Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7_2p9Wp7T9CqCioGDDjb57-1dFM.cer
File: 7_2p9Wp7T9CqCioGDDjb57-1dFM.cer (raw, json)
Hash identifier: 0cr6dbr3wA2R36DuKkE1hAzXnzYhS/JCt4LZGT7xh1I=
Subject key identifier: EF:FD:A9:F5:6A:7B:4F:D0:AA:0A:2A:06:0C:38:DB:E7:BF:B5:74:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A834147C80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/724adf-dc06-42cc-80be-34ac6cb3e114/1/7_2p9Wp7T9CqCioGDDjb57-1dFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/724adf-dc06-42cc-80be-34ac6cb3e114/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:56:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.213.29.0/24
IP: 91.213.35.0/24
IP: 91.213.49.0 -- 91.213.50.255
IP: 2a0f:6340::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722428263552 (0xa834147c80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=effda9f56a7b4fd0aa0a2a060c38dbe7bfb57453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:96:97:d8:e9:df:7f:ca:3d:9a:e6:a7:0d:
11:b5:65:13:aa:de:f2:05:a8:43:fc:83:6a:ca:6c:
fa:f9:64:f8:ca:52:92:be:a9:8f:41:c8:b0:20:59:
c4:15:9f:88:fb:4d:c4:2a:e3:aa:8a:7a:b2:f0:28:
21:c6:9f:5a:01:32:54:5d:d0:4a:3e:8d:5a:c6:36:
8b:28:b0:34:ce:7f:d8:6a:ac:b4:88:6a:ff:27:45:
b8:c6:8e:aa:66:83:21:83:64:5f:91:2a:94:c7:46:
36:6d:89:f0:04:37:25:a9:bc:33:7e:40:6a:d4:9c:
7c:ec:09:a8:b8:8f:45:9b:d4:f3:fb:0d:38:fd:eb:
9c:4d:57:26:eb:9e:59:1a:ba:0d:39:e5:2e:e8:94:
ab:8a:37:23:d8:ab:51:bc:a8:b2:97:8c:44:96:3d:
1d:85:98:7a:14:8b:4d:0e:cf:e9:00:d7:35:78:ed:
6e:db:cd:91:f5:37:ec:a8:00:7d:cf:5a:d9:cd:52:
6f:9e:e8:05:38:d5:e3:0a:5b:1d:2e:52:d2:e8:f8:
77:05:e4:ca:12:0f:ff:1c:67:b7:2e:c5:6b:d0:0a:
c2:64:f0:d9:2a:85:35:13:a3:3b:1c:25:44:3b:3f:
96:45:9e:19:97:bc:27:75:d6:d3:95:75:27:26:1f:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:A9:F5:6A:7B:4F:D0:AA:0A:2A:06:0C:38:DB:E7:BF:B5:74:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/724adf-dc06-42cc-80be-34ac6cb3e114/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/724adf-dc06-42cc-80be-34ac6cb3e114/1/7_2p9Wp7T9CqCioGDDjb57-1dFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.29.0/24
91.213.35.0/24
91.213.49.0-91.213.50.255
IPv6:
2a0f:6340::/29
Signature Algorithm: sha256WithRSAEncryption
45:9d:22:4b:13:c8:fd:7f:35:8f:8c:2b:41:e5:e3:26:2b:0e:
5e:6e:1f:85:15:49:c3:e2:62:4f:64:17:67:26:1b:da:f7:ea:
b2:ca:b5:42:9d:ab:85:c9:6c:a2:7f:62:f0:85:66:5e:bb:1f:
7a:7b:6e:8f:38:ea:1d:b1:b9:78:95:54:7b:ee:57:ed:30:fa:
46:db:c3:e6:20:28:e4:05:f1:14:da:7c:18:ba:5d:06:a9:f4:
c5:8c:76:1e:93:64:96:75:4a:1f:e8:7e:3f:29:24:09:e8:bb:
b5:2d:79:be:9d:ff:ff:56:24:02:d4:36:9b:4d:7a:f6:78:08:
96:4b:17:65:08:44:04:06:b2:2e:02:7e:ba:9a:5c:14:90:ce:
c1:f3:d1:ee:62:46:70:8d:2f:f6:c5:04:db:ab:73:06:be:da:
83:29:d0:86:af:3e:71:34:f9:45:75:a4:8c:cf:94:21:8e:5a:
bc:73:e3:29:8c:9f:49:ce:45:f4:06:ce:14:60:a2:b2:ee:a4:
1d:83:d3:ec:56:9e:9a:c3:b8:40:e8:ea:d3:3a:8f:30:64:85:
a1:d3:a3:de:b7:1d:aa:34:60:bd:e5:d2:5c:41:0a:12:27:64:
0a:33:ad:92:23:e2:a2:db:d4:0c:1e:83:46:67:d3:bf:07:1e:
3c:f4:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-ams.rpki-client.org