Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/607o3ByDYcnmVKL48vTLQA8t2Ww.cer
File: 607o3ByDYcnmVKL48vTLQA8t2Ww.cer (raw, json)
Hash identifier: FXRXfMtYZ9sbkWdeY3Q9Gz+I7HFhxBmIQ0/YV0yQc5A=
Subject key identifier: EB:4E:E8:DC:1C:83:61:C9:E6:54:A2:F8:F2:F4:CB:40:0F:2D:D9:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 8197C32320
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/07e772-b7bb-4dc5-bd59-0d31183cc6af/1/607o3ByDYcnmVKL48vTLQA8t2Ww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/07e772-b7bb-4dc5-bd59-0d31183cc6af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 05:35:03 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 5.181.156.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556596929312 (0x8197c32320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:35:03 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=eb4ee8dc1c8361c9e654a2f8f2f4cb400f2dd96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:42:5d:f0:5f:f3:04:69:57:58:d7:a7:ec:
73:cd:2a:8b:50:73:4e:3f:e6:22:a4:33:80:4e:58:
85:7a:12:5b:3c:6d:cc:dd:c4:f4:41:77:34:c0:67:
d0:f2:cf:46:28:73:02:74:b1:01:24:74:d2:5d:00:
1c:ce:ec:ad:e3:04:45:b7:4e:18:dc:08:cd:cf:67:
e1:c1:5e:1c:82:e4:33:71:10:58:b1:c3:94:3b:ee:
57:1a:d0:26:a0:3e:09:a6:79:f8:5e:cd:e7:39:58:
a2:a5:9f:ea:af:60:fc:a0:ea:49:71:16:02:fa:f9:
de:a2:5f:96:29:5d:39:c0:15:47:c4:53:39:87:29:
0c:95:f2:66:9b:ed:63:cd:2a:4e:ea:3b:af:32:e9:
7b:7b:1f:74:89:72:5b:9a:f8:ec:33:41:13:04:5d:
69:57:37:ef:d6:93:58:2a:4b:85:c8:cb:85:54:eb:
9a:fe:04:ec:43:2d:0b:3e:32:3d:f4:71:d1:c2:8a:
5d:f1:91:2f:2a:4a:ff:93:f2:79:b8:50:46:2a:33:
20:dc:0a:83:b8:fc:99:f3:15:69:ae:ad:01:9f:e0:
00:f7:75:cc:3d:90:bd:11:fc:6c:c4:81:b9:20:d4:
fc:68:83:32:d9:64:91:ec:b6:6b:ad:fb:db:b2:b0:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4E:E8:DC:1C:83:61:C9:E6:54:A2:F8:F2:F4:CB:40:0F:2D:D9:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/07e772-b7bb-4dc5-bd59-0d31183cc6af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/07e772-b7bb-4dc5-bd59-0d31183cc6af/1/607o3ByDYcnmVKL48vTLQA8t2Ww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:e8:d6:d7:6b:9c:78:75:b1:27:b2:f9:10:5f:da:88:ff:04:
12:95:c2:e1:db:5b:e8:fb:d6:7d:97:92:7e:6c:04:3a:df:c1:
97:bc:f1:1c:e5:2c:48:cb:4e:da:fe:dd:18:3b:ce:e7:ff:9a:
21:f0:c7:63:7f:b2:33:ab:b8:be:1e:a4:b5:b7:43:69:3a:a8:
34:13:04:df:72:58:cf:10:62:3a:44:ab:af:85:2d:01:ce:94:
8f:5e:be:94:02:bc:97:c6:43:c2:cf:6a:8c:b3:f5:ed:50:ea:
47:60:20:d4:e0:31:ac:b1:e7:34:77:6c:d7:57:52:9d:7b:94:
ed:ac:41:93:9d:c5:a2:86:88:a1:68:9b:ff:38:22:81:5e:e1:
88:5e:88:d0:de:fa:92:d5:be:29:c3:f6:4f:d4:fe:d4:77:c5:
57:95:ee:58:dc:1c:ca:ed:29:a8:cf:f7:02:6d:ec:c1:20:ce:
d2:34:e1:aa:ae:e9:2f:c4:91:9c:64:01:4d:c1:fd:55:d5:ff:
7c:0b:fb:46:c1:d9:2a:4a:66:db:a5:1f:fa:09:10:1a:03:2c:
40:95:ee:b9:8b:51:c0:b9:da:db:d8:a9:2b:51:13:c3:b9:0b:
c9:a3:02:5a:23:66:cb:fe:cf:b4:a9:9c:85:ae:b3:5e:e4:be:
03:b9:1e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org