Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AWTMas9a6_FyY5uVF1o7WGwf4mE.cer
File: AWTMas9a6_FyY5uVF1o7WGwf4mE.cer (raw, json)
Hash identifier: JmH4ymM7UsEH58UdL3xl9qDUIudkSmQ40CLrg48MQo8=
Subject key identifier: 01:64:CC:6A:CF:5A:EB:F1:72:63:9B:95:17:5A:3B:58:6C:1F:E2:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A12D103CD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/78dcc5-0aee-447d-8f51-65e521b571e1/1/AWTMas9a6_FyY5uVF1o7WGwf4mE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/78dcc5-0aee-447d-8f51-65e521b571e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:53:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 85.202.203.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692245773523 (0xa12d103cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0164cc6acf5aebf172639b95175a3b586c1fe261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:7c:67:a2:0e:f9:16:24:e4:e7:b3:5f:b5:
be:44:a7:da:bc:ac:2c:f5:67:e3:0e:ca:a0:0b:34:
4b:46:e7:8c:a8:1b:26:54:b9:78:c4:08:ce:a9:1b:
30:b4:63:eb:e7:d7:cd:36:14:e7:6d:f1:2b:b1:b9:
e9:7e:c8:6c:df:af:86:31:53:00:92:7d:72:80:63:
d9:fa:9e:bc:58:07:cb:50:20:08:52:43:25:64:42:
a4:ad:e5:9a:98:7a:34:38:bf:78:24:07:e5:58:aa:
74:02:be:17:e2:c0:dd:a9:47:93:b5:2c:d9:f7:50:
d3:f2:69:5f:47:b6:6b:7b:bb:76:2d:98:31:95:1c:
c8:da:2e:fd:53:47:a9:dc:06:9e:c9:5d:f4:80:77:
4c:33:a0:b9:75:36:50:45:14:ad:66:5f:c5:66:a4:
15:8c:9c:be:30:52:16:46:d9:14:3a:9f:1a:33:8d:
14:12:3b:b8:00:48:0f:be:3e:76:5c:44:36:3c:ef:
37:31:b0:e9:fa:f1:0f:45:df:cb:a2:5e:52:d1:2a:
1d:09:a2:ba:b8:49:6e:64:1d:02:9c:39:65:d4:ce:
f7:6f:d6:06:f0:fc:20:32:d7:18:5b:6c:94:41:95:
1a:c6:d0:42:55:07:d4:c8:18:e1:d2:ed:3e:42:2f:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:CC:6A:CF:5A:EB:F1:72:63:9B:95:17:5A:3B:58:6C:1F:E2:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/78dcc5-0aee-447d-8f51-65e521b571e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/78dcc5-0aee-447d-8f51-65e521b571e1/1/AWTMas9a6_FyY5uVF1o7WGwf4mE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:95:55:f9:ff:54:ad:a2:60:b1:bb:db:36:b2:37:36:d1:ec:
5a:93:96:2e:33:7e:65:8a:66:32:9c:f6:59:8f:d0:22:8b:cc:
56:43:3f:ec:59:9b:7c:ae:47:10:c8:78:04:12:fa:98:e7:78:
7c:ca:19:fe:aa:df:97:16:e8:41:3f:06:40:97:97:47:0a:1d:
73:3b:89:62:93:74:d8:49:a6:4e:30:52:9b:9c:9c:a5:a2:ec:
d2:eb:50:b5:17:0f:2b:1c:dc:27:ef:56:15:8d:0b:0b:4d:26:
83:16:8e:45:17:86:60:05:7b:79:a4:4e:4c:48:d1:3d:99:2d:
24:26:4d:84:ee:96:03:0e:17:7c:34:3d:59:df:e0:26:51:22:
2f:a0:3b:24:56:3c:17:c4:b7:9e:a2:d7:7b:ed:3b:c3:37:48:
24:6d:3e:24:90:d7:06:38:c7:e4:6e:48:5e:bb:40:9f:d6:73:
ae:30:36:67:d6:5f:a0:9b:d9:32:ea:3a:cb:c4:7a:47:d0:1f:
2f:f0:18:0b:fa:fa:b5:92:bb:15:b8:dc:ac:24:83:69:6c:ac:
8f:0e:52:79:f2:8d:f8:c4:c3:6d:5b:c4:b4:50:b6:e8:29:b4:
fa:d4:bf:06:f6:3f:d5:c5:cd:bc:c3:93:a8:fd:5f:1b:a4:e8:
b8:0e:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:58 2024 by rpki-client on console-ams.rpki-client.org