Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4GSPTgprb2czLeJHR81FQAc72kM.cer
File: 4GSPTgprb2czLeJHR81FQAc72kM.cer (raw, json)
Hash identifier: /LezO4OKiRsGm1ChxlmWHhIHohniwglTOAfJFm2pugE=
Subject key identifier: E0:64:8F:4E:0A:6B:6F:67:33:2D:E2:47:47:CD:45:40:07:3B:DA:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7E3A893BBB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/15c6c8-e7b2-4b9d-86f5-43ef7223e001/1/4GSPTgprb2czLeJHR81FQAc72kM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/15c6c8-e7b2-4b9d-86f5-43ef7223e001/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:46:10 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 91.199.90.0/24
IP: 91.199.102.0/24
IP: 91.199.108.0/24
IP: 91.199.123.0/24
IP: 2a0f:5d40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542147951547 (0x7e3a893bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:46:10 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e0648f4e0a6b6f67332de24747cd4540073bda43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:f7:b3:a4:83:8b:e1:da:11:ab:13:7c:74:
32:4a:2b:e3:87:48:69:fd:09:5f:01:6d:dc:db:30:
86:1a:b6:2c:51:a4:0d:36:80:b0:55:68:9e:ed:3d:
84:cb:65:5c:f5:19:b7:25:8d:60:8e:dd:70:15:f0:
20:83:e7:80:f7:62:ac:83:c1:1f:21:e9:ad:ec:c0:
70:f3:b5:ea:ea:28:d1:d9:27:3f:da:f9:6f:fc:e5:
ef:7a:00:11:90:bb:19:f9:bb:99:ca:a6:49:4b:d2:
ff:f0:90:f5:10:53:49:c3:0f:7d:c0:f7:ed:fd:f2:
a7:6f:b9:8d:14:bf:d0:dd:05:0c:be:00:14:36:74:
0e:53:fc:ea:65:4e:f7:58:de:bb:b2:00:e2:3d:f7:
9a:57:ef:d8:9f:af:20:7c:57:91:6e:ce:97:27:04:
d3:f7:a3:f9:8d:d8:cc:93:af:9e:6f:f9:7a:a0:66:
b8:7f:74:19:a8:b3:7c:8b:06:5b:3c:5d:f4:60:a5:
0d:4b:2b:d8:f8:ac:5d:3a:3b:20:78:8f:eb:30:ae:
50:25:d5:93:44:62:c8:2e:3e:af:1a:75:84:2a:17:
5e:43:7a:9e:f3:1b:27:8d:b7:04:54:f7:62:0c:f4:
2d:b6:b1:95:e3:6a:c8:7e:89:93:e6:b8:d9:2d:0f:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:8F:4E:0A:6B:6F:67:33:2D:E2:47:47:CD:45:40:07:3B:DA:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/15c6c8-e7b2-4b9d-86f5-43ef7223e001/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/15c6c8-e7b2-4b9d-86f5-43ef7223e001/1/4GSPTgprb2czLeJHR81FQAc72kM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.90.0/24
91.199.102.0/24
91.199.108.0/24
91.199.123.0/24
IPv6:
2a0f:5d40::/29
Signature Algorithm: sha256WithRSAEncryption
55:e7:ed:c4:9e:93:bb:4a:55:0b:56:85:73:fa:26:a0:f7:1b:
58:2c:e0:1d:3a:1f:a3:57:40:89:9d:fa:6e:c7:37:81:8c:19:
07:b8:f0:8e:b6:8b:b9:14:df:cb:16:53:00:b0:c0:f1:35:d7:
1b:a5:92:cb:19:d8:a6:70:11:03:60:6e:23:0d:7d:b5:e6:8a:
f9:37:dc:4c:54:52:31:ee:51:e2:e5:e2:24:9b:b4:87:38:8e:
55:10:e8:92:06:49:a6:98:42:d3:99:c0:2e:4b:e6:12:66:4c:
c6:df:5f:ce:55:16:ee:88:53:a7:5d:7a:34:cc:95:4c:e4:6e:
e9:00:b0:85:c4:18:84:1d:f9:f9:ad:58:79:bb:bb:11:3f:97:
65:d5:77:6c:23:3c:e4:b6:0d:41:90:29:f7:8e:a2:39:b8:57:
b6:10:bb:cf:ad:65:5a:fe:39:a5:26:a1:c2:67:56:7a:84:63:
7f:21:1b:db:1f:a9:ff:5b:10:13:b1:aa:d3:fb:c5:00:35:59:
87:a8:bc:6f:04:e7:1a:6d:b1:63:3a:35:d0:b9:8b:45:ec:58:
bb:67:fd:c7:22:b8:e4:5a:1b:05:11:98:52:05:8b:a0:8a:da:
55:0b:7a:41:8a:62:97:8f:77:76:47:b6:e9:28:b1:44:a7:f4:
aa:10:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:33 2023 by rpki-client on console-fra.rpki-client.org