Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
File: 6s663cAhDsbySQXR-c68s-DAEsg.cer (raw, json)
Hash identifier: QL4ZP1Po0FTjThU1DE345T5mwsffdg/FYFntYeDnaQA=
Subject key identifier: EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CE4DECBAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/6s663cAhDsbySQXR-c68s-DAEsg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:56:12 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.85.201.0/24
IP: 195.85.205.0/24
IP: 195.85.207.0/24
IP: 195.85.216.0/24
IP: 2a07:af80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673854704556 (0x9ce4decbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:56:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:eb:3d:3b:2b:4f:76:e5:8d:6d:eb:40:29:
27:99:35:21:ae:f7:32:7a:45:28:0c:f6:83:d4:fa:
0d:8d:f5:79:9e:fe:d8:ad:f9:2e:f6:f6:02:09:a4:
29:24:95:70:9a:e5:68:0f:8d:79:e1:aa:db:23:9a:
fe:85:5e:86:aa:e0:60:21:24:50:c7:e8:a1:89:cb:
5e:71:a8:d1:de:08:6b:7a:ef:61:1a:38:48:54:a2:
15:5b:1f:5a:0d:39:2b:72:6c:5d:a3:0c:f3:c2:4e:
a0:76:ba:0f:ff:5e:94:9c:fa:d2:6f:a5:83:67:76:
37:09:ab:b6:fa:50:c4:70:47:d2:1f:bd:07:20:18:
ae:3d:c8:e2:44:6e:d1:f3:86:9f:4a:71:82:3d:59:
e8:0a:61:0c:3e:f8:be:d8:d0:26:4d:87:39:81:90:
fa:26:97:b3:68:9d:90:22:30:33:e9:4b:99:55:76:
62:88:1f:69:a6:c7:78:66:c3:2c:8f:d9:e1:90:93:
76:bf:12:79:ad:96:54:88:60:95:d9:d6:de:54:33:
35:06:e4:a9:58:5a:a4:db:a9:ae:cf:2a:2e:99:28:
48:19:a2:58:87:b4:9b:79:ef:67:b3:4a:27:b9:c1:
4e:cb:f1:10:d5:04:88:b6:96:ae:b8:91:e4:70:78:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/6s663cAhDsbySQXR-c68s-DAEsg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.201.0/24
195.85.205.0/24
195.85.207.0/24
195.85.216.0/24
IPv6:
2a07:af80::/29
Signature Algorithm: sha256WithRSAEncryption
43:24:bb:c1:0e:be:4d:76:da:52:88:a1:29:c3:6b:b2:fc:a4:
ab:7b:4b:ec:3d:4f:14:e1:74:0a:b6:7f:e0:e0:2f:40:73:3c:
27:a5:52:67:34:80:60:45:85:84:dd:10:60:bf:1e:4d:0c:79:
3f:08:3a:37:67:eb:99:06:24:e3:d3:98:c1:a4:4b:37:46:57:
9b:e8:d9:ed:31:93:e6:a0:44:0f:d3:66:07:fe:1a:51:94:0f:
e2:b6:ba:95:44:8e:4f:cd:43:91:1a:5c:e9:68:bb:e3:03:ba:
f4:35:01:88:ff:0c:1e:1c:05:ac:0a:ce:f1:76:68:b1:c8:2b:
98:6b:4a:ab:ad:91:24:cc:47:8e:d6:df:9c:f2:07:07:23:91:
4e:b0:d5:f5:c1:f2:ee:56:e9:96:79:60:ef:d5:ce:de:8c:fe:
f8:ba:10:19:d9:cb:ea:e0:31:a9:d4:bb:32:ce:0f:09:09:b8:
05:8e:9d:ad:3e:89:b5:4f:cf:78:79:08:85:58:1c:b9:1f:0c:
6c:75:12:fa:7a:0f:d4:04:40:f7:7a:e4:3b:ef:42:87:08:a3:
79:bd:0c:db:48:dd:ab:27:53:a1:37:8f:83:fd:23:28:8d:4a:
25:a4:10:a2:a1:3d:95:18:0e:ee:e8:13:97:f4:23:71:65:71:
db:00:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:09 2024 by rpki-client on console-ams.rpki-client.org