Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9AWz1sdYrjoR779U337NpKORHOo.cer
File: 9AWz1sdYrjoR779U337NpKORHOo.cer (raw, json)
Hash identifier: Q+9jzd3QVbtHD+t2GKfIXy2A7SqMAGeEwTM2ijHOs5o=
Subject key identifier: F4:05:B3:D6:C7:58:AE:3A:11:EF:BF:54:DF:7E:CD:A4:A3:91:1C:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 5D3F81F805
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/1af64d-0a20-44ed-9b03-97c6cab2e910/1/9AWz1sdYrjoR779U337NpKORHOo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/1af64d-0a20-44ed-9b03-97c6cab2e910/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 15:03:23 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 31.40.228.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400497440773 (0x5d3f81f805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:03:23 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=f405b3d6c758ae3a11efbf54df7ecda4a3911cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:6e:2e:17:d0:67:57:e6:78:7f:4b:5a:03:
bb:87:e2:82:67:1a:f0:95:6b:9e:96:78:54:1a:37:
1f:b9:89:bc:5d:57:68:9b:ad:13:2d:52:46:c9:75:
f6:f4:aa:57:3a:48:50:f7:43:7c:bb:ea:d9:13:6a:
6e:4f:69:05:1f:ef:2a:d6:05:c6:1e:c1:1a:b4:c6:
83:c4:b1:90:f8:eb:07:53:95:73:e2:c0:00:09:78:
3f:4f:08:1b:36:b8:a6:97:ae:2f:62:54:c6:f9:9a:
52:a6:e7:ed:2c:7e:4a:c8:18:bf:85:34:da:0c:40:
ed:6b:22:91:ed:85:59:83:44:66:eb:54:f9:24:cf:
46:e0:5c:04:0b:86:91:ee:4e:ec:dd:e5:09:88:bb:
3f:24:e2:69:1e:34:2e:5f:3f:fa:b6:a8:b3:1a:ba:
b1:ac:b2:c0:05:cb:ea:1f:f2:22:e0:e0:64:77:eb:
6a:7d:cd:69:0e:3e:4b:d4:19:57:64:33:b9:22:9b:
9a:a0:f7:cc:42:d5:ad:e2:09:b9:78:3e:61:f1:84:
94:e4:3f:eb:cf:bc:3f:49:f9:aa:b0:75:8c:4c:8b:
5c:66:c8:ce:75:02:5a:53:e1:df:32:a6:c9:1f:9c:
40:ec:ce:77:b2:5d:be:87:58:70:ca:1a:d3:94:a9:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:B3:D6:C7:58:AE:3A:11:EF:BF:54:DF:7E:CD:A4:A3:91:1C:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1af64d-0a20-44ed-9b03-97c6cab2e910/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1af64d-0a20-44ed-9b03-97c6cab2e910/1/9AWz1sdYrjoR779U337NpKORHOo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.228.0/22
Signature Algorithm: sha256WithRSAEncryption
46:2d:b3:cf:08:e0:b1:d3:10:ff:52:b2:65:85:7a:0e:8d:1f:
16:dc:bd:08:e1:fc:ff:bc:f8:a2:7f:b4:06:fa:e2:b6:99:1d:
ee:2c:4a:3f:91:a1:7e:1b:25:f1:71:08:81:63:ff:60:00:ba:
1f:5a:0f:0b:a3:a8:4e:9e:5b:c4:01:14:b5:47:e0:99:20:00:
73:c0:97:fb:a2:cd:99:91:0f:28:e7:43:9e:c1:ee:9d:e0:2e:
3b:f4:37:de:61:31:70:2c:4f:1a:15:4c:aa:0f:1d:24:98:57:
bf:89:83:26:e9:27:17:46:ba:2c:9c:ce:93:c0:22:5e:d4:4d:
65:4e:50:8b:29:0d:5c:58:6c:42:91:14:fb:10:e5:8f:07:62:
85:5f:ec:55:2d:f1:1f:3e:1b:c5:e2:dc:fe:45:c0:95:8b:c9:
ab:93:d7:c0:74:53:1c:90:0b:e2:21:b4:df:67:b3:04:f8:8f:
da:34:49:eb:b1:2b:12:eb:02:b4:f2:3b:67:c1:6f:f2:6b:8f:
d0:59:d6:48:2c:5a:5f:19:41:29:b9:b5:09:a2:e4:99:8f:85:
81:45:98:50:17:df:6b:b7:ab:5e:74:3b:0d:0d:9f:a3:29:8a:
df:5e:2f:45:67:43:3b:f3:6d:ce:93:fd:54:08:fb:4a:ae:c7:
ec:2f:ae:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:52 2023 by rpki-client on console-fra.rpki-client.org