Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4BPnhTjMxZ0cWNigx-BQhTkWxeg.cer
File: 4BPnhTjMxZ0cWNigx-BQhTkWxeg.cer (raw, json)
Hash identifier: wxr9AM8slyirpgeBB1ke+7YvJQ8LvdcZPHpdwk2KF0A=
Subject key identifier: E0:13:E7:85:38:CC:C5:9D:1C:58:D8:A0:C7:E0:50:85:39:16:C5:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A69CFC0C79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/4BPnhTjMxZ0cWNigx-BQhTkWxeg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:04:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.219.123.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715598335097 (0xa69cfc0c79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e013e78538ccc59d1c58d8a0c7e050853916c5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:bf:65:e1:fa:4d:50:f9:d7:3c:2b:e0:ff:
06:47:89:b8:1d:3a:b7:52:c4:f0:25:d9:f7:73:cb:
ed:89:80:72:81:2e:5e:6e:0a:9c:b1:3e:54:e8:a0:
f7:c9:35:ff:e8:cd:af:f0:da:de:f8:b9:fe:96:2d:
4e:81:a7:83:f9:24:00:a9:1c:22:5e:86:87:43:58:
86:91:3b:07:66:b5:a4:cf:0a:9a:ba:66:7d:42:d3:
cd:e5:5d:d9:a0:20:48:8d:20:47:be:a3:78:df:77:
a7:a8:76:c7:63:de:1b:ea:1b:ca:94:35:23:48:48:
93:c0:51:bf:8e:a4:85:2b:60:9d:ed:b7:df:ee:b1:
6a:65:de:aa:82:d0:6b:c8:20:50:4a:50:11:6d:0e:
f3:d1:ae:14:fc:8e:e0:d6:0f:9c:83:9d:56:b3:50:
e7:7a:f2:20:78:63:88:4b:91:f2:04:42:28:db:6c:
0a:6c:13:d9:4e:38:c3:5e:d3:6f:86:8a:64:e4:92:
77:95:e2:4b:05:ae:5b:87:56:98:b3:a8:2c:29:25:
6b:e4:86:83:5c:dd:42:f4:da:3d:23:12:24:59:74:
fa:e6:b6:5b:4d:5a:3e:36:99:70:aa:73:6c:14:63:
b5:a6:70:83:44:03:63:e7:12:d5:9a:45:95:63:5b:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:E7:85:38:CC:C5:9D:1C:58:D8:A0:C7:E0:50:85:39:16:C5:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/4BPnhTjMxZ0cWNigx-BQhTkWxeg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.123.0/24
Signature Algorithm: sha256WithRSAEncryption
90:38:dc:e5:53:f9:e7:c6:b6:a2:97:9a:89:1a:1d:fe:60:95:
25:39:15:19:21:b4:f6:90:d6:c8:3e:c0:8b:6d:18:9b:d2:dd:
72:aa:69:08:f9:3c:c0:3e:00:99:7a:d5:27:fe:a2:c1:64:a6:
9c:44:17:ad:a5:ff:67:c4:7c:4c:1b:a6:24:b7:45:5a:90:c0:
20:39:f7:14:98:d7:b2:5e:66:b5:7c:af:fb:d6:43:72:a4:fe:
f0:a0:aa:c5:f6:59:b9:55:3d:4c:92:af:d4:74:92:09:09:0d:
12:cb:0c:35:88:67:c1:71:4c:f9:c4:11:01:68:4f:da:41:0b:
e5:37:ad:be:bc:8f:d0:74:b9:b8:f9:2c:33:96:c2:d2:af:18:
c4:73:35:b3:bd:a9:8d:65:bd:5d:84:bc:db:30:55:69:e6:d7:
81:56:2d:19:99:00:d4:d6:b4:96:fc:6c:2e:a2:6d:27:27:49:
ef:b3:14:da:0b:88:fb:4d:1b:83:f8:51:93:fa:0c:06:db:b0:
30:27:38:33:41:35:59:8a:d7:8f:66:9e:66:57:ae:31:8b:62:
6a:47:34:9c:dc:76:b7:cd:86:4d:cd:0c:cb:ab:2f:82:0a:e1:
7d:79:dd:22:b5:5e:27:f1:46:e4:5f:dd:55:f5:3d:00:42:81:
9e:26:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:33 2023 by rpki-client on console-fra.rpki-client.org