Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Ef-zOCWGrDR-FcylqInQhesONI.cer
File: 7Ef-zOCWGrDR-FcylqInQhesONI.cer (raw, json)
Hash identifier: JzNnUHa01xSfCA+36NYgTLj1JHWHLXzJdC7uzkuhYjs=
Subject key identifier: EC:47:FE:CC:E0:96:1A:B0:D1:F8:57:32:96:A2:27:42:17:AC:38:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A125D0B741
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/7Ef-zOCWGrDR-FcylqInQhesONI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:53:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.149.8.0/22
IP: 185.242.64.0/22
IP: 2a0c:c080::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692124170049 (0xa125d0b741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec47fecce0961ab0d1f8573296a2274217ac38d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:32:97:89:ac:21:bc:0d:79:ee:26:99:68:
57:14:cb:48:7b:04:65:1c:2d:8d:48:55:45:91:b8:
35:ed:70:46:89:8a:70:6e:74:7b:0f:98:88:cf:eb:
19:b9:64:8b:57:b1:a3:5f:b8:ef:13:61:33:5f:5e:
4f:62:79:7e:7c:e7:62:5b:fb:c9:20:e5:97:0c:0f:
48:75:ae:c9:0d:d1:1b:35:d3:fc:fc:b5:36:58:72:
f7:26:e6:fe:38:d0:68:79:17:f0:5f:54:b0:72:22:
c3:7a:ca:44:87:39:b0:e9:33:28:9d:cf:a7:64:fa:
12:02:56:30:80:a4:b5:ad:54:d8:91:2e:8d:4f:97:
dd:30:fd:90:ef:46:26:8f:ae:89:a2:a6:02:8d:8b:
46:f9:63:01:41:51:82:fc:8c:df:40:5e:01:ad:2c:
64:f3:4a:b3:49:0b:35:03:98:58:77:fc:88:41:70:
22:49:48:c8:13:be:5a:73:14:c0:ad:10:3d:45:ff:
9f:d8:76:d3:dd:f9:f6:ec:a0:e5:dc:30:e2:5c:0e:
0b:6c:c4:94:35:cf:4b:fa:30:f1:4f:3b:93:d4:cc:
df:71:98:23:0f:8d:2c:04:58:75:6f:b3:71:05:3f:
d0:fb:7e:40:cd:65:98:d5:a5:5d:2e:a9:5e:74:cc:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:47:FE:CC:E0:96:1A:B0:D1:F8:57:32:96:A2:27:42:17:AC:38:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/7Ef-zOCWGrDR-FcylqInQhesONI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.8.0/22
185.242.64.0/22
IPv6:
2a0c:c080::/29
Signature Algorithm: sha256WithRSAEncryption
39:66:e7:b8:63:67:96:8f:d1:b2:53:5f:96:e2:1b:26:48:ed:
64:59:8e:04:a7:2b:48:c7:c3:41:b6:b5:63:0d:1e:12:5e:37:
93:97:85:07:67:d1:d0:b9:83:62:85:5e:24:4f:30:81:e6:b1:
3c:d6:c8:74:ab:1d:e7:ea:fc:05:29:3c:8f:c0:9c:4a:44:60:
84:a8:bf:a5:c4:32:46:bf:cc:fb:2d:47:a9:8f:f9:6b:8a:62:
c0:01:11:72:80:c2:ad:09:7d:18:f3:93:a8:fd:15:35:ca:8a:
cb:27:5d:8b:fd:6a:fa:ad:5f:c1:67:13:dc:81:32:2a:76:da:
cc:d1:94:47:b9:53:71:01:b3:ab:b5:42:77:02:87:57:69:89:
3e:de:af:09:8d:25:60:70:7c:71:f7:9d:88:e1:9e:83:45:22:
ec:fe:06:09:7f:6a:3f:7a:81:e2:0c:55:e3:0a:db:be:51:61:
98:d1:38:8f:da:3e:f5:9e:ba:c2:fc:60:cb:44:e4:43:a1:20:
65:4e:fd:53:f9:98:7c:d8:f8:70:07:c6:26:8c:78:13:f0:67:
b1:e0:92:61:cf:c2:a9:05:f5:0c:03:14:5f:a2:18:1b:be:90:
94:28:15:aa:8b:9b:a2:35:a3:ca:e5:00:db:97:36:e2:0f:7f:
ae:8a:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:06 2024 by rpki-client on console-ams.rpki-client.org