Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5bMwAHOlU-nM_muen9kSb8W3_aU.cer
File: 5bMwAHOlU-nM_muen9kSb8W3_aU.cer (raw, json)
Hash identifier: GI61J8XqgmCGJp0xea2nh8Y0gSFlnPSQ66haZV9J+pg=
Subject key identifier: E5:B3:30:00:73:A5:53:E9:CC:FE:6B:9E:9F:D9:12:6F:C5:B7:FD:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 8047C0AF61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/39099f-d49d-4602-bdac-60e0c051c011/1/5bMwAHOlU-nM_muen9kSb8W3_aU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/39099f-d49d-4602-bdac-60e0c051c011/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 04:47:22 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 185.194.24.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550959624033 (0x8047c0af61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:47:22 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e5b3300073a553e9ccfe6b9e9fd9126fc5b7fda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8c:ee:c1:6c:75:84:f9:3f:23:5c:37:e6:55:
07:81:37:8a:77:fd:2c:40:18:10:7c:b0:0b:9e:82:
25:e6:e8:bf:86:c8:89:a6:1b:2c:57:19:c9:b8:d0:
bb:94:22:ec:aa:b9:13:5a:e2:38:8c:09:2f:22:18:
c2:91:75:4c:34:83:af:db:e3:85:72:a7:c3:9b:e5:
88:a2:ea:99:b0:3f:21:d7:d0:8c:e9:ee:08:36:89:
e7:e8:d9:21:63:b1:f4:96:e8:b2:4f:bc:55:f1:ff:
41:f7:8c:00:bd:fe:cc:a6:e1:6d:73:5e:76:b3:9c:
d0:24:3d:15:63:c2:0e:9f:36:10:19:23:2c:21:2a:
fc:27:b8:9e:00:18:31:ad:5c:73:dd:93:95:fb:fd:
93:93:53:7e:d6:08:a3:14:b2:41:4b:c7:8b:63:79:
fb:81:10:19:97:2b:8c:01:dc:6b:37:e8:98:17:9a:
51:ce:87:33:55:06:c1:c4:77:51:5e:40:a6:40:85:
12:71:e3:18:08:e8:7f:b6:14:2b:45:16:f8:b1:fa:
72:18:83:c1:aa:f7:7d:64:31:08:fd:3c:2e:e2:8b:
76:62:cd:78:2d:a4:78:96:4b:19:39:93:74:7b:ec:
d0:38:20:49:dd:6c:61:68:69:bf:be:de:24:f1:f3:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B3:30:00:73:A5:53:E9:CC:FE:6B:9E:9F:D9:12:6F:C5:B7:FD:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39099f-d49d-4602-bdac-60e0c051c011/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39099f-d49d-4602-bdac-60e0c051c011/1/5bMwAHOlU-nM_muen9kSb8W3_aU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:f2:df:51:3d:52:86:4f:d7:68:c7:53:97:ff:5e:c9:81:74:
29:ec:ca:59:63:2e:cb:b7:4b:31:c1:48:27:25:66:72:e9:5f:
15:a8:ef:c9:25:e6:40:06:11:8c:4d:d3:fc:2f:f5:01:e4:68:
96:a3:b0:0a:d8:11:3f:31:86:9d:8f:3e:ae:45:5a:c0:26:10:
84:1e:1e:4f:fc:69:c9:de:6f:f0:b8:bc:06:29:de:72:62:88:
f4:b6:16:85:be:ce:ef:a4:b4:aa:cb:b2:51:ec:3e:b6:82:d3:
d4:31:0c:67:3d:5b:c1:9d:1f:c2:aa:71:37:10:70:73:84:1d:
77:7e:4b:1f:7f:0f:a1:2d:b3:53:d7:13:5b:19:b5:c1:0b:62:
68:89:5c:4a:c8:6b:da:c4:cd:15:7e:b7:0c:21:7c:7b:51:3c:
37:8c:57:de:cd:85:87:74:c3:2b:36:c9:ef:b9:bf:df:4f:48:
27:59:72:d7:31:29:58:61:92:b3:f4:74:55:4d:25:58:2c:c6:
99:0f:d1:7d:cc:d4:10:77:e0:60:40:a7:20:16:80:bc:ee:8d:
d6:db:ad:c8:62:77:33:52:36:1d:45:7b:ef:73:d7:f6:18:cf:
80:c3:57:ad:ce:8a:c6:c7:55:f3:c1:55:a7:1a:40:11:ab:95:
b8:88:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:00 2023 by rpki-client on console-fra.rpki-client.org