Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AGXOUuqW8D2zDkWEQg64Z0PfMDI.cer
File: AGXOUuqW8D2zDkWEQg64Z0PfMDI.cer (raw, json)
Hash identifier: BDw8Pj12SI7Le1iiFHl4qUjDvwhLwnZnRRs5t1iUm3E=
Subject key identifier: 00:65:CE:52:EA:96:F0:3D:B3:0E:45:84:42:0E:B8:67:43:DF:30:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7561C75AE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a0cee-e8b7-4211-abfb-71285a953ec4/1/AGXOUuqW8D2zDkWEQg64Z0PfMDI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a0cee-e8b7-4211-abfb-71285a953ec4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:04:23 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 92.119.40.0/22
IP: 2a09:b440::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504151628517 (0x7561c75ae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:04:23 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=0065ce52ea96f03db30e4584420eb86743df3032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:26:9a:59:e0:28:77:04:a0:bd:a2:65:ce:
c0:74:8c:16:41:5a:75:25:67:7b:38:18:2a:15:85:
e7:ad:e5:7b:2d:c5:7b:5c:54:36:5f:0c:5f:93:48:
cd:dc:66:1b:01:ee:2e:15:69:73:76:cd:17:58:e3:
01:d3:f9:33:00:e2:cc:21:ba:f5:9d:f8:fa:35:47:
54:d2:47:97:2a:7c:26:8b:da:16:f7:61:f7:87:7e:
57:5a:6c:1b:91:af:52:d7:c5:af:70:f1:a8:52:68:
36:03:5e:44:33:be:a7:f8:80:f0:14:12:55:1a:28:
58:c1:1f:65:18:d9:50:fc:7e:a6:5b:31:f1:0b:1b:
80:fe:2c:5e:ef:e0:af:eb:2e:de:67:ea:70:6a:83:
ac:1c:e3:0e:f8:19:24:17:ea:69:55:f5:62:28:e2:
6b:f2:fe:87:cc:ad:fe:2c:08:a0:40:d8:7a:76:1b:
c9:44:00:cf:5d:37:81:65:0d:ea:a0:e3:f3:1c:e0:
ce:d2:c8:0d:8d:48:9c:6a:c0:32:e2:4d:b6:e6:11:
09:a8:a1:a3:8a:05:33:90:c3:93:65:7f:c0:4e:9b:
d7:48:ba:0e:8d:63:30:80:11:21:7b:79:74:0a:99:
84:78:46:ac:3e:a4:ae:3d:df:e4:6e:04:3b:56:ee:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:CE:52:EA:96:F0:3D:B3:0E:45:84:42:0E:B8:67:43:DF:30:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a0cee-e8b7-4211-abfb-71285a953ec4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a0cee-e8b7-4211-abfb-71285a953ec4/1/AGXOUuqW8D2zDkWEQg64Z0PfMDI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.40.0/22
IPv6:
2a09:b440::/29
Signature Algorithm: sha256WithRSAEncryption
11:9c:3a:42:bc:d6:c3:13:5a:a5:e8:81:9e:bf:48:19:4e:5f:
57:d0:e4:74:4b:b2:80:1f:29:51:18:1c:70:2b:a7:6f:c2:31:
3c:92:8c:8b:79:e0:77:67:63:50:db:0b:89:27:42:cf:ba:9a:
f1:91:82:9f:e3:d2:5b:7a:a3:36:14:2e:33:1b:05:00:5b:42:
50:17:f8:09:b7:e1:3e:37:96:0f:15:7f:94:6e:a7:ec:5a:9a:
41:b1:f5:bf:29:4b:6b:3f:d4:75:49:f0:01:eb:57:96:81:d0:
1e:ea:3a:af:4d:99:90:a5:19:da:c1:f4:68:f7:b2:2a:7e:b0:
23:e6:53:b6:eb:4e:b0:77:ab:e1:64:c2:84:60:b5:95:d6:70:
74:85:36:79:f7:48:61:24:75:49:59:c7:ad:69:29:15:47:fa:
80:3f:20:a3:e0:89:b4:67:18:88:90:11:bc:ca:32:d8:3e:a4:
59:3f:b9:de:b4:25:6e:cf:aa:c4:38:44:6b:cd:1d:f5:48:d1:
bf:91:ac:f6:0a:98:28:eb:43:20:0b:f0:86:15:db:67:e7:d8:
58:b3:28:51:9d:d4:7d:70:ae:35:92:68:19:f4:2f:0d:c3:fb:
69:01:86:ec:e8:e4:b4:1d:4a:60:91:dd:df:bd:97:80:c5:80:
a1:9a:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:11 2023 by rpki-client on console-fra.rpki-client.org