Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9jR1H85OhnACN38j7BLo7ZHJ14U.cer
File: 9jR1H85OhnACN38j7BLo7ZHJ14U.cer (raw, json)
Hash identifier: 0iopLeZwsGYkIswmqoSd2Uo0GUrvEkbx0i6BTswlAUg=
Subject key identifier: F6:34:75:1F:CE:4E:86:70:02:37:7F:23:EC:12:E8:ED:91:C9:D7:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8514A9739
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/1030af-a266-4e2e-9ec1-a4e2190cfd8a/1/9jR1H85OhnACN38j7BLo7ZHJ14U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/1030af-a266-4e2e-9ec1-a4e2190cfd8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:57:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.228.101.0/24
IP: 194.24.160.0/23
IP: 2001:67c:2c58::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722918348601 (0xa8514a9739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f634751fce4e867002377f23ec12e8ed91c9d785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:c6:73:72:1e:aa:18:f0:6f:33:d7:10:ee:
86:be:6e:f5:1a:7a:b4:1b:da:cc:98:17:b3:48:79:
0c:66:b6:38:5f:08:3b:ed:1f:19:e2:53:1d:ba:21:
4e:eb:93:df:0c:70:43:c3:0e:66:d4:fc:5c:7e:80:
f1:31:2f:fc:b8:f7:b2:77:f5:78:07:dc:59:37:45:
eb:0f:31:30:38:30:45:90:81:6d:5c:8c:77:94:e5:
a7:27:42:44:9a:b1:af:8e:7f:0d:05:61:4b:ab:44:
61:ab:15:a6:0c:33:99:ea:0f:ca:bc:f0:2a:f9:72:
aa:fc:93:96:97:36:1c:c3:57:89:24:9d:4d:3a:e1:
a1:41:70:d3:ff:05:84:92:59:9f:88:f1:66:23:29:
4d:a0:29:04:37:6e:f9:76:fc:88:ba:3e:b9:bf:b5:
d3:94:43:9e:f0:e5:50:de:3d:96:23:21:b9:9e:2a:
3f:78:a8:d2:9d:0a:e9:e7:ee:a4:55:0f:d3:5c:fd:
49:4d:b7:d0:0e:95:cb:51:a0:eb:ba:c9:8b:5d:e0:
10:36:5a:a4:58:13:2c:aa:8a:53:22:a0:6b:44:9f:
17:7b:85:bc:8a:ba:b4:fe:61:29:fb:29:d6:72:b9:
94:0f:a3:ca:0d:6d:cb:a3:6c:64:de:9c:5d:a0:1a:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:34:75:1F:CE:4E:86:70:02:37:7F:23:EC:12:E8:ED:91:C9:D7:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1030af-a266-4e2e-9ec1-a4e2190cfd8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1030af-a266-4e2e-9ec1-a4e2190cfd8a/1/9jR1H85OhnACN38j7BLo7ZHJ14U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.101.0/24
194.24.160.0/23
IPv6:
2001:67c:2c58::/48
Signature Algorithm: sha256WithRSAEncryption
a6:c7:b9:c8:82:f4:86:2e:77:82:17:99:d3:1d:3c:fc:25:27:
23:45:06:d7:f0:f8:b7:9b:f1:f8:42:af:e7:58:14:9c:11:35:
0f:aa:79:91:01:70:d0:58:88:f7:87:50:92:92:58:bb:4d:47:
cb:ce:e9:50:7b:e2:6c:ba:b7:1c:84:80:e0:61:29:64:d9:b9:
07:29:5f:5d:d0:b5:9e:d7:d2:3c:9f:3e:97:c2:62:f1:7e:a6:
96:cd:c7:50:89:e3:04:dc:b1:cc:4f:f6:8c:ef:44:b8:de:65:
62:4b:2e:f3:c0:e7:8d:25:eb:45:98:b2:29:8f:94:40:44:0b:
52:72:57:38:bb:01:8f:71:ea:cf:a5:98:47:49:92:ba:c4:0c:
19:38:d6:91:d4:cc:e5:fe:8e:4a:d9:40:3d:1e:f9:e0:fe:76:
cf:fd:e0:3f:87:ce:21:ee:6f:c6:c4:c2:68:fd:ee:ad:9f:a1:
83:67:a1:f3:7a:48:90:79:56:76:af:61:82:5a:6d:66:de:00:
51:70:f0:e1:0d:ea:27:33:5d:05:78:63:0b:da:d6:58:3f:18:
0e:24:14:e5:b2:1c:c6:c0:6a:54:66:44:d7:27:8e:da:a3:10:
f5:34:cf:05:d9:28:88:b4:e1:87:51:2b:d1:23:68:3a:de:e4:
0b:75:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:16 2024 by rpki-client on console-fra.rpki-client.org