Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9MoCx7U4u7NwlLMyqu9dgFb0NMA.cer
File: 9MoCx7U4u7NwlLMyqu9dgFb0NMA.cer (raw, json)
Hash identifier: spNooCWzbwobvI2B40qjHL4Yct2vrDegW7xSNTc1shc=
Subject key identifier: F4:CA:02:C7:B5:38:BB:B3:70:94:B3:32:AA:EF:5D:80:56:F4:34:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 77FB30C864
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/cebb4c-9677-486b-955d-2ac95b1840ba/1/9MoCx7U4u7NwlLMyqu9dgFb0NMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/cebb4c-9677-486b-955d-2ac95b1840ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 01:03:29 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 192.109.175.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515315386468 (0x77fb30c864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:03:29 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f4ca02c7b538bbb37094b332aaef5d8056f434c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:73:ad:b3:d8:a7:45:b1:f8:21:fb:e8:04:
f4:48:e3:83:fe:37:bd:8c:75:00:ca:be:73:80:01:
5f:65:66:1c:9f:0b:d6:3b:99:c4:a5:fe:7a:c1:c4:
1a:86:8f:5c:c6:25:97:b0:41:d6:68:d9:84:99:f9:
78:b3:ef:e8:db:5a:12:48:cf:1b:b8:76:b2:93:4a:
5c:64:c9:db:49:da:73:80:20:99:37:f7:13:19:2e:
06:3c:a9:d1:69:e2:ec:da:d3:7d:be:8a:39:0f:5a:
d8:e6:c5:ee:be:b0:2e:29:84:86:a4:70:91:f1:11:
40:0b:a1:fa:4b:d5:27:5c:be:84:c9:21:05:87:2a:
9a:4f:df:9f:f5:8f:5f:18:76:05:92:d7:62:2e:e1:
a8:2c:bb:ba:75:f9:f2:92:64:ef:0a:dd:2e:aa:bc:
54:fd:c8:95:ae:72:0a:4e:7c:ff:36:c2:c6:ef:1d:
96:00:43:c7:0b:fb:37:de:42:63:46:18:1a:6e:8e:
b9:7c:73:24:4f:00:bf:06:57:c4:f3:84:e1:98:fd:
8e:ca:16:09:31:3c:f8:12:dd:59:f6:2b:48:54:4a:
ca:0e:d0:30:ef:06:c9:74:0d:76:55:27:6a:6d:4f:
d4:3f:e5:4e:0b:4d:7c:c8:29:50:c1:5c:72:17:d7:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:02:C7:B5:38:BB:B3:70:94:B3:32:AA:EF:5D:80:56:F4:34:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/cebb4c-9677-486b-955d-2ac95b1840ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/cebb4c-9677-486b-955d-2ac95b1840ba/1/9MoCx7U4u7NwlLMyqu9dgFb0NMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1f:4d:36:74:04:b9:28:cf:6c:73:9d:33:37:f1:ce:2f:7c:
a2:59:a9:5c:81:3b:cf:e5:fc:56:7c:b5:18:27:50:dc:99:b1:
3b:7a:4a:48:02:4e:8f:16:8a:f1:ab:57:52:27:43:46:63:d0:
48:43:4e:dd:b6:0e:58:84:5b:c9:09:07:30:e0:27:8b:ae:83:
e8:ab:ca:1e:27:36:35:c8:26:3d:4e:d6:23:2c:e5:4c:3f:ce:
2f:bd:85:61:c1:81:89:aa:0a:00:61:a9:30:04:f7:05:fc:48:
13:3c:54:a2:89:ad:63:84:31:67:5c:ec:2f:c0:a6:f1:99:62:
42:ec:89:4d:68:cf:7a:0b:e3:03:87:3e:69:07:27:7a:7c:44:
4a:c3:e4:35:21:28:75:f8:dc:99:3b:54:89:0d:58:d6:f5:24:
12:20:ae:66:46:0d:f7:05:8d:9f:a5:33:0f:21:89:dd:6d:4e:
60:5a:72:ba:02:58:fb:f4:da:31:d9:47:c6:52:96:3d:ad:d1:
6d:6d:cb:9b:83:26:2e:ab:9b:ea:52:15:6d:27:44:6c:5a:9b:
f6:62:90:6a:6a:9e:3c:b7:1a:b5:e0:b4:2a:c8:15:a1:62:0c:
33:d9:9d:88:39:cd:7f:0e:d2:5e:1e:cf:d2:04:af:43:0e:6b:
8a:86:56:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-ams.rpki-client.org