Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8r54vjUVrLCeWDF_BpUNjogfN6c.cer
File: 8r54vjUVrLCeWDF_BpUNjogfN6c.cer (raw, json)
Hash identifier: xmxqS41Y/UWomfy182XuHchhR0shEGZ8NpbQ7jOw8Bk=
Subject key identifier: F2:BE:78:BE:35:15:AC:B0:9E:58:31:7F:06:95:0D:8E:88:1F:37:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5B3A75C70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/2e9c8d-0afe-4f34-ba6b-4fc4354d873a/1/8r54vjUVrLCeWDF_BpUNjogfN6c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/2e9c8d-0afe-4f34-ba6b-4fc4354d873a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:05:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.254.144.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711683693680 (0xa5b3a75c70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2be78be3515acb09e58317f06950d8e881f37a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:fd:27:aa:2e:ae:6f:b6:9b:2f:b9:e2:c1:
aa:e4:aa:17:53:44:c6:e5:56:92:05:10:6b:4b:54:
93:30:45:3e:a7:0e:79:4e:ca:ef:63:15:46:a0:cc:
0e:51:65:6c:0a:95:69:7e:1e:58:e1:9d:6b:93:53:
57:ba:73:65:27:4b:43:6e:8b:e8:64:40:81:38:5a:
e1:d8:bd:e3:6f:86:dc:a9:e5:c9:6b:57:fc:6f:59:
6e:4b:be:62:5a:f3:ac:1d:83:e0:e0:d0:0b:7d:f1:
bb:46:5f:7f:c2:8c:ff:a5:05:71:15:89:55:17:c0:
6b:4f:92:51:6b:f2:7c:2f:c9:53:3c:5a:8e:af:70:
8e:b7:0e:44:ef:ef:67:85:0f:66:d8:18:6c:72:b3:
99:61:4a:5d:8f:2a:ca:d7:d8:47:16:cc:79:f5:34:
69:ae:66:11:e6:96:f3:62:43:e1:55:7a:46:c3:5e:
2d:3d:74:d7:48:40:04:bc:9c:d7:39:5f:82:ce:f3:
f7:bb:ec:1c:6f:35:3a:0b:0a:24:26:3c:55:15:d8:
97:d1:50:3c:2a:ba:a3:4e:25:f4:78:d2:87:54:06:
f5:83:d4:ee:71:1b:dc:65:d7:63:c8:ab:bd:1c:0c:
10:8c:2c:41:6e:fe:aa:7a:5f:0d:38:39:33:34:92:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BE:78:BE:35:15:AC:B0:9E:58:31:7F:06:95:0D:8E:88:1F:37:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2e9c8d-0afe-4f34-ba6b-4fc4354d873a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2e9c8d-0afe-4f34-ba6b-4fc4354d873a/1/8r54vjUVrLCeWDF_BpUNjogfN6c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.144.0/23
Signature Algorithm: sha256WithRSAEncryption
52:a4:c5:39:8e:97:39:53:ed:60:34:fa:bc:0d:8e:84:fe:a0:
5e:8b:f7:e0:41:44:96:6b:ca:b5:d2:50:d1:a8:9b:aa:f8:c9:
3d:38:31:19:10:dd:d6:45:d8:0e:65:b2:d7:5b:a0:9a:19:c4:
1b:d0:e8:36:96:8e:cd:16:cf:99:b2:2d:95:79:8a:59:bb:f6:
06:6b:5b:21:75:29:b6:38:85:a2:fc:21:3a:60:eb:d9:ae:d8:
7a:d7:c6:8a:64:a3:70:94:37:78:ff:b5:e6:80:d2:fb:91:a5:
2c:b9:d2:84:3f:54:4e:74:cd:42:5e:f4:fe:68:ce:d3:82:e0:
55:4b:53:5d:33:f7:ed:ac:23:28:64:0d:fb:ab:32:73:4f:2d:
90:4a:e9:75:1f:a3:fd:0a:15:f1:12:c8:b6:f5:50:46:09:03:
01:69:81:cc:a5:4f:72:40:50:10:ba:49:f7:2a:66:43:d5:f0:
44:3e:2e:0e:6f:45:0f:dd:14:3d:ad:71:59:72:a8:57:9c:43:
c9:aa:79:02:f0:27:03:fd:ed:ae:02:09:eb:85:8d:dd:86:be:
b6:29:5f:d0:fa:80:b6:33:4b:98:a0:4b:36:1e:b1:e2:d2:61:
33:ea:11:2f:e5:e9:3b:c8:06:79:d7:8e:56:23:5b:ca:99:a5:
45:25:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:39 2024 by rpki-client on console-ams.rpki-client.org