Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b8JeQWZa3NhaxaTH20r-6G03Dc.cer
File: 5b8JeQWZa3NhaxaTH20r-6G03Dc.cer (raw, json)
Hash identifier: Ue38XZXEn9l5uZR0VIkAHqp4hdBwFxaX8orw6T5/GhU=
Subject key identifier: E5:BF:09:79:05:99:6B:73:61:6B:16:93:1F:6D:2B:FB:A1:B4:DC:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7F5E00933E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/c769dd-707f-4457-96d3-36517d2fa784/1/5b8JeQWZa3NhaxaTH20r-6G03Dc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/c769dd-707f-4457-96d3-36517d2fa784/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 04:16:48 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 91.238.217.0/24
IP: 91.239.15.0/24
IP: 91.239.24.0/24
IP: 91.239.37.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547037942590 (0x7f5e00933e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:16:48 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e5bf097905996b73616b16931f6d2bfba1b4dc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:8d:61:70:2b:43:58:63:67:fa:02:ab:a1:
7e:36:e5:ea:9b:40:dc:37:ff:a8:e0:66:a8:bc:38:
38:03:26:72:ca:01:30:2e:2b:dd:89:44:b1:2b:1f:
73:98:99:6e:1b:4e:32:e0:32:a3:c8:e1:f7:75:15:
8b:0f:d0:06:c6:a3:16:96:c8:ba:6c:95:cd:91:5e:
96:2f:f4:ce:d5:a9:d5:c6:5d:e6:6e:88:f8:5d:0f:
1a:fc:7f:bb:59:52:51:69:a9:54:72:66:34:09:b3:
d0:97:7d:2e:b5:96:73:dd:4f:fa:50:1f:c4:ec:dd:
e1:41:43:06:38:d4:e0:d4:fe:a0:e5:c5:6e:94:08:
87:2a:b6:49:a6:70:e7:68:08:0b:ce:ee:62:ef:a6:
b8:4b:cb:67:f6:85:e4:14:50:33:85:24:1c:3a:53:
a6:d9:fb:9d:44:e1:62:62:ed:dc:ca:e8:77:86:ee:
e8:4a:02:52:7f:d7:f9:cd:34:ec:12:c2:b2:44:2f:
02:22:d8:8c:ae:7e:a3:0c:85:3e:95:ec:31:02:be:
90:2e:fa:1c:f8:d6:88:9b:f9:2f:5b:95:02:92:0c:
c4:f3:7e:b9:f7:22:32:d6:d5:d6:94:d9:74:21:0d:
2d:ae:ed:cf:8f:25:5a:20:38:eb:c5:33:2f:db:e3:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BF:09:79:05:99:6B:73:61:6B:16:93:1F:6D:2B:FB:A1:B4:DC:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c769dd-707f-4457-96d3-36517d2fa784/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c769dd-707f-4457-96d3-36517d2fa784/1/5b8JeQWZa3NhaxaTH20r-6G03Dc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.217.0/24
91.239.15.0/24
91.239.24.0/24
91.239.37.0/24
Signature Algorithm: sha256WithRSAEncryption
20:87:20:5c:4c:5b:1f:d1:40:a5:2c:18:30:f3:6f:a8:3c:d1:
25:b5:cc:ae:40:34:04:7f:a4:3c:40:57:0d:7d:05:fb:cd:15:
53:cb:4c:79:27:fd:d1:1f:4e:09:5c:84:2b:d3:13:b7:33:eb:
46:de:7a:cb:da:be:20:40:f3:ca:cb:a1:b5:f8:be:80:4a:c0:
da:99:c5:3b:38:8e:96:e8:78:ca:a1:64:ef:ff:79:ac:76:9b:
4b:bb:8f:08:d2:67:06:a6:a0:16:36:e2:87:00:3a:cc:5b:5b:
28:2e:e7:4a:fb:2f:3e:28:1b:56:5c:c8:45:a2:3e:76:47:cf:
66:af:1f:82:23:ec:ab:9d:46:4d:96:7b:3d:1d:6f:b7:3b:fd:
04:0f:1a:ef:41:4a:d9:ca:60:06:fa:94:1a:0d:c6:3d:f2:aa:
29:43:f7:62:b1:88:a2:f2:4b:f2:18:2c:41:89:92:f4:96:3a:
ef:68:3a:b7:e9:4a:5d:7f:4c:50:7b:d1:b4:59:40:66:5c:81:
90:e8:8a:bf:ce:ff:c6:23:71:7b:f8:1b:96:76:05:41:4f:64:
5a:94:9f:7d:b6:8c:0d:e0:14:21:a1:44:f5:02:18:26:56:d3:
e0:b5:60:62:24:a8:30:9f:36:20:ad:2e:c4:75:8d:08:6c:e7:
91:bf:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:42 2023 by rpki-client on console-ams.rpki-client.org