Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9uvFeeItF-9QAfgSeCPAJ4lGZFc.cer
File: 9uvFeeItF-9QAfgSeCPAJ4lGZFc.cer (raw, json)
Hash identifier: +MJKVF5m1jwFte0IsHA1UkNPS/8Rgv5qi0MUq8A+KqA=
Subject key identifier: F6:EB:C5:79:E2:2D:17:EF:50:01:F8:12:78:23:C0:27:89:46:64:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7F952C0A54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/5f3fb0-69eb-4d5d-9b0a-72c649570b4e/1/9uvFeeItF-9QAfgSeCPAJ4lGZFc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/5f3fb0-69eb-4d5d-9b0a-72c649570b4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 04:22:54 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 193.243.161.0/24
IP: 193.243.166.0/24
IP: 193.243.182.0/24
IP: 193.246.51.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547963538004 (0x7f952c0a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:22:54 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f6ebc579e22d17ef5001f8127823c02789466457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:49:45:f1:07:a1:80:5a:06:24:f5:f9:71:
98:96:fd:67:78:1d:1e:d5:28:39:2a:92:1b:e4:d2:
22:cb:a6:83:da:17:12:f1:38:f3:8a:2e:ea:4c:de:
64:fa:37:56:83:41:15:f5:ca:ad:68:d5:c5:b6:5c:
8f:10:e6:1e:9f:93:9a:1b:13:fc:47:10:55:b4:82:
2e:50:01:9e:c0:28:8d:9f:59:77:cc:c4:47:e3:fd:
af:00:3b:be:68:4b:63:49:7b:34:8d:b2:21:f5:ff:
3b:b2:a2:8e:9b:da:90:1d:d4:e2:cc:cd:3c:d7:9f:
77:09:e1:5b:f2:6a:27:bc:06:d2:d1:6c:7c:53:67:
08:93:fd:0a:10:71:7b:29:67:a9:c3:88:2a:2d:90:
10:e2:19:b2:dc:9f:e1:3f:a0:c6:c8:d8:c8:f0:89:
b0:14:6c:2d:42:1d:01:61:41:90:35:c0:a8:c7:45:
c8:04:d8:67:b4:20:35:fa:d3:54:b3:87:aa:ac:3b:
24:d1:05:bc:7e:58:db:2c:b2:8a:7d:ef:41:9c:61:
29:b0:ac:d1:1b:40:9c:1f:67:70:8f:f0:74:35:6d:
27:71:48:b5:33:1a:14:c5:9f:9a:a6:e4:9c:c4:63:
0a:e1:6b:1e:5b:b9:4c:87:d1:fe:5e:d6:a5:dd:b6:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EB:C5:79:E2:2D:17:EF:50:01:F8:12:78:23:C0:27:89:46:64:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5f3fb0-69eb-4d5d-9b0a-72c649570b4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5f3fb0-69eb-4d5d-9b0a-72c649570b4e/1/9uvFeeItF-9QAfgSeCPAJ4lGZFc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.161.0/24
193.243.166.0/24
193.243.182.0/24
193.246.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:0b:6b:13:6a:93:95:d2:40:5b:12:ff:f6:42:10:08:81:b7:
7c:c1:f5:f3:07:ff:68:9e:c0:93:46:0d:85:9c:34:e8:43:7e:
2a:28:1f:6c:c6:44:a6:e3:82:b8:11:cd:4e:57:6f:f6:7e:21:
00:2b:3d:e3:28:27:87:74:0b:60:b9:7d:20:84:a9:1f:41:9f:
b8:67:b8:fe:18:de:e5:ae:f9:1c:aa:1b:fe:7b:f1:fc:9a:99:
d6:5f:de:27:56:ec:91:d3:ee:95:bf:82:1d:1e:75:64:a4:8f:
6f:54:df:d2:dd:9c:3e:37:70:fd:9a:8c:69:3a:db:0d:14:95:
ba:b8:90:13:46:90:c7:6d:32:69:e7:3e:1a:c0:bf:52:da:b9:
98:58:1a:0d:17:d5:f3:11:60:19:81:ec:dd:07:77:c4:1f:f7:
39:be:05:8e:2d:b5:16:34:c9:c5:e1:30:2a:92:00:20:a0:6d:
03:42:ca:35:92:5f:52:3b:4e:ff:fb:40:fb:36:a6:e0:0e:a5:
b5:21:d6:68:f1:6d:f3:d4:2b:5e:43:40:ca:99:24:c7:a6:6f:
3d:d1:52:67:29:f5:9b:aa:aa:9c:8d:1e:dc:4c:61:2f:fb:70:
eb:1e:b0:ab:56:2e:16:82:a4:7e:96:8d:ab:b2:72:9d:dd:aa:
f2:2c:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:10 2023 by rpki-client on console-fra.rpki-client.org