Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7sv52yqaT_fpyMZk4O-SeGPOVJM.cer
File: 7sv52yqaT_fpyMZk4O-SeGPOVJM.cer (raw, json)
Hash identifier: LLcM45bY8ove7rzLv/7/j+0kCrUSI/7+hlUX1wInCUc=
Subject key identifier: EE:CB:F9:DB:2A:9A:4F:F7:E9:C8:C6:64:E0:EF:92:78:63:CE:54:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5F917FAB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/7sv52yqaT_fpyMZk4O-SeGPOVJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:56:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.105.66.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712848702136 (0xa5f917fab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eecbf9db2a9a4ff7e9c8c664e0ef927863ce5493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:a7:1a:e6:8a:a9:08:b9:6d:a1:b4:46:a0:
c7:01:cc:63:df:19:54:6c:c7:c2:db:e4:e0:45:fe:
c5:79:c2:21:82:1e:c3:13:73:e0:49:ce:08:5f:04:
7f:a5:f2:3d:50:fc:80:0c:1e:49:47:46:5a:22:19:
0c:da:60:5a:6a:c9:ac:69:4d:4e:fd:0f:3d:3b:ab:
4c:ae:4c:20:93:ad:fe:b2:d7:be:6e:80:1e:9f:d1:
7c:64:f5:9d:5a:5c:63:df:10:f2:4c:fa:e9:a8:04:
b0:11:a8:07:09:3a:c1:3f:92:06:71:dc:51:1c:c9:
3e:e1:25:28:52:a0:4a:a8:b6:7b:25:05:38:77:f2:
fc:31:87:5d:df:bd:1b:7d:67:08:15:33:06:24:44:
e7:f1:69:ee:46:bf:ce:63:d9:a9:4f:05:e8:40:21:
6f:81:56:59:be:8f:fb:50:fc:3b:e9:a7:c7:47:b7:
67:2f:31:ac:11:32:3d:ef:13:00:bf:9f:84:a8:74:
ba:fe:75:16:52:dc:4a:90:19:3b:9b:fe:de:6e:81:
b2:fd:1c:5c:a3:f6:a0:41:e6:10:55:a6:d8:33:6a:
6d:90:d7:67:24:6f:2b:d6:dd:14:4e:11:fc:e1:4b:
b3:b2:78:39:0d:88:08:63:17:98:0a:a4:f3:08:0c:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CB:F9:DB:2A:9A:4F:F7:E9:C8:C6:64:E0:EF:92:78:63:CE:54:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/7sv52yqaT_fpyMZk4O-SeGPOVJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.66.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b6:b3:e0:24:3d:5d:64:bd:63:19:64:81:c4:ad:44:af:ed:
60:31:98:65:5f:c3:cc:23:62:43:bd:35:0e:c4:db:89:bd:78:
b8:c8:fa:f4:be:50:8b:4a:1b:35:19:9d:02:f1:e5:9e:0c:c6:
b9:53:91:df:0e:29:90:e5:f2:81:8c:3c:69:0d:10:c8:cb:05:
b0:59:b2:db:92:d4:8f:74:e8:e4:72:38:3e:ac:8f:75:83:a3:
60:dc:10:f4:8b:28:9c:26:28:da:6a:18:0d:49:cb:0f:6c:1f:
7d:f3:8c:46:87:06:57:96:6d:e1:75:09:02:3a:42:45:40:3c:
26:6e:1f:e8:66:64:d4:d5:dc:2a:c3:80:f1:fd:22:7a:b5:3e:
03:9f:43:1b:0d:ef:fc:ff:de:fb:99:63:d5:ef:02:65:4e:d6:
99:e7:04:f6:79:3c:99:7f:ae:be:e5:cc:b9:42:c0:69:f8:01:
9d:14:89:f2:5c:9d:88:7e:0f:af:f9:30:2b:77:a9:82:9a:57:
d1:7f:63:37:8b:94:65:92:ac:77:77:fc:1b:7d:39:a0:cb:b0:
28:e5:88:0d:7e:c7:4d:7d:dd:88:40:7c:0a:3b:9b:8f:2f:20:
54:e6:a6:dd:1b:8e:bf:d2:0a:5d:dc:e0:26:54:b7:d2:df:cc:
5f:e5:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:33 2023 by rpki-client on console-fra.rpki-client.org