Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ANtD1l2SG_lNUc_xjqwxLh8mKSw.cer
File: ANtD1l2SG_lNUc_xjqwxLh8mKSw.cer (raw, json)
Hash identifier: DMOzkX4u5eJWW/3FHLMSwqZ8+mUPeLP3U3p1ZewNoIE=
Subject key identifier: 00:DB:43:D6:5D:92:1B:F9:4D:51:CF:F1:8E:AC:31:2E:1F:26:29:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7DEBF16B3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/f5c8d4-8999-4a62-b0ea-147a662e527f/1/ANtD1l2SG_lNUc_xjqwxLh8mKSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/f5c8d4-8999-4a62-b0ea-147a662e527f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:38:53 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 195.242.72.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540829379387 (0x7debf16b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:38:53 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=00db43d65d921bf94d51cff18eac312e1f26292c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:ac:f7:82:14:0a:be:15:45:b3:26:97:43:
b8:2e:a7:11:d6:da:16:a8:ef:c1:14:e1:88:88:71:
87:4d:26:79:9c:35:9a:2b:23:5b:c0:5f:f0:93:44:
7c:5a:ce:6c:d9:7f:89:78:5e:86:a5:9b:9e:60:3d:
8b:52:2d:37:78:34:50:b5:ad:e8:01:53:bd:46:98:
a3:ca:52:b9:b8:fa:93:d6:45:b5:37:12:ea:c1:60:
a7:94:14:76:9b:60:ae:80:b3:5d:17:01:64:f0:1f:
5e:4e:61:5d:a2:62:51:33:59:be:18:71:60:ce:8e:
f6:10:ab:06:7a:b6:e0:58:9b:55:8c:af:4c:15:b6:
4f:44:f2:7c:7c:b7:de:b0:32:d9:6b:9f:1b:e7:0c:
b3:00:a7:be:74:62:c5:13:c4:9b:7b:49:ab:95:6a:
aa:62:29:a5:4e:ba:52:06:e0:4a:02:70:74:70:5b:
9d:b4:ae:17:64:d6:3b:7a:8f:6e:30:58:29:86:5a:
46:14:75:4b:e9:6c:6c:35:c7:55:2a:04:dc:b5:70:
bc:64:ff:ea:c0:bf:17:9f:12:e9:a6:3e:cc:04:c6:
a9:c1:49:9d:3d:54:e1:7d:63:a8:f5:f0:e4:11:d8:
96:fa:19:26:79:3c:06:6e:bc:97:04:d5:f6:5b:a5:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:43:D6:5D:92:1B:F9:4D:51:CF:F1:8E:AC:31:2E:1F:26:29:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f5c8d4-8999-4a62-b0ea-147a662e527f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f5c8d4-8999-4a62-b0ea-147a662e527f/1/ANtD1l2SG_lNUc_xjqwxLh8mKSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.72.0/22
Signature Algorithm: sha256WithRSAEncryption
32:0f:fe:10:b7:53:23:b4:37:07:cf:c4:7a:a8:20:e6:35:fe:
1e:96:97:a0:45:54:0e:e5:9b:73:b4:6c:0b:2d:f4:e0:06:5a:
bb:a2:93:6f:59:93:74:06:f0:b3:63:89:09:2e:4b:47:3b:f2:
1b:1a:76:88:89:c2:8f:7b:0f:07:69:04:78:80:bf:b2:aa:4c:
6b:02:ca:31:f4:d8:0f:59:f9:01:02:47:54:2b:b3:a8:9d:13:
f4:9c:95:28:cf:b5:1c:6d:46:c1:c3:9a:17:e8:09:54:3f:5f:
e3:3f:e1:3c:5d:cc:19:d9:43:3b:61:48:ab:72:f5:0d:6a:a5:
91:8f:d4:66:2f:f2:bd:80:75:3b:1c:ec:a7:90:f0:b6:b4:bb:
ad:15:d3:9c:a9:42:d7:25:f4:a0:54:3a:16:71:f4:44:b9:2e:
0c:8f:16:77:7a:3c:63:89:83:04:ed:b0:42:de:c3:f5:d1:4f:
a8:08:6b:97:09:d7:d3:f2:6a:63:80:66:97:86:54:05:db:f8:
19:b7:39:ac:4d:1e:1c:a4:75:1c:8b:cc:29:c9:67:33:cd:3c:
34:f1:26:80:17:bc:00:79:d2:76:cf:9e:7e:57:cf:1e:35:cf:
22:01:54:4f:16:dc:59:bf:bc:ea:ff:5a:7f:fc:35:81:59:e0:
9c:67:d5:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:11 2023 by rpki-client on console-fra.rpki-client.org