Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AOclSTOkkAWSc76B8nXnHz9Xy-0.cer
File: AOclSTOkkAWSc76B8nXnHz9Xy-0.cer (raw, json)
Hash identifier: Cgn4F0veZw06IkBtmNGBFYxGdSKFckUui37m1+USJRc=
Subject key identifier: 00:E7:25:49:33:A4:90:05:92:73:BE:81:F2:75:E7:1F:3F:57:CB:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 8306BD39F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/0ddfaf-ee2e-4882-a9b6-baabdf2ecb0b/1/AOclSTOkkAWSc76B8nXnHz9Xy-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/0ddfaf-ee2e-4882-a9b6-baabdf2ecb0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 06:58:07 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 194.31.236.0/23
IP: 194.31.244.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562753780216 (0x8306bd39f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:58:07 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=00e7254933a490059273be81f275e71f3f57cbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:c5:0d:bc:c0:8a:23:e5:0c:07:28:f8:71:
a3:26:3d:96:5d:7f:54:4e:f0:aa:87:bf:dd:de:68:
e5:14:5d:23:4b:48:36:de:b5:fa:12:e5:18:49:1a:
60:82:7e:10:31:90:25:30:71:45:97:af:a8:fc:99:
2e:4e:95:76:05:fd:6b:bd:02:85:ae:a9:32:98:42:
fd:21:ef:47:6b:8c:80:77:d9:2a:a4:d8:b5:e8:16:
1d:6f:ba:27:9b:cd:1d:54:8e:b9:ec:a5:f5:4c:15:
4c:0b:41:f8:32:d3:a9:24:95:94:00:f8:44:b5:30:
ee:05:a9:0e:ea:16:97:22:73:4c:35:d1:d7:5c:52:
d7:59:d1:bd:b8:f6:f7:74:0e:c7:94:35:23:2b:4d:
f0:97:c1:17:09:51:2c:fb:95:6e:ef:06:fe:14:7d:
be:7e:b5:41:61:98:93:1e:5f:13:dd:da:2c:ab:19:
f5:54:39:74:ce:17:8b:b2:ba:06:0c:60:d8:a8:0b:
76:8d:69:eb:7a:c3:f9:97:88:dc:e2:43:e9:31:35:
0f:ce:60:88:1c:14:18:ef:bb:42:ca:00:2e:17:6f:
cc:94:53:0f:c1:62:15:f1:30:ac:8d:20:1d:56:a2:
1a:56:d8:79:f1:0f:cb:9b:2b:6d:e5:0f:52:07:87:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E7:25:49:33:A4:90:05:92:73:BE:81:F2:75:E7:1F:3F:57:CB:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ddfaf-ee2e-4882-a9b6-baabdf2ecb0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ddfaf-ee2e-4882-a9b6-baabdf2ecb0b/1/AOclSTOkkAWSc76B8nXnHz9Xy-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.236.0/23
194.31.244.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:e4:5f:fc:87:9f:46:11:e1:cb:5b:7f:82:28:7b:b9:b5:7e:
d5:0b:39:72:d6:9f:d3:f7:6b:78:59:bf:00:3e:10:b8:07:41:
d1:11:96:15:03:3f:47:12:74:5d:9c:27:73:e6:58:16:04:23:
27:e2:c0:8a:5d:70:e8:2b:fe:81:8a:14:99:28:0f:49:07:13:
2f:3a:27:68:cc:22:1b:a3:76:b7:6b:cf:68:aa:50:06:54:b6:
20:be:cb:8f:bd:9e:3c:3e:1c:e8:53:cf:70:50:b6:24:e4:3a:
b9:74:e6:d5:21:e9:b1:86:57:82:60:af:ec:06:15:f7:ce:83:
7b:44:1a:a0:23:29:f8:a4:48:cd:d1:44:03:1e:9e:1f:13:48:
0d:16:6a:cc:28:2e:27:08:ae:b2:7d:ed:f6:22:14:2e:bc:83:
92:d0:da:93:5d:0c:67:db:56:e1:3b:2b:31:8f:f4:e9:25:78:
30:00:62:6f:c0:14:ea:d2:8a:32:ed:c5:00:8b:37:29:87:26:
f6:fb:57:94:05:42:6c:d1:68:04:86:04:41:76:5f:54:94:ed:
75:8e:80:71:44:cc:55:b2:d6:3c:bc:4c:2c:19:4a:e9:9f:8d:
f7:a5:6b:b1:65:52:ae:77:e7:3c:a4:4e:d0:9e:68:c0:98:1e:
c6:f2:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:59 2023 by rpki-client on console-ams.rpki-client.org