Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AzQHU7gz2aPawzPv1JRx3AGgz08.cer
File: AzQHU7gz2aPawzPv1JRx3AGgz08.cer (raw, json)
Hash identifier: AkOd9ZY7na2ZTL3m+BvZ0Ccoo02XBXB1xd1UgIIDNfE=
Subject key identifier: 03:34:07:53:B8:33:D9:A3:DA:C3:33:EF:D4:94:71:DC:01:A0:CF:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6513E534E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/bcddf7-6ede-4a52-8315-50eeb6bf83d4/1/AzQHU7gz2aPawzPv1JRx3AGgz08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/bcddf7-6ede-4a52-8315-50eeb6bf83d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:00:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.235.229.0/24
IP: 2a0a:fc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714327610190 (0xa6513e534e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03340753b833d9a3dac333efd49471dc01a0cf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:b0:cf:95:f5:5c:3f:dd:2c:82:e4:7b:02:
cb:74:0b:f4:44:a0:b5:c6:37:90:6a:4c:81:c7:d3:
bd:1a:53:0d:58:92:c1:dd:cf:50:64:1e:73:73:2c:
11:56:cd:b5:56:f9:be:c4:dc:24:a0:72:ae:5d:2f:
db:9d:27:48:89:65:bf:d6:b9:24:e4:84:6e:91:72:
f6:c2:ab:9a:e2:f8:61:a2:6a:14:d2:20:9d:d0:d2:
e4:2b:65:1e:13:20:b4:71:8b:a0:34:49:a5:19:b9:
c4:1e:5b:9b:68:69:b3:1d:0d:e6:34:0a:34:f7:bf:
30:b5:93:4c:1c:18:c7:e2:a0:bd:09:f1:a4:2a:c7:
1d:5c:ab:8f:8b:6a:05:0a:17:e8:93:84:b5:35:0a:
95:9b:3d:36:55:b5:8e:43:8b:cf:5a:d0:35:85:7b:
1c:67:96:ef:0e:ef:45:12:45:7e:94:61:b2:bf:c7:
0c:4c:95:76:61:ca:cd:5b:86:d8:d2:c3:a0:2b:f2:
ac:6b:12:72:8d:b9:59:32:a9:70:98:14:e0:e5:9f:
ec:d8:e9:cd:87:07:83:a8:21:6d:9e:d9:6a:b7:a0:
5a:bd:51:d3:e1:c9:19:a3:1c:f2:dc:9a:05:be:8b:
d5:90:9f:78:49:98:18:42:69:7d:82:33:9a:4d:10:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:34:07:53:B8:33:D9:A3:DA:C3:33:EF:D4:94:71:DC:01:A0:CF:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bcddf7-6ede-4a52-8315-50eeb6bf83d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bcddf7-6ede-4a52-8315-50eeb6bf83d4/1/AzQHU7gz2aPawzPv1JRx3AGgz08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.229.0/24
IPv6:
2a0a:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
56:2c:f0:6e:69:5a:8d:4e:14:7e:6a:0e:c7:5e:28:0d:66:96:
6a:49:dd:ce:ce:bc:ec:1c:cb:86:1c:67:8c:38:0e:d4:d4:a0:
a3:fb:00:27:bb:44:74:04:c8:1c:d4:0e:ca:da:24:a5:13:95:
b8:e4:06:40:89:95:32:58:a5:c4:da:f0:c6:08:56:a5:3c:24:
89:5c:cb:af:3e:e4:f6:3f:2e:cf:02:f2:02:48:48:2f:89:ec:
32:69:7e:4c:df:48:40:21:09:4d:4a:55:c3:ef:47:d1:d1:3c:
c0:90:70:5c:9f:eb:ff:ae:9c:7c:0f:0e:5c:e5:92:17:8a:a7:
2c:cb:40:af:82:8d:2a:fe:cf:77:2a:2a:43:0d:f5:e8:cf:7a:
f3:58:04:0f:b3:42:5a:e0:26:4d:10:d7:3e:c2:d2:52:56:46:
58:7b:05:1b:3f:dd:eb:94:08:bf:40:f1:b5:e0:d7:e9:95:22:
6d:17:73:56:47:17:ae:1c:cb:a4:e1:5d:f5:75:70:9d:18:68:
9f:41:8c:3f:c7:9b:ab:44:53:c8:74:7e:46:0d:2e:37:b9:04:
ee:89:e2:13:cb:ad:8c:c9:16:2a:e3:cd:3a:50:7c:3e:03:3f:
42:97:d4:5d:61:c3:40:da:f2:0c:13:ba:eb:c6:ca:af:4d:25:
d4:90:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:08 2024 by rpki-client on console-ams.rpki-client.org