Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6cHQUMkQNoMul2otVm2mlzhFgMg.cer
File: 6cHQUMkQNoMul2otVm2mlzhFgMg.cer (raw, json)
Hash identifier: Xu+GmOurT5E7Ci2CuvzLLoxvmkXbsYcEO4ZsA8UmrEw=
Subject key identifier: E9:C1:D0:50:C9:10:36:83:2E:97:6A:2D:56:6D:A6:97:38:45:80:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7C7E79F2F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/567ba0-d13c-453a-ab3e-0036bc1a6aa7/1/6cHQUMkQNoMul2otVm2mlzhFgMg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/567ba0-d13c-453a-ab3e-0036bc1a6aa7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:03:41 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 185.165.52.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534697865969 (0x7c7e79f2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:03:41 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e9c1d050c91036832e976a2d566da697384580c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:9b:91:a2:ea:d4:8d:8f:d0:e7:0a:5f:72:
f2:bb:ce:59:66:d9:b6:96:bd:b4:94:f6:21:ed:31:
ea:53:aa:34:19:fb:97:dd:70:0d:52:2f:75:58:c3:
b7:6b:6b:1e:96:15:92:aa:7c:59:32:8b:47:56:47:
0d:f0:d1:de:e7:ca:2b:db:35:ee:ba:8c:1c:fb:9f:
4f:9a:84:24:00:ec:68:d2:8c:c8:34:51:3d:32:54:
36:24:3e:ee:4b:0b:54:0d:58:eb:c9:b3:55:3f:9a:
2a:13:eb:8e:23:2d:0c:1d:92:69:03:bb:b2:42:0e:
88:6e:84:b1:e8:e7:ab:bc:ea:74:7f:c6:45:32:6f:
a4:28:c0:4e:3f:16:ef:be:00:19:71:2a:97:47:c8:
6f:0c:e4:ed:cc:41:b1:4a:1c:4e:18:d1:b3:c8:48:
10:cb:83:64:4a:fd:de:fb:af:5e:0d:70:05:ea:0f:
5b:5d:ab:73:a5:8f:00:a8:cc:c8:ae:85:b3:ce:bd:
b2:e6:7b:ff:02:25:fd:71:d8:ac:e6:fe:84:02:36:
a5:7a:3c:31:50:04:54:e3:c4:cb:89:d6:04:e2:32:
43:e9:8d:d6:3a:86:9f:45:11:64:39:a6:ff:e7:8a:
75:e1:ce:e1:9a:3c:f6:83:5e:51:98:96:e1:e3:9f:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C1:D0:50:C9:10:36:83:2E:97:6A:2D:56:6D:A6:97:38:45:80:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/567ba0-d13c-453a-ab3e-0036bc1a6aa7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/567ba0-d13c-453a-ab3e-0036bc1a6aa7/1/6cHQUMkQNoMul2otVm2mlzhFgMg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.52.0/22
Signature Algorithm: sha256WithRSAEncryption
22:ba:a9:93:52:32:03:d3:1c:62:c7:98:ed:01:7f:f7:70:de:
1a:01:af:c5:d3:94:67:bb:5a:73:22:f5:5f:bc:b7:eb:5f:b5:
9d:28:80:b6:fc:e9:47:0d:d2:11:6c:d6:a2:49:e9:40:53:5b:
58:e0:c1:0c:51:e1:b1:03:61:7b:44:df:2e:07:13:39:ce:65:
03:91:28:2d:b6:6b:47:48:b1:89:49:d6:80:82:52:b9:01:23:
bb:7d:33:87:45:57:dc:5e:46:fc:b5:c9:97:a0:65:b3:7c:5b:
48:76:dd:7b:c3:3a:2f:3e:53:78:07:69:33:7c:32:86:8e:fe:
b3:a0:eb:ca:58:19:6a:9b:e3:e2:d9:2b:df:ed:d3:1f:86:dc:
be:a7:16:6f:1f:d6:63:5b:05:db:5c:99:3d:4a:67:86:80:81:
30:63:e2:b0:9d:b9:fd:7d:3d:2e:48:5d:6e:df:f3:36:39:18:
4d:48:f1:40:c1:d8:08:c8:9a:71:27:ad:e1:d9:10:78:1d:3e:
1f:ad:1d:f3:8a:77:d9:03:2f:17:b2:ee:d1:c7:2d:2d:d6:55:
3c:51:3f:19:8d:5f:14:5a:e5:05:f9:25:ac:42:bf:14:4a:31:
53:ff:8f:0f:46:bb:0c:ac:54:91:b6:d7:71:b8:28:39:cf:23:
d6:2f:88:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:15 2023 by rpki-client on console-ams.rpki-client.org