Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8kJFK--ByYK2YpoakrsZqgXSDTo.cer
File: 8kJFK--ByYK2YpoakrsZqgXSDTo.cer (raw, json)
Hash identifier: 4dHQpy1V8P/8GqBw3hHF9WpLPbvZPyW2AsvHkYdzdLM=
Subject key identifier: F2:42:45:2B:EF:81:C9:82:B6:62:9A:1A:92:BB:19:AA:05:D2:0D:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A666CFC8BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/e151d2-ba9d-4783-9cf5-04c7082a2d4a/1/8kJFK--ByYK2YpoakrsZqgXSDTo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/e151d2-ba9d-4783-9cf5-04c7082a2d4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:02:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.104.129.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714689464508 (0xa666cfc8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f242452bef81c982b6629a1a92bb19aa05d20d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:15:ac:d6:0a:ca:39:23:ff:ce:2a:41:91:
02:36:6c:51:9f:58:1b:c3:06:63:7e:ee:1d:4a:0d:
67:6e:b4:36:e7:63:f4:c7:ef:b5:46:cf:fa:f2:96:
ed:35:7f:dd:0f:55:fb:71:0f:e0:32:f3:dd:c1:fe:
0b:74:31:89:6b:8f:b5:52:7b:34:54:1e:16:44:e8:
7e:f5:2b:9f:a9:2f:75:f9:c7:28:a9:24:5d:ee:6f:
6f:b5:46:48:f2:d1:e1:1b:ad:f0:ca:fe:e0:ac:bc:
9c:ad:98:0d:37:df:f9:77:0c:ab:6c:77:9e:fa:41:
29:e2:76:98:af:c8:88:c3:8c:ea:9a:d0:b8:9e:23:
3d:54:00:36:8d:c4:d4:c5:34:e3:be:bc:05:6f:a4:
68:04:d7:1b:79:27:1c:84:fa:fc:2b:03:19:2f:21:
d4:c1:28:5e:1b:c8:44:c2:c2:60:40:09:16:df:2e:
f7:ed:d5:cc:ef:a5:d2:68:e4:d1:1c:ee:41:1d:bb:
68:05:96:2d:40:56:84:fd:b3:f0:a1:94:4c:b3:f5:
1c:0d:76:8a:50:57:13:4b:09:6f:78:61:1e:81:c5:
3d:47:0e:d7:d7:bf:2e:96:5a:8d:8f:d8:e1:22:5c:
e9:69:eb:cf:5c:f9:91:c8:70:06:bd:da:7e:fa:76:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:45:2B:EF:81:C9:82:B6:62:9A:1A:92:BB:19:AA:05:D2:0D:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e151d2-ba9d-4783-9cf5-04c7082a2d4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e151d2-ba9d-4783-9cf5-04c7082a2d4a/1/8kJFK--ByYK2YpoakrsZqgXSDTo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7e:38:5f:6a:f8:67:63:e0:c2:57:05:28:30:91:7d:96:3f:
5d:da:f8:5b:cb:a5:e3:78:03:fd:74:a7:b3:50:8c:e8:9b:57:
40:5d:8c:d6:75:56:70:a7:ff:c7:00:7d:2d:45:bf:54:2d:97:
b8:00:49:79:ec:dd:48:77:23:a9:3b:37:e2:15:63:c4:e1:20:
6b:67:d6:b6:bd:87:d9:07:20:f0:5b:5e:4e:d7:3c:13:23:75:
7e:8a:4a:cb:d8:7f:40:5b:14:59:fa:c6:30:cc:32:92:c3:8d:
2e:09:42:dd:3d:ed:d8:95:89:04:7e:59:57:e4:b0:f9:67:b0:
0f:d6:48:68:67:0a:85:0f:93:8e:93:8d:38:d5:10:c9:45:80:
cc:ed:8c:f0:89:37:20:9d:63:78:a9:4e:42:5b:92:47:c8:18:
66:0a:82:35:11:30:72:35:56:80:33:aa:9e:4e:62:68:ba:5f:
53:0c:67:1d:d3:2b:d0:8f:fc:07:ab:ff:dd:d5:1b:31:42:90:
93:20:fb:f8:19:28:da:3b:3f:d4:19:ee:fe:93:0a:78:74:48:
19:b6:68:e8:18:e8:53:4d:56:11:4c:21:bb:28:7d:0c:8d:6e:
06:a6:b3:b2:45:27:f6:1f:72:27:71:6f:2e:53:63:2a:42:46:
1d:bc:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-ams.rpki-client.org