Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5bJesPaHJMHR2hp4inlgBa0ML8Y.cer
File: 5bJesPaHJMHR2hp4inlgBa0ML8Y.cer (raw, json)
Hash identifier: CACBhcLjk6PJ42wzxXLz9hVfLdi0BEVusL8xKC+EqCc=
Subject key identifier: E5:B2:5E:B0:F6:87:24:C1:D1:DA:1A:78:8A:79:60:05:AD:0C:2F:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 603C756A3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/759cdb-ae1a-4c81-b6d6-7f3ee93e7fef/1/5bJesPaHJMHR2hp4inlgBa0ML8Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/759cdb-ae1a-4c81-b6d6-7f3ee93e7fef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 15:18:12 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 212.115.60.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413331188285 (0x603c756a3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:18:12 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=e5b25eb0f68724c1d1da1a788a796005ad0c2fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:d5:22:da:d8:6e:5e:20:07:4a:94:af:3a:
28:80:96:b6:68:51:d6:87:9c:79:56:6b:f6:ad:6e:
d9:08:61:10:b4:7f:97:13:91:99:4a:43:85:02:2e:
00:b3:d4:3f:06:ba:21:8f:47:08:fe:07:3a:e0:2f:
cc:53:1e:c5:ea:6e:ea:4f:5f:e1:45:ef:3e:07:0e:
25:66:18:51:96:17:41:06:ae:9a:62:3b:f0:b9:54:
76:d4:38:66:90:35:21:80:22:1d:9e:0b:06:a5:73:
ca:9a:61:62:cd:62:fc:82:e6:aa:e4:6a:2e:a9:cf:
b7:73:e0:2b:8e:55:38:ac:1e:5f:66:44:25:92:8a:
42:bf:4b:6b:4b:fe:d9:e8:d4:ee:0b:6f:2a:42:e2:
32:79:73:37:77:a6:3f:ce:14:f8:63:dc:d4:97:eb:
20:b9:7a:f4:42:c0:82:ad:9b:7f:9b:e7:01:49:62:
d0:ba:be:8b:bb:4b:4b:fb:e1:8f:87:12:dc:40:28:
47:ca:44:91:69:59:39:19:7d:01:2d:e7:14:86:a2:
9b:68:89:45:d2:f1:f1:fb:64:9a:dc:9c:a5:6a:fd:
a1:52:a6:4f:d3:8e:91:67:1f:62:0d:c9:8e:ac:a6:
02:d2:15:bc:45:7e:3a:7d:0d:23:26:30:9d:59:f8:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:5E:B0:F6:87:24:C1:D1:DA:1A:78:8A:79:60:05:AD:0C:2F:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/759cdb-ae1a-4c81-b6d6-7f3ee93e7fef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/759cdb-ae1a-4c81-b6d6-7f3ee93e7fef/1/5bJesPaHJMHR2hp4inlgBa0ML8Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f9:d7:f2:b7:45:80:10:76:86:b6:df:e7:4d:d9:9d:6f:69:
f7:24:7f:3f:3e:c8:8f:55:6d:8c:3d:f6:df:58:e4:8e:3d:66:
f5:60:d0:35:8f:c9:3c:fa:f8:f7:b9:8f:f5:72:50:eb:99:5b:
87:fb:a1:b5:0b:6c:4e:b9:35:31:80:d4:c9:27:d5:fb:2a:5e:
58:aa:f7:7d:ac:d5:3f:a2:5e:a3:02:7e:d4:bf:a9:ff:c8:3f:
a6:7a:85:ff:ed:a9:cd:d2:fe:05:45:55:9d:5a:3d:57:37:b0:
bd:4c:1d:b1:11:bd:91:35:bf:a9:12:69:34:8e:d1:82:b9:0a:
fa:ee:ed:6b:a6:62:4b:b0:11:c3:dd:19:29:4e:cb:78:45:f3:
e7:d0:0c:0e:05:07:70:19:c8:57:5f:0f:00:ec:16:ce:18:ce:
69:d4:64:44:f0:bf:9f:19:dd:bf:6e:2a:9c:88:6c:c3:89:c8:
11:38:af:af:04:a9:71:86:0d:c7:e5:41:c8:66:83:60:7b:6a:
d3:d9:ce:f4:05:3e:20:ce:75:b8:65:fe:5d:e0:0b:11:1b:1c:
34:b0:21:a4:09:f9:28:ef:b1:af:90:f9:e8:fd:3e:bc:63:5d:
f1:33:c2:64:74:8e:d3:cf:25:9b:b2:45:f5:bb:a0:44:46:0b:
38:ff:4c:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:00 2023 by rpki-client on console-fra.rpki-client.org