Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6cZLrZT5QLATtpGh28X7kpEOKn8.cer
File: 6cZLrZT5QLATtpGh28X7kpEOKn8.cer (raw, json)
Hash identifier: dwlbbWfnuz6O8f71L51gekJmEDwg1a8oLzoeqwybsyQ=
Subject key identifier: E9:C6:4B:AD:94:F9:40:B0:13:B6:91:A1:DB:C5:FB:92:91:0E:2A:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A5CBC9A2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/9fbd08-d6cd-4738-8de4-5822f621e8c9/1/6cZLrZT5QLATtpGh28X7kpEOKn8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/9fbd08-d6cd-4738-8de4-5822f621e8c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:54:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.239.64.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662980827691 (0x9a5cbc9a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9c64bad94f940b013b691a1dbc5fb92910e2a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:2c:ee:ad:6b:a4:f9:fd:59:8d:d4:b7:d3:
b8:0d:82:a4:58:35:90:c4:69:2a:18:1e:b3:22:39:
4f:6f:f3:1d:c9:39:06:cd:dd:5b:85:d4:e3:03:ff:
30:e4:58:ed:2a:1b:02:f4:f2:88:57:8b:ff:8b:da:
27:11:4f:d1:9e:23:84:81:fd:21:2b:44:4f:ce:d0:
68:e6:e1:98:d5:0b:93:fe:dc:36:6c:b8:21:d0:66:
2f:e6:ea:90:36:73:43:f8:14:c0:37:0b:4c:fa:a7:
bb:19:eb:2f:1d:16:5a:1b:e2:29:47:57:e1:0c:a9:
5f:f5:29:cb:82:65:bd:2b:e3:c5:00:6e:85:12:83:
70:f5:83:6e:5a:75:6b:30:94:c1:2a:9c:c8:24:fb:
e2:7a:23:0e:9a:5e:85:f1:07:86:20:0a:59:ce:ed:
c3:d8:cf:1f:81:73:63:a3:48:64:10:f4:64:ee:18:
bc:c2:f0:38:02:3c:6b:04:89:26:4f:b4:98:24:41:
33:b9:ca:9a:ed:e0:35:b6:f8:24:e3:6b:09:62:67:
9b:53:b8:7b:77:19:f6:06:ca:66:93:19:a9:af:56:
3e:4d:04:e4:03:f8:a6:3f:4b:55:df:5d:e0:2c:89:
05:b2:a5:58:51:33:d5:f6:a0:66:37:bd:e1:d9:f3:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C6:4B:AD:94:F9:40:B0:13:B6:91:A1:DB:C5:FB:92:91:0E:2A:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9fbd08-d6cd-4738-8de4-5822f621e8c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9fbd08-d6cd-4738-8de4-5822f621e8c9/1/6cZLrZT5QLATtpGh28X7kpEOKn8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.64.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e2:b1:b0:6b:27:0e:c2:79:dd:fb:d4:d3:2c:6b:f0:e4:dd:
e9:ff:41:cb:25:1b:8c:c3:77:64:db:5a:05:2f:b2:56:ec:11:
9e:d6:3f:46:27:a0:67:db:6b:23:ce:61:10:20:21:a5:d1:4a:
54:f2:af:e7:a2:f7:9c:70:85:a1:b0:3a:61:c1:c5:cf:88:50:
30:9f:3d:c5:d3:d7:17:2c:dc:5d:26:46:da:7d:58:38:2d:28:
89:f3:3e:d9:ef:3f:0c:f7:a0:fe:6d:26:e5:d7:2c:63:8a:c8:
8a:50:0c:2e:26:ba:49:73:5a:1e:73:58:0e:07:77:af:28:e1:
0c:c1:9c:b7:79:b2:08:6e:8a:58:a8:88:43:d8:f3:5d:67:76:
bb:e2:54:8a:3a:8f:94:96:88:04:20:0f:f3:7b:8d:ec:8c:a1:
d2:7b:d8:1d:69:f8:84:c3:06:be:82:0b:0c:4d:9c:5d:a4:63:
4e:26:79:52:42:f3:5f:aa:75:56:e3:f3:92:3c:ae:04:82:22:
e0:1e:fd:09:18:ff:e8:52:02:fc:b3:06:45:8d:42:48:c1:09:
57:de:b2:64:c0:5f:8c:ee:85:04:ed:68:8f:4b:a6:7f:01:ba:
fd:cc:84:34:03:fd:c4:e4:2e:96:53:91:2a:58:19:28:18:c6:
99:aa:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:03 2024 by rpki-client on console-fra.rpki-client.org