Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8FlMTIX8zXsMUKMyEaxwyMo5YUk.cer
File: 8FlMTIX8zXsMUKMyEaxwyMo5YUk.cer (raw, json)
Hash identifier: wYVH5jGznPVoDtYFCeOIegVPkOLtIG/fK9iOHsU6sno=
Subject key identifier: F0:59:4C:4C:85:FC:CD:7B:0C:50:A3:32:11:AC:70:C8:CA:39:61:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 642465E89C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/056a8f-790b-4e1f-9be1-7e34a1aac5a3/1/8FlMTIX8zXsMUKMyEaxwyMo5YUk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/056a8f-790b-4e1f-9be1-7e34a1aac5a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 15:37:54 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 81.161.236.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430107388060 (0x642465e89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:37:54 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=f0594c4c85fccd7b0c50a33211ac70c8ca396149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:1b:d7:dc:23:94:b5:80:22:2b:19:16:b7:
8f:bc:b2:fd:a8:da:25:fa:57:87:0e:39:e8:ae:05:
a4:a8:9f:41:98:b6:15:48:66:3a:9d:5f:73:81:bd:
e1:bc:04:11:8e:a4:20:eb:71:9e:91:9c:5c:d5:e3:
c4:d1:6d:66:06:8f:86:63:fd:d4:dd:f4:f3:af:eb:
c1:ee:fe:25:6f:76:98:47:05:d8:76:1a:ac:98:5f:
c0:c9:12:03:80:39:6d:5a:32:67:76:c2:9e:b2:d0:
35:fd:ad:0d:f2:4c:db:c2:dc:bf:96:0b:f4:21:d9:
42:e8:54:92:8b:7b:bf:b3:5f:27:c5:fa:03:d6:e3:
64:d1:12:97:80:7c:9e:5d:59:61:23:a4:0a:79:ae:
21:00:6d:16:36:b3:ea:ee:59:ab:a5:8e:c1:e3:aa:
c9:36:46:21:7a:14:a0:07:ca:84:95:52:46:cf:a4:
d3:d8:d4:56:d8:b5:1a:cd:d8:51:99:d5:10:1b:c0:
1a:08:5f:9e:d8:bd:a1:89:a8:3e:38:31:f4:c8:02:
ba:bd:03:e6:83:5b:a0:af:27:9e:85:e4:99:73:55:
d9:90:79:81:04:f3:f0:0c:70:2e:e8:b9:a3:8f:2c:
c9:8c:ee:9b:01:27:58:56:58:50:47:7a:81:43:64:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:4C:4C:85:FC:CD:7B:0C:50:A3:32:11:AC:70:C8:CA:39:61:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/056a8f-790b-4e1f-9be1-7e34a1aac5a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/056a8f-790b-4e1f-9be1-7e34a1aac5a3/1/8FlMTIX8zXsMUKMyEaxwyMo5YUk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.236.0/22
Signature Algorithm: sha256WithRSAEncryption
56:b0:ff:21:c6:db:e5:16:7d:ec:e0:fd:8e:bf:0f:cb:0e:1b:
2a:ea:f2:be:dc:ed:ed:9a:0c:27:fd:19:04:1c:91:fe:e0:f2:
96:2c:d6:8c:dc:c5:33:74:e9:08:b0:72:03:c9:55:bc:97:8c:
bc:ee:a5:5f:00:02:25:f6:b6:fa:9b:6f:3d:82:f4:9b:24:96:
b0:45:62:5c:c7:09:9c:73:28:d3:66:b1:f5:2f:96:0d:4a:36:
aa:99:4a:ad:c6:79:d8:74:0a:93:8f:98:b4:3a:a7:64:8d:5e:
e4:18:f1:32:db:0b:8c:3a:17:f0:f6:ca:71:5d:67:b6:a9:4d:
c2:e8:31:45:03:f6:1e:91:a8:18:cc:3b:1b:a2:97:86:e8:ba:
4c:4a:62:1f:6c:5d:40:6d:0d:79:d2:07:ad:4d:66:6f:85:f8:
db:90:ee:43:dd:fe:31:b2:fa:3a:2d:f0:3c:3b:91:9e:8c:36:
f7:e9:a8:58:d8:ba:1d:b2:4f:a7:de:62:31:fa:37:20:58:e6:
45:0e:e1:8c:4e:b9:05:aa:6d:45:3e:95:b3:d2:ad:4c:4c:36:
1e:9d:b8:c1:14:43:94:fc:9f:b1:3b:1c:f3:35:cf:5c:c9:1f:
98:20:f1:f5:66:60:8e:a2:7b:8f:e0:42:a2:db:bc:43:07:d5:
32:15:5a:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:05 2023 by rpki-client on console-fra.rpki-client.org