Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9xX57aDEBdOBB6fqhzVsoDGUEvM.cer
File: 9xX57aDEBdOBB6fqhzVsoDGUEvM.cer (raw, json)
Hash identifier: LigImo0W6Q4KzLYGS9LfRlF6iJ80tEQIYBLKEWeypTA=
Subject key identifier: F7:15:F9:ED:A0:C4:05:D3:81:07:A7:EA:87:35:6C:A0:31:94:12:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7779E11170
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/46012c-0851-4beb-ae8c-752c0de6c0f2/1/9xX57aDEBdOBB6fqhzVsoDGUEvM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/46012c-0851-4beb-ae8c-752c0de6c0f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:51:19 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 86.62.24.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513145901424 (0x7779e11170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:51:19 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f715f9eda0c405d38107a7ea87356ca0319412f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:86:92:1e:da:93:a9:52:64:c0:b3:84:b4:
b9:29:44:ae:99:7b:c4:aa:dc:20:cb:62:18:bc:98:
c9:69:1b:50:d0:3a:1f:15:17:83:8e:d8:fc:0f:64:
89:c4:a4:40:63:ac:be:f7:ba:30:83:43:e7:b8:3a:
0a:f2:20:ac:f5:2d:ff:08:af:f5:62:b1:1a:1d:5c:
04:3e:86:4c:20:8e:16:96:ce:10:10:4e:c7:0e:76:
71:c5:4f:34:21:c4:ac:03:5d:7a:77:6e:cf:38:f8:
ff:7a:aa:a5:c0:4b:69:3d:c6:49:78:31:8e:99:3a:
a0:21:f7:f7:94:5c:4c:a2:02:07:19:15:29:13:c2:
e7:a7:e6:d9:a5:0f:4c:06:03:a1:92:ef:44:b1:18:
91:f3:1e:98:81:c9:50:d3:e9:ca:bd:75:bb:a7:64:
7a:a0:25:bd:4f:ce:1c:da:db:0d:f2:e4:7f:71:2f:
eb:eb:9a:c0:09:c3:d9:69:f2:60:5c:00:7e:05:fa:
1c:d5:42:a7:e3:56:dc:54:74:10:b4:c0:dc:92:03:
b2:d7:98:08:09:f1:c1:fe:4f:20:2d:ea:82:27:de:
76:ed:5e:0e:c6:dd:56:24:66:2a:83:cc:d3:54:2c:
16:63:da:2c:d1:86:a5:82:bb:12:97:ca:f0:59:4c:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:F9:ED:A0:C4:05:D3:81:07:A7:EA:87:35:6C:A0:31:94:12:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/46012c-0851-4beb-ae8c-752c0de6c0f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/46012c-0851-4beb-ae8c-752c0de6c0f2/1/9xX57aDEBdOBB6fqhzVsoDGUEvM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.24.0/22
Signature Algorithm: sha256WithRSAEncryption
98:bc:16:2c:99:49:1d:18:2a:cf:15:e6:88:03:62:da:5a:37:
7d:9a:16:0d:a1:8f:a2:b0:73:70:35:71:76:2c:d7:d6:d9:6d:
f9:95:f9:a5:08:3a:a5:e4:bd:99:27:02:a2:3f:80:25:81:02:
90:98:a0:63:09:3c:55:c5:0d:30:fe:bc:17:ac:2e:55:5c:39:
fa:8b:ae:29:e8:38:a3:97:b0:9c:bf:20:ff:df:b7:68:a2:1d:
a9:46:1c:9e:68:44:74:f4:49:7f:e9:8f:af:77:7b:4c:61:c7:
33:05:f8:b1:a6:a1:a2:6d:0d:0a:1e:e4:e2:49:ae:34:d9:c2:
0c:2e:a4:d4:dc:41:25:ce:eb:25:7a:18:09:e1:26:0c:a7:02:
79:1a:e0:ac:63:50:23:80:0f:de:ef:02:47:8a:95:0c:06:d0:
54:19:6a:4e:9c:d6:6f:bd:40:25:95:45:82:30:66:49:dc:e9:
bd:fe:2e:15:e1:6d:c0:2b:43:4f:6a:05:bd:5c:df:6e:0e:d7:
7c:0c:0a:d0:30:cf:f0:51:13:c6:75:9e:9f:56:ec:19:c4:c7:
69:5e:b0:cc:02:ee:b9:10:e7:93:1b:77:ca:da:c0:e3:15:c6:
f1:7c:9e:1d:02:4e:a9:34:63:2e:1f:51:10:e8:6c:48:28:1e:
7a:dd:a7:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:10 2023 by rpki-client on console-fra.rpki-client.org