Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6bCXy_xV2KVO3N70tE2ABx0HdfA.cer
File: 6bCXy_xV2KVO3N70tE2ABx0HdfA.cer (raw, json)
Hash identifier: wQD3P10HpJO6HQGuN9/V8/7pfkP66wiyOQRlpWVBrCI=
Subject key identifier: E9:B0:97:CB:FC:55:D8:A5:4E:DC:DE:F4:B4:4D:80:07:1D:07:75:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0181F7921A88354E034CEADB95BAF94DB1EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/1ff86e-6704-4374-ad69-772f11b365fb/1/6bCXy_xV2KVO3N70tE2ABx0HdfA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/1ff86e-6704-4374-ad69-772f11b365fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 13 Jul 2022 12:39:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 5.253.56.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:92:1a:88:35:4e:03:4c:ea:db:95:ba:f9:4d:b1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 13 12:39:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9b097cbfc55d8a54edcdef4b44d80071d0775f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:75:ec:db:dc:ca:d6:05:aa:7f:ae:12:51:
97:e3:f2:57:32:4f:22:e0:e5:8c:67:7b:8e:08:63:
42:aa:bf:f8:2a:e3:6f:a8:87:95:7e:c3:64:25:90:
c9:c8:68:1f:2c:04:34:de:42:28:e6:aa:27:b9:59:
17:5e:80:b6:35:83:42:26:16:40:17:83:55:16:e0:
29:95:ba:44:43:df:e3:87:0a:e2:99:5d:d4:c8:77:
20:bd:30:37:0a:6c:99:14:d1:56:82:bc:f1:59:3a:
15:bf:e2:f1:a7:4f:bc:17:16:ff:70:e8:a5:c4:6c:
aa:0e:7a:15:fc:47:fc:96:d5:f8:2e:1f:b4:c3:bc:
72:58:60:d8:dc:04:92:1f:fa:0e:13:9b:c2:c6:6b:
dd:bc:95:b6:8a:bb:90:37:a1:a3:80:ec:d1:0a:03:
d4:00:a7:1a:dd:bf:3b:22:07:b8:95:2f:1c:5c:f4:
3f:77:26:ff:7e:3f:03:4d:08:24:5e:2e:88:1c:76:
dd:13:eb:b7:eb:f2:c9:fa:b7:8b:bb:55:47:18:7a:
cc:cd:f3:16:8f:dc:3a:9a:1a:59:18:a6:e5:79:b1:
53:82:49:b9:95:49:63:7b:dc:92:07:8f:1e:42:84:
85:f3:18:ac:42:f0:c3:8f:01:bc:5e:3c:e0:0a:4d:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B0:97:CB:FC:55:D8:A5:4E:DC:DE:F4:B4:4D:80:07:1D:07:75:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1ff86e-6704-4374-ad69-772f11b365fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1ff86e-6704-4374-ad69-772f11b365fb/1/6bCXy_xV2KVO3N70tE2ABx0HdfA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:12:8d:79:61:ce:aa:e4:19:0e:06:99:4d:cd:0e:6a:c0:e1:
4e:f2:85:b0:3b:63:ed:81:dd:25:ae:81:2f:53:08:63:5d:1f:
36:3b:c5:ae:9c:c0:d6:5e:47:e7:61:68:9b:13:85:e5:ed:b7:
f5:df:2e:00:b3:5c:53:08:30:3b:07:cf:1e:96:fe:22:93:93:
74:2c:28:c8:06:43:fe:33:36:bc:88:f6:6f:81:0e:dc:ab:71:
a6:2d:91:d2:8a:a8:ec:88:1a:c9:6b:ca:fe:e0:b7:e4:78:9c:
8e:66:ad:f9:18:2a:a1:04:0c:e9:8d:d0:3f:64:af:dd:3c:09:
22:96:06:08:15:c0:ba:b1:93:3c:66:c0:c3:db:a5:9f:22:1d:
8b:e8:f5:19:8e:aa:e9:c6:a2:c4:17:b4:e9:c9:b2:de:90:5c:
35:89:3b:5a:c8:f9:7f:68:9c:6c:0b:d7:ac:55:7e:5f:1e:29:
2e:f2:9c:01:84:c2:e8:f8:04:8e:11:94:38:28:9c:ee:af:4b:
77:b5:02:b3:13:a8:8e:0d:6a:0f:29:46:14:47:70:64:13:eb:
80:e6:33:15:2c:a9:a5:54:e7:2c:cc:cf:cf:a5:b9:12:ef:5f:
6b:cf:58:b8:ad:52:ad:10:ef:c6:aa:1c:96:48:e1:fe:87:90:
e7:10:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:26 2024 by rpki-client on console-ams.rpki-client.org