Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ARI4UWlRqmqjU-7Ny7e6SNQoO4o.cer
File: ARI4UWlRqmqjU-7Ny7e6SNQoO4o.cer (raw, json)
Hash identifier: UMzKV+0KfMb1EMWkmmLDDiM4DaRXdJ5svH05qiyOFXg=
Subject key identifier: 01:12:38:51:69:51:AA:6A:A3:53:EE:CD:CB:B7:BA:48:D4:28:3B:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 761F017B84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/c5fa28-685f-4c3d-ad95-c881028071b9/1/ARI4UWlRqmqjU-7Ny7e6SNQoO4o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/c5fa28-685f-4c3d-ad95-c881028071b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:20:58 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 195.8.102.0/24
IP: 195.8.110.0/24
IP: 195.8.112.0/24
IP: 195.8.114.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507326331780 (0x761f017b84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:20:58 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=011238516951aa6aa353eecdcbb7ba48d4283b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:93:a2:22:35:cb:31:2e:34:79:02:c7:e7:
14:0f:6c:f1:61:02:8d:1d:80:1d:02:70:00:e7:3a:
90:66:2c:e9:9d:2d:86:d7:34:c4:f1:08:b4:0c:a9:
84:bb:54:13:42:dd:c0:0d:04:77:d8:2b:cc:f8:c1:
a5:e5:6f:01:db:38:d0:4c:cf:e8:f9:6b:61:99:44:
eb:f8:d9:5a:06:bf:29:b0:f1:d9:9a:7b:16:b0:39:
f8:ad:85:a2:cc:f0:8d:16:9b:72:97:20:5e:69:59:
ce:ce:dc:02:e0:23:37:e9:41:eb:61:c1:3c:19:d9:
c2:5a:f3:f5:d0:68:0f:07:7d:f3:07:22:57:6f:d9:
4d:16:28:65:4b:d6:4a:86:64:f7:a2:27:43:39:33:
b4:e4:39:93:7b:86:ba:f7:92:11:20:84:0a:ec:68:
ae:f3:80:04:9d:50:d0:6d:bd:d8:8c:18:84:42:8d:
2a:d6:64:02:0e:c9:05:e0:a0:fd:4d:3f:8a:28:5c:
f9:23:62:7f:0b:45:55:2a:99:c2:61:0c:a8:c6:55:
15:d9:ed:50:08:94:8c:2a:2f:a1:b8:1a:96:a3:c0:
4a:81:ea:78:41:35:8e:1a:0b:1b:d3:a8:fd:61:4a:
69:d9:e3:e9:69:55:a1:f5:01:b3:3d:18:9f:10:9f:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:12:38:51:69:51:AA:6A:A3:53:EE:CD:CB:B7:BA:48:D4:28:3B:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c5fa28-685f-4c3d-ad95-c881028071b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c5fa28-685f-4c3d-ad95-c881028071b9/1/ARI4UWlRqmqjU-7Ny7e6SNQoO4o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.102.0/24
195.8.110.0/24
195.8.112.0/24
195.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9c:0f:b8:92:48:84:ff:47:a6:72:8a:20:3b:b2:48:4b:32:
9e:e3:7f:05:f6:b2:c1:9b:9f:7b:d0:2a:01:b8:74:c8:32:9d:
2b:2f:2d:f4:74:5e:62:a1:ad:52:7b:ac:12:6d:e8:81:e4:fd:
4d:35:e0:8e:19:de:f5:10:f1:71:5e:16:c7:bf:a6:df:78:7f:
4e:9b:77:70:35:45:b5:b3:81:d7:c8:04:05:50:75:83:6e:84:
c9:c7:65:ea:48:04:c3:e3:59:9e:c2:f6:da:a0:6c:e9:bd:df:
e7:92:42:d5:e3:80:d1:53:84:a6:7c:6a:4d:08:ec:e5:cd:f4:
f0:6b:b4:e6:3f:59:6b:3e:8f:69:e3:65:c0:36:a7:8a:b0:74:
87:f4:7d:a6:7c:3f:d6:30:08:57:10:7b:19:fc:50:59:b0:5b:
9d:1e:ce:82:c5:78:26:24:fc:d1:22:86:4b:2d:9b:d3:8a:51:
a7:54:75:dd:b0:26:9e:26:c2:95:d7:c3:95:dd:50:86:f1:5c:
ed:d0:69:6e:21:25:5e:62:db:0c:19:14:fe:ff:e8:dd:db:ca:
d1:cf:88:5a:b3:21:22:45:68:e2:ee:88:05:95:dd:81:44:4c:
d0:98:d0:94:8d:b0:43:11:58:c5:b9:2c:97:23:77:f0:a5:56:
c5:59:a6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:59 2023 by rpki-client on console-ams.rpki-client.org