Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AdISmEBiigJ9j5FHIp-vDW0fPsY.cer
File: AdISmEBiigJ9j5FHIp-vDW0fPsY.cer (raw, json)
Hash identifier: jyDTmJZz9NeQWUhWBcRp+GLsVilGssm81bs7CLkO+78=
Subject key identifier: 01:D2:12:98:40:62:8A:02:7D:8F:91:47:22:9F:AF:0D:6D:1F:3E:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B2DFEA4AD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/059119-b3fa-4199-9d03-40e60832a86d/1/AdISmEBiigJ9j5FHIp-vDW0fPsY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/059119-b3fa-4199-9d03-40e60832a86d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Jun 2022 14:00:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a0f:3bc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768260852434 (0xb2dfea4ad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 7 14:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01d2129840628a027d8f9147229faf0d6d1f3ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:b4:5b:e7:fa:95:ae:0b:57:60:5e:f2:06:
14:ef:f4:b7:7f:0f:8f:8b:16:83:b7:1a:cb:eb:e0:
ad:38:02:f1:19:57:d4:77:e7:98:64:f8:64:83:28:
d2:b8:6c:a8:51:c7:2e:5f:b2:e2:e0:e4:a5:ac:24:
cc:2a:0b:7e:88:fa:0f:65:6a:b8:d3:48:c3:f5:4c:
cb:de:8b:2b:d3:54:a9:c2:a6:4c:b3:e9:76:3f:80:
e3:60:19:8a:87:21:38:1a:a6:6e:e3:7c:ec:2e:8c:
e9:c4:91:d8:a1:db:5c:0c:6b:8d:55:cb:e3:8e:d0:
aa:e1:4a:6d:72:1c:97:3e:47:ba:eb:af:0a:00:80:
7e:a3:62:eb:c6:47:95:4e:31:92:79:f0:b3:bd:f0:
69:0e:8d:27:e2:29:eb:eb:a8:00:53:f8:4b:48:01:
2d:f4:aa:06:31:4c:f5:90:92:35:70:67:77:ef:48:
79:61:65:97:36:3a:50:2f:33:5d:05:99:7e:c1:09:
ef:b6:34:01:d2:c0:fd:1e:d9:82:df:d3:35:eb:0a:
71:e6:b8:10:d8:66:4e:37:fa:22:b9:37:80:34:94:
b2:13:a5:c4:60:ac:18:1e:66:ee:88:39:b8:45:e5:
a5:b2:76:e8:56:3e:4c:d7:b4:38:ec:07:8c:42:25:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:12:98:40:62:8A:02:7D:8F:91:47:22:9F:AF:0D:6D:1F:3E:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/059119-b3fa-4199-9d03-40e60832a86d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/059119-b3fa-4199-9d03-40e60832a86d/1/AdISmEBiigJ9j5FHIp-vDW0fPsY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:dc:e0:1e:d4:c5:26:cd:cd:05:48:0a:a5:fd:c4:42:e1:cd:
7f:02:dc:6a:ea:c6:f1:90:76:d2:e5:f6:74:73:03:d6:d8:e1:
30:dc:9a:40:da:43:65:c4:59:0f:7a:02:48:67:27:fc:7c:dd:
e0:29:91:5f:d6:cd:a5:93:cc:84:c5:7a:ce:13:b3:55:b6:63:
51:22:da:40:95:89:1f:18:81:b8:96:12:d6:bc:fb:fe:84:8a:
98:ec:da:67:75:81:32:40:d2:f6:2a:ea:76:4c:e8:1b:e6:3d:
31:e4:4d:5e:59:2b:ae:0d:7f:05:74:4c:06:90:d2:13:b7:4d:
11:03:08:82:85:75:90:27:ca:67:32:b8:08:5a:a2:c2:75:c0:
93:df:82:e1:1d:c1:b0:e5:6d:9f:b9:f9:66:e1:0d:5a:9b:2c:
33:e1:55:07:59:a5:6f:25:8d:18:ed:2a:94:de:87:bb:10:0e:
b2:43:74:93:09:1c:3d:5c:0e:54:3d:8a:b7:13:43:b7:83:8d:
49:e9:de:ac:23:43:9e:d7:75:81:e0:39:b0:36:76:20:29:ba:
00:08:b2:2f:1c:98:7e:b5:a6:f8:4e:29:0d:8d:86:ce:81:36:
72:3c:82:38:84:f7:cb:19:c8:bf:b0:54:57:01:27:70:7e:f2:
00:a6:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-fra.rpki-client.org