Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7v_pxLJLjp1s1YrkvXUme3c_0dQ.cer
File: 7v_pxLJLjp1s1YrkvXUme3c_0dQ.cer (raw, json)
Hash identifier: u23RvPb0IsnZmxo+ijHsmPUkRHR00i/uW5QdESmSEQg=
Subject key identifier: EE:FF:E9:C4:B2:4B:8E:9D:6C:D5:8A:E4:BD:75:26:7B:77:3F:D1:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 75B3B47484
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/8e0901-2453-4ce3-8cfc-9a429bee8a08/1/7v_pxLJLjp1s1YrkvXUme3c_0dQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/8e0901-2453-4ce3-8cfc-9a429bee8a08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:11:21 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 5.148.192.0/18
IP: 37.188.80.0/21
IP: 37.191.0.0/18
IP: 78.139.0.0/18
IP: 80.98.0.0/15
IP: 86.101.0.0/16
IP: 88.87.240.0/21
IP: 89.132.0.0/14
IP: 176.63.0.0/16
IP: 178.48.0.0/16
IP: 185.33.80.0/23
IP: 185.123.28.0/22
IP: 188.142.160.0 -- 188.142.255.255
IP: 195.184.160.0/19
IP: 212.48.240.0/20
IP: 212.96.32.0/19
IP: 213.222.128.0/18
IP: 2a02:ab80::/28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505526121604 (0x75b3b47484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:11:21 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=eeffe9c4b24b8e9d6cd58ae4bd75267b773fd1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:e1:0f:a5:62:44:f8:65:d4:d1:75:6e:0f:
8a:fe:11:71:e3:e8:42:4a:81:50:b1:1d:f7:96:4e:
eb:f8:ab:99:79:52:fa:99:6a:5f:49:14:8a:f3:a4:
98:c2:dc:f2:98:04:28:02:b4:64:52:84:41:2e:ed:
57:49:0a:12:b7:67:ce:ac:a5:e9:97:a4:b5:82:8d:
7c:44:db:79:9d:86:c3:dd:70:18:01:6b:1d:1c:f5:
75:cc:32:c5:7f:62:14:f5:d8:a9:53:83:24:b1:df:
af:ed:5a:3e:80:df:6a:80:f8:3d:44:2f:40:55:09:
85:3e:ef:f0:77:9a:84:80:2c:69:da:cf:9e:a9:9a:
4b:78:b5:e1:74:30:9a:b5:58:88:a3:56:11:3c:ab:
45:db:88:69:0d:3d:23:b9:36:44:11:28:73:48:c0:
4e:b1:9c:0e:24:ce:e2:13:a7:4d:cd:e7:29:13:0d:
f0:a6:6c:72:02:f9:78:75:2d:58:a7:be:27:a5:7b:
94:4e:85:17:df:fb:df:35:cc:2a:0f:52:a6:2a:d3:
03:e7:11:38:23:e0:30:d0:30:9c:ea:ef:37:bf:23:
b2:e0:46:46:29:94:1b:05:ac:79:52:b2:58:2c:86:
51:ce:e9:9e:cb:b2:da:8f:1c:a5:66:e8:6b:d3:65:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FF:E9:C4:B2:4B:8E:9D:6C:D5:8A:E4:BD:75:26:7B:77:3F:D1:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8e0901-2453-4ce3-8cfc-9a429bee8a08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8e0901-2453-4ce3-8cfc-9a429bee8a08/1/7v_pxLJLjp1s1YrkvXUme3c_0dQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.148.192.0/18
37.188.80.0/21
37.191.0.0/18
78.139.0.0/18
80.98.0.0/15
86.101.0.0/16
88.87.240.0/21
89.132.0.0/14
176.63.0.0/16
178.48.0.0/16
185.33.80.0/23
185.123.28.0/22
188.142.160.0-188.142.255.255
195.184.160.0/19
212.48.240.0/20
212.96.32.0/19
213.222.128.0/18
IPv6:
2a02:ab80::/28
Signature Algorithm: sha256WithRSAEncryption
88:8e:7b:ab:d1:cb:da:e8:0a:46:29:91:ac:28:97:25:ab:d1:
27:23:3a:e7:35:80:af:a2:c7:dd:43:a0:29:d5:83:a9:bd:3b:
55:d8:df:f4:84:5f:70:9c:d0:5d:3e:42:ae:a7:7d:89:b2:46:
11:ea:5b:d0:60:e5:74:94:15:c4:1c:07:c0:c9:5b:be:09:f6:
b9:e2:1a:28:10:f2:c2:3d:66:2b:d0:0f:7c:da:91:d9:eb:08:
87:60:1e:7c:03:4f:ae:f0:72:31:b3:5e:78:5a:13:19:c1:8f:
ce:7c:59:03:38:e1:14:be:7f:64:d7:06:83:ff:22:d3:3d:6d:
d3:49:67:e9:49:2b:b1:7b:27:82:e2:8c:ad:8e:0f:e7:a7:19:
2f:fb:28:be:79:44:58:41:a7:77:49:d9:3d:61:e9:32:57:59:
5d:38:94:98:7a:ed:9c:fe:b3:30:c4:04:d2:94:f4:24:0f:b1:
bd:53:d7:ef:63:d6:6a:a8:d2:01:c8:20:b7:81:5f:bd:7b:69:
d1:fb:94:f4:7c:5a:30:90:fa:6c:da:f0:bf:e5:02:48:1e:41:
63:23:da:bd:0a:27:a7:f3:ec:fe:86:25:9e:05:62:4e:5f:0a:
68:a0:28:c3:a2:eb:cd:6f:4a:47:20:64:52:de:b9:57:16:7d:
3d:8d:8d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:33 2023 by rpki-client on console-fra.rpki-client.org