e8:cb:62:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:29:5C:65:FB:CF:20:1F:6F:61:EA:A8:C4:36:DD:F3:F6:49:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/3z8pXGX7zyAfb2HqqMQ23fP2SdU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.224.0/22
IPv6:
2a0a:4980::/29
Signature Algorithm: sha256WithRSAEncryption
19:da:e2:ef:1f:be:39:85:ce:56:53:29:3f:0f:42:af:dd:de:
66:c9:47:dd:c5:34:d2:34:ee:5e:91:14:36:0c:2b:6d:e1:0d:
23:04:e1:3d:49:6f:21:8f:aa:6d:66:7e:c6:3d:d0:7f:fb:17:
6e:33:8e:d1:4f:73:7e:ff:4d:74:02:29:6e:58:c9:dc:be:c4:
26:8d:64:a1:7e:bd:42:55:a3:79:7e:f7:de:f6:9b:58:a5:99:
f1:f3:64:26:1f:d5:71:db:9e:fe:a5:96:94:36:c2:ca:c1:8e:
64:c6:d2:2f:9a:ff:4f:38:67:19:67:51:34:ae:70:c0:fc:af:
3e:f3:c7:7d:3a:0d:32:ed:bb:f7:27:e8:5e:89:0a:fd:f5:6e:
ff:44:db:7d:ae:87:6b:6f:fc:63:e4:21:0d:38:1b:9f:f1:96:
78:41:eb:f4:ea:3c:d1:5f:29:81:f5:59:47:cd:83:4a:d3:6f:
0d:6b:ce:ab:37:d1:7d:97:52:df:53:33:70:57:c8:dd:e5:72:
1e:1f:f9:44:4b:f6:e2:26:e7:d5:4d:21:b5:d5:7f:d4:ee:9b:
fc:4d:aa:b3:70:27:37:53:cc:ce:cf:62:06:ed:1e:03:50:b5:
a0:15:e7:12:df:98:a8:d2:4b:f3:a5:ad:54:d3:04:7b:d7:5c:
16:b3:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:50 2024 by rpki-client on console-ams.rpki-client.org