Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9eg2EQFNWpn4cV3QW9AiNMa0a9U.cer
File: 9eg2EQFNWpn4cV3QW9AiNMa0a9U.cer (raw, json)
Hash identifier: mbm0hLk6TMWvNBIvpBH0KSu6PkP8cC3zejQq1Ied9Z4=
Subject key identifier: F5:E8:36:11:01:4D:5A:99:F8:71:5D:D0:5B:D0:22:34:C6:B4:6B:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E1E82F96C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/9eg2EQFNWpn4cV3QW9AiNMa0a9U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:59:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 213.139.224.0/22
IP: 2a09:3d80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679116732780 (0x9e1e82f96c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5e83611014d5a99f8715dd05bd02234c6b46bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:77:1e:f3:91:5d:11:f3:71:45:cf:62:bf:0c:
43:f9:ae:11:26:8c:fd:0d:da:ef:16:38:6b:15:b8:
47:be:6b:ce:82:1e:36:b6:c5:7e:e0:5f:53:a5:f5:
2d:d6:44:22:df:1c:f4:bf:09:0d:72:17:f0:6c:cf:
a4:81:86:92:dd:fc:ad:fe:61:e2:22:7f:0b:8a:c3:
76:2c:b3:3d:e3:76:f7:b9:e0:66:9c:39:74:dd:2f:
20:07:8b:a7:76:35:c2:ab:0e:7c:bb:fa:05:e4:45:
c1:7a:de:80:46:5d:b9:64:2a:c8:69:f3:16:7f:a9:
9e:ed:22:a2:23:ea:2e:f8:ee:a3:4e:b9:a4:2f:d8:
b2:fd:41:74:06:d3:e6:cc:6d:03:3a:d9:d2:b1:32:
76:ef:0f:8f:8a:50:e8:5d:53:e6:bf:ab:ea:cc:6a:
28:4c:aa:66:62:b9:f6:64:28:ee:1b:51:e6:6b:fd:
9e:d4:f9:8f:f9:c9:ff:4b:98:e4:b6:05:f4:29:29:
1a:27:a9:41:c4:84:91:04:cc:e5:47:20:e8:bc:d3:
d9:90:54:53:d5:95:25:94:b1:8f:85:15:f5:92:f5:
a7:85:5b:42:b4:2c:4c:47:a1:26:a0:42:ee:2f:67:
fb:4b:ed:d9:3b:24:a8:1f:24:ea:14:36:7c:71:96:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:36:11:01:4D:5A:99:F8:71:5D:D0:5B:D0:22:34:C6:B4:6B:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/9eg2EQFNWpn4cV3QW9AiNMa0a9U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.224.0/22
IPv6:
2a09:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
7e:60:99:06:6d:18:ed:26:cf:37:01:96:4f:78:71:82:4d:9e:
92:0e:78:f5:49:a3:d2:47:a2:90:4d:ce:4f:f9:74:a8:07:91:
68:df:34:bf:62:54:f9:42:5d:d7:83:6f:8c:ce:b3:f4:37:b4:
c4:1f:6d:df:c6:a2:74:df:5f:56:76:6a:7b:8c:42:87:56:d3:
28:73:cf:f9:69:2e:9c:58:7f:98:8e:75:f0:f5:77:da:0b:11:
c7:ec:65:83:a3:b9:07:d9:9b:f2:0f:8f:50:78:62:00:06:cf:
d7:3b:d1:1c:8a:38:e4:0f:78:85:25:8e:77:26:7c:9b:e1:f2:
03:d9:e5:1f:9a:86:a6:79:e6:51:99:4b:2f:b5:ab:ec:b4:75:
d0:3d:28:11:3a:8c:67:fd:49:77:a0:34:2a:3b:ef:ca:3c:ef:
fd:88:69:fe:98:38:f7:82:8e:e2:e8:9a:48:b4:b5:20:26:ef:
a5:4f:de:f1:67:b4:01:64:36:0f:4f:f7:69:30:39:05:8a:dd:
15:4f:53:2f:97:18:51:9c:97:bd:e8:e6:c9:8a:6d:1a:20:08:
6c:ce:2a:91:6b:7e:56:4a:5d:57:22:9d:1b:fb:5d:bc:ad:32:
7b:c6:fd:96:99:cf:63:11:54:73:ff:dc:da:61:03:a3:cf:46:
81:17:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org