Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AodBeZrZVur95Bv9JGt6TYf6x9w.cer
File: AodBeZrZVur95Bv9JGt6TYf6x9w.cer (raw, json)
Hash identifier: R3itxW/jaaXGKCtN26YFnaBNMlYGInJjimH4vKWvauc=
Subject key identifier: 02:87:41:79:9A:D9:56:EA:FD:E4:1B:FD:24:6B:7A:4D:87:FA:C7:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F0C73CFA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/b9cfb7-83bc-4334-98c6-264651c1eb2d/1/AodBeZrZVur95Bv9JGt6TYf6x9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/b9cfb7-83bc-4334-98c6-264651c1eb2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:55:46 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.135.128.0/22
IP: 2a0e:8c40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683108716450 (0x9f0c73cfa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=028741799ad956eafde41bfd246b7a4d87fac7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:b7:1a:16:88:b4:7a:b5:9c:1d:c7:a5:66:
c0:49:f2:60:bd:1a:71:58:1e:5a:08:62:b3:b7:aa:
9f:85:f9:bc:e1:53:f3:8b:5d:55:a8:cd:86:d6:eb:
01:99:28:5f:ef:b2:c5:1d:8d:72:8e:84:0a:f5:b2:
94:7e:bb:3e:e2:1a:53:0e:33:3e:76:73:04:61:99:
5d:64:5e:cc:0e:57:3b:16:cd:e0:ff:fc:82:55:74:
42:09:ea:5b:1c:d4:30:8f:8a:20:cc:b4:dc:0a:9a:
9c:ee:65:56:54:9a:3d:aa:92:2a:20:bb:5c:c7:12:
1f:3c:4b:06:68:3b:09:1c:6b:23:a5:04:cc:55:1b:
a1:52:a6:96:20:4b:5d:65:2c:0e:7a:d1:e4:1a:74:
19:d2:13:f9:ce:0a:36:87:03:29:81:cd:1d:b8:45:
fd:f6:f1:b5:48:7b:8a:41:72:88:94:72:b2:4f:f7:
f5:c0:92:b4:72:8e:29:8a:16:b0:f4:3c:aa:63:b4:
39:7e:67:14:e4:50:22:06:da:74:e0:82:1e:3f:fe:
5d:d2:85:98:d8:bc:7b:89:31:93:66:ba:70:87:e7:
4d:7b:b5:ef:61:1b:54:2e:15:de:59:be:5b:c4:6f:
58:0c:50:8f:ca:5f:8a:da:b4:80:e4:51:b2:1a:60:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:87:41:79:9A:D9:56:EA:FD:E4:1B:FD:24:6B:7A:4D:87:FA:C7:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b9cfb7-83bc-4334-98c6-264651c1eb2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b9cfb7-83bc-4334-98c6-264651c1eb2d/1/AodBeZrZVur95Bv9JGt6TYf6x9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.128.0/22
IPv6:
2a0e:8c40::/29
Signature Algorithm: sha256WithRSAEncryption
98:f6:60:03:af:03:61:31:51:83:d9:0c:d4:a5:53:f7:6e:fe:
55:05:ae:45:62:04:71:dd:c2:c2:55:76:33:4d:e0:3e:6a:37:
15:4c:e0:6f:88:73:2d:cb:b6:81:18:26:df:c9:6f:ed:11:0f:
1d:70:cc:49:5c:c5:20:5f:8c:59:64:95:9d:71:f6:c2:ac:c7:
9a:7b:cc:db:9f:bb:c1:28:07:93:78:e7:5e:4c:98:36:b5:ca:
01:52:c7:43:3a:42:37:c9:06:c5:be:a1:e7:82:98:fa:58:b8:
ca:ab:c7:54:eb:bc:89:91:cd:bf:79:19:d6:c7:36:27:4d:f0:
4d:90:0a:48:92:e3:6d:22:61:04:9a:de:eb:1a:81:05:2e:04:
09:0c:57:2d:48:7b:b1:8e:2c:31:b7:e2:d1:2a:a4:dc:32:9a:
1e:63:a7:92:89:71:dd:53:dd:7a:b9:7b:94:fb:1d:14:e7:54:
40:e9:f8:99:ec:a5:e6:e2:8c:17:eb:55:b1:fd:f0:f3:72:ab:
56:dd:1c:af:26:27:6c:49:b5:4f:d2:a4:c1:ba:6b:0c:99:b7:
66:98:f4:f2:e7:08:0c:a0:05:4c:72:ea:0e:ad:aa:d8:de:06:
c3:51:fc:32:1c:ed:c3:77:12:b8:26:43:03:1f:e2:41:42:5e:
56:06:76:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-fra.rpki-client.org