Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65DfCvLx52gikJZvgCrDgdTxmWU.cer
File: 65DfCvLx52gikJZvgCrDgdTxmWU.cer (raw, json)
Hash identifier: 7HUGyS4pvM8+bFH0Hl4Eq4CPcpo2XWrKda73o0krnwQ=
Subject key identifier: EB:90:DF:0A:F2:F1:E7:68:22:90:96:6F:80:2A:C3:81:D4:F1:99:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9AA70A94C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/336e73-1ce2-4454-afb1-896d7f09665e/1/65DfCvLx52gikJZvgCrDgdTxmWU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/336e73-1ce2-4454-afb1-896d7f09665e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:57:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.212.195.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664227452101 (0x9aa70a94c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb90df0af2f1e7682290966f802ac381d4f19965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:a5:3b:3d:84:29:53:ea:7b:a3:99:5e:35:
c3:03:9d:3a:5d:ce:0b:e5:7b:d4:57:ae:46:88:87:
43:63:9f:d4:9e:cf:d5:ad:3f:c3:a3:16:bc:85:ec:
e3:ed:87:0a:cf:2a:b9:5a:2c:17:b3:a1:9e:0c:bf:
e4:5e:eb:ab:78:f7:e6:63:90:39:84:07:a8:3c:af:
68:94:16:4c:46:12:6c:ea:36:f6:57:1e:0e:94:d9:
d5:4c:3b:98:42:ab:24:5c:58:8a:11:16:51:f8:3c:
d1:b4:96:1b:88:ae:aa:ed:4c:e3:99:d9:9e:f9:18:
31:b7:9a:9f:11:66:02:87:3a:ec:dd:9a:67:20:0b:
87:53:db:ff:8a:0a:78:4d:07:7d:bc:b1:35:26:55:
91:bb:46:be:0d:9d:d3:0e:3d:39:5a:c8:4a:f3:35:
a1:db:72:b2:82:57:fa:0f:01:fc:2a:d6:5a:41:4b:
b8:60:64:d1:e7:ec:3a:5b:14:95:d2:36:d4:14:f0:
0c:9c:64:01:5c:a1:09:2d:c2:c3:8b:be:7f:73:31:
1e:ad:c0:96:67:95:9a:73:7a:4d:2a:79:e5:7c:07:
75:4b:15:ee:48:6c:96:48:6a:60:69:41:ae:13:8a:
8a:06:b8:75:62:4d:09:a9:20:e7:f0:31:2e:70:59:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:DF:0A:F2:F1:E7:68:22:90:96:6F:80:2A:C3:81:D4:F1:99:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/336e73-1ce2-4454-afb1-896d7f09665e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/336e73-1ce2-4454-afb1-896d7f09665e/1/65DfCvLx52gikJZvgCrDgdTxmWU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.195.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3b:36:10:fb:0f:b7:8e:b4:b2:50:6f:a9:74:3c:d8:4d:1a:
7d:cd:9b:75:64:5a:dd:3a:19:7d:40:b5:fc:c3:30:8d:ae:8e:
c1:75:95:47:fb:db:82:f2:4e:7d:7f:a5:8d:a1:f8:6e:71:b5:
c9:46:d3:51:09:3d:82:6c:70:a1:bf:89:93:ec:20:59:74:75:
8c:24:1c:e5:90:8b:17:3f:5e:29:56:0d:d6:57:08:e4:c3:5f:
3d:17:49:ec:99:42:3b:21:62:8a:f5:1e:79:da:32:ea:09:10:
de:e6:4a:13:f4:85:83:d9:97:dc:15:24:57:80:d9:9d:ea:b3:
7b:47:6a:b3:9b:75:46:83:1c:96:08:94:51:0c:54:11:de:3f:
48:c5:6e:b2:a6:a8:d2:d5:2e:87:35:d7:ee:c2:72:c0:c4:da:
d1:5f:44:22:a1:a6:9a:85:68:83:53:2f:c2:ca:cc:c2:71:cd:
f6:35:2e:52:7e:a2:22:60:35:8d:26:2d:b6:33:d7:f6:b1:e3:
70:b7:cd:67:2b:aa:64:24:5f:a9:d5:b0:69:cb:68:58:86:93:
c1:06:b7:f0:4c:c9:67:e4:49:92:b0:3b:ab:96:4f:eb:14:14:
88:21:13:5a:0a:8c:ff:db:20:60:20:42:bc:fd:24:1f:67:4b:
47:9f:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org