Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6zSKS9YkCdyKnN7zPV80wzTAsVY.cer
File: 6zSKS9YkCdyKnN7zPV80wzTAsVY.cer (raw, json)
Hash identifier: VKw/xk62PB3lCIkS8b4ffB7XD8EXrN9AxNbN0Q7ckBg=
Subject key identifier: EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98BCF4F084
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/31
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:01:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.142.164.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656005197956 (0x98bcf4f084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb348a4bd62409dc8a9cdef33d5f34c334c0b156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:d1:3f:67:d4:3e:3e:5a:5d:7a:4c:23:62:
26:3e:a5:c2:1f:a3:0d:db:b5:d9:59:05:4f:ba:37:
77:47:56:7a:4c:ff:9c:3e:0b:76:e2:e9:70:97:90:
a7:97:22:f1:b7:9b:00:96:8f:bf:a9:2e:96:90:03:
f6:6c:fb:40:db:8b:23:dc:dc:0a:4f:54:c6:90:f4:
c5:de:f8:a1:da:c7:d5:28:25:de:43:75:f8:81:5a:
4b:95:ed:a9:e9:c3:f8:ab:39:61:71:3a:fd:e2:02:
d5:89:88:cd:f1:f9:82:1a:a1:03:19:d9:3d:95:21:
7b:f7:01:03:56:46:70:03:15:7d:a3:17:e0:db:a2:
40:5c:80:c5:5c:73:37:7d:9e:63:00:47:a0:ab:8d:
68:83:eb:ac:c0:0b:16:f1:9e:b0:0c:2e:26:09:5f:
60:ae:b6:6a:2e:34:89:34:f3:e6:4f:ab:fe:6e:a4:
3a:d0:1c:bf:fb:0a:92:ed:1a:c6:3a:e0:f6:1b:0e:
2b:6e:e6:b4:b4:d5:15:5f:b7:cb:86:d6:61:a0:b1:
d1:5f:2b:3e:58:c4:06:c2:eb:fe:b0:39:a3:83:e8:
e8:9d:a9:bf:fa:1e:20:ac:fa:8b:8e:6e:8b:46:a7:
9d:76:0c:19:f6:06:d8:bd:6a:3e:66:49:dc:1b:83:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/31
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.164.0/22
Signature Algorithm: sha256WithRSAEncryption
13:8f:4f:d3:c0:b7:55:7a:f1:1e:cb:2e:3e:13:33:92:6c:8d:
8e:3d:21:46:a0:4b:5a:2f:97:d1:1d:5d:4d:06:f4:50:f8:af:
c4:2b:df:43:08:83:4b:25:6c:a5:44:a8:ce:2f:ec:4e:49:7a:
52:da:cc:98:bf:91:cc:00:c2:98:29:e0:fa:8b:04:ef:3b:ca:
fd:89:35:b5:70:d4:e2:f7:1e:0a:36:ae:58:6d:e1:a8:ae:68:
04:70:4e:ca:86:ff:35:2a:40:e0:2c:30:e0:84:77:72:74:98:
59:23:25:c0:34:2b:09:d3:68:25:51:28:9b:e3:a2:30:09:36:
18:b4:88:85:50:27:07:9b:73:df:a7:de:68:01:59:07:bc:cd:
db:f2:5e:55:88:bc:cd:66:7b:99:f0:9c:50:4f:a9:53:89:b1:
e6:41:d7:fa:9c:8b:e2:2c:c4:7e:2f:8c:ad:87:eb:c3:20:cf:
11:17:65:59:16:57:a0:5e:dc:86:9e:53:a5:c8:d1:db:07:6f:
a1:e3:91:c4:dd:9f:a1:7a:98:cf:d3:96:9f:25:cf:d9:d4:a2:
91:40:4f:10:ea:7f:e4:c5:78:28:ee:ae:40:af:3e:8b:8d:b6:
94:94:d1:63:72:e6:46:9b:50:11:e3:25:34:f9:8d:98:53:55:
73:22:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:11 2024 by rpki-client on console-ams.rpki-client.org