Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Iq1t3wyIofN2m0y_lTAQ2ItXoY.cer
File: 5Iq1t3wyIofN2m0y_lTAQ2ItXoY.cer (raw, json)
Hash identifier: 5nocclf7gmkEAiNrMn7zadvrxcHmLbjaCc5IvmcKmk4=
Subject key identifier: E4:8A:B5:B7:7C:32:22:87:CD:DA:6D:32:FE:54:C0:43:62:2D:5E:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 75FF38808B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/4a563f-04f3-4529-b3d6-6e4d94030c6a/1/5Iq1t3wyIofN2m0y_lTAQ2ItXoY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/4a563f-04f3-4529-b3d6-6e4d94030c6a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:18:30 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 91.227.246.0/23
IP: 91.228.22.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506793066635 (0x75ff38808b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:30 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e48ab5b77c322287cdda6d32fe54c043622d5e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:8f:5e:d8:12:32:71:35:25:1f:8b:21:18:
4d:46:4d:a4:b8:d2:74:e8:5f:d0:f6:e7:13:5e:00:
8c:f7:ae:e0:2f:b5:d2:e4:93:59:b0:72:c3:07:22:
50:e9:17:3c:bb:19:8c:1d:0d:d8:a5:37:fc:c9:25:
a3:18:17:3a:f5:60:87:ca:72:b4:90:eb:e3:7c:a1:
bc:fc:96:29:2c:63:3c:5d:e2:d9:12:6e:74:5c:b5:
85:90:35:22:a4:2d:52:3e:0c:11:c7:92:a0:12:57:
95:1f:72:e3:c6:0a:5e:6e:e5:a4:42:52:55:bf:b7:
e9:c7:c5:95:0f:cb:98:2f:fb:ce:48:99:6a:b7:8d:
6f:6f:80:0a:92:89:06:1b:b3:af:64:58:c3:b5:e7:
94:f6:12:4f:90:d5:cc:83:a3:ab:75:69:4e:a5:e8:
53:ae:66:b6:26:9d:dc:17:0e:f9:c0:2b:94:19:2d:
d9:25:aa:22:79:36:b8:da:64:c9:89:4a:28:82:b0:
4d:fb:f8:b9:91:f1:e0:02:cf:4d:bc:6d:26:5b:e8:
89:d6:ac:da:72:16:c5:48:16:e2:87:07:c3:4a:e3:
a5:45:a3:e2:1f:07:51:e2:8a:4c:3d:3f:59:be:f1:
e6:4a:89:ba:31:42:0d:88:bb:dc:6c:b4:88:f7:31:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8A:B5:B7:7C:32:22:87:CD:DA:6D:32:FE:54:C0:43:62:2D:5E:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4a563f-04f3-4529-b3d6-6e4d94030c6a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4a563f-04f3-4529-b3d6-6e4d94030c6a/1/5Iq1t3wyIofN2m0y_lTAQ2ItXoY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.246.0/23
91.228.22.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:47:21:ee:98:55:c3:4a:85:35:0a:1d:16:b8:d5:e8:ef:59:
85:c5:ae:d4:97:93:fc:a3:ed:4b:69:e4:bd:4a:c0:ac:d3:6b:
b4:dd:b7:8d:6c:ad:1e:f2:6f:eb:67:c5:e7:9b:36:cf:f6:ed:
6f:e3:0c:5b:05:c5:0c:4e:b2:25:1e:ba:ad:c7:5f:e1:49:4f:
22:19:af:00:3e:b4:4b:14:01:fa:93:f7:62:9f:0e:e4:6a:66:
bd:a5:9e:b8:6e:6d:b8:f9:4e:63:00:2f:e4:b5:aa:0c:fc:b6:
07:e5:eb:73:10:2b:3a:91:24:65:fb:d7:9e:51:6f:00:3d:7c:
7d:e1:04:31:a6:86:da:ca:e1:52:ee:f7:b4:27:0a:c2:6a:f2:
cb:25:6c:f8:39:55:62:43:7b:6f:bc:70:41:60:74:eb:54:70:
fd:91:c2:ee:9b:e0:13:46:c0:7c:91:85:8e:bf:57:ab:d6:ae:
63:34:b8:ab:95:08:35:eb:fb:8f:e5:1a:19:9a:c3:a6:9f:6b:
a2:59:e9:36:61:11:45:a4:23:24:46:58:8e:e5:a3:68:35:33:
70:f7:2a:83:88:3c:45:f8:57:4b:31:d2:30:ba:a7:7d:6a:94:
00:c6:ce:28:23:a7:b9:50:5a:77:0a:b4:34:21:d0:f5:c8:6b:
df:53:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:34 2023 by rpki-client on console-ams.rpki-client.org