Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7FgRnaPi9jNP_nTtV-f87yfllc0.cer
File: 7FgRnaPi9jNP_nTtV-f87yfllc0.cer (raw, json)
Hash identifier: X/WRAwyDCsTCJ7yK/EJlAFyFe02qWlnj/MezyHGqKKQ=
Subject key identifier: EC:58:11:9D:A3:E2:F6:33:4F:FE:74:ED:57:E7:FC:EF:27:E5:95:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AB49CE40F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/7FgRnaPi9jNP_nTtV-f87yfllc0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 16:07:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.217.52.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735677661429 (0xab49ce40f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:07:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec58119da3e2f6334ffe74ed57e7fcef27e595cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:aa:23:b1:a0:f6:68:f9:52:c0:0e:81:4b:
a7:e5:e4:01:64:29:05:16:56:ee:69:2a:63:32:45:
66:3b:d8:35:fa:f0:da:a3:c6:f5:92:2e:96:46:f4:
3e:b4:56:de:8a:8b:2c:af:68:9e:ef:63:d5:3e:42:
59:2e:ec:52:c9:93:e1:ec:a5:41:95:ed:0c:4f:70:
17:c2:93:cb:be:2c:04:fd:80:c9:2e:e4:1c:e7:57:
1f:fd:ca:3e:d3:06:86:4b:67:98:b1:09:12:62:20:
da:d7:f0:ca:10:f7:02:9e:76:ee:4b:4b:d9:9e:e5:
ee:58:04:01:6c:86:ba:b7:fe:c7:dc:e8:15:f6:44:
a6:09:60:17:c4:3b:2c:22:04:31:e7:84:aa:77:67:
46:96:be:54:e9:73:3d:6f:ff:79:bc:3d:db:2c:02:
db:54:70:8f:52:80:fa:21:47:93:6a:90:42:01:bd:
b5:91:1c:03:8c:0e:bd:66:2a:fa:f3:ad:94:ad:c1:
41:19:a2:b4:39:11:2e:a3:b7:a7:4a:58:6a:d9:40:
b2:06:c2:8a:f0:01:e7:4a:ab:6c:59:99:b3:49:a3:
60:aa:83:81:36:0b:b1:8f:fc:3b:1f:1b:59:84:79:
b0:45:ee:c9:fd:ee:21:0e:6a:c4:6c:94:c7:22:71:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:58:11:9D:A3:E2:F6:33:4F:FE:74:ED:57:E7:FC:EF:27:E5:95:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/7FgRnaPi9jNP_nTtV-f87yfllc0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:83:39:e7:8d:a8:a7:d3:cd:f6:96:02:03:6b:b8:9b:35:d0:
a7:a9:37:e5:b3:ae:99:0e:b2:80:65:a7:44:a3:bd:11:81:d3:
bc:91:31:40:65:6c:8e:2c:f0:b3:11:6b:e8:58:e9:d6:e1:4c:
93:6d:db:51:d7:87:8b:1c:8b:46:7a:56:c6:d2:15:ee:84:9d:
30:62:d8:d5:07:49:d7:3b:3e:a6:d1:6e:5c:66:08:d4:67:dd:
22:f9:11:b2:14:25:6b:99:f8:c6:a1:5b:70:60:11:48:2e:66:
06:c6:25:85:7a:a5:17:f1:e4:da:ca:51:42:b2:b2:5b:7f:bf:
61:1c:c5:2d:ac:fa:1d:ca:b9:11:ae:ee:62:5b:41:5a:53:bc:
fc:2a:c5:b5:2a:17:b9:98:7e:71:a0:01:8f:2c:48:fc:d7:51:
48:3d:11:18:d1:4c:d5:5c:b5:aa:74:03:7e:8f:f6:de:96:1c:
67:4f:a3:33:7a:c9:b4:7d:a2:65:d7:dd:10:73:52:32:92:f9:
ad:86:8a:a7:26:25:d5:60:dc:2d:68:cc:d4:8c:a2:05:0c:29:
ae:c4:1e:27:44:75:41:36:08:c5:dd:f1:e3:b7:04:3c:a6:a3:
8b:dd:87:73:9c:88:d6:cf:08:db:e7:ec:f4:76:b9:30:b4:c3:
2d:b0:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:51 2024 by rpki-client on console-fra.rpki-client.org