Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BSwVRg-jnGRxSWzRj8xAoYp5Sec.cer
File: BSwVRg-jnGRxSWzRj8xAoYp5Sec.cer (raw, json)
Hash identifier: WnYcZhhvb6cF3rVeF+zR6ESRNr6gLT7jczWedLZUHs8=
Subject key identifier: 05:2C:15:46:0F:A3:9C:64:71:49:6C:D1:8F:CC:40:A1:8A:79:49:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0183EA771821A10E9D40A0DC70727622163B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/BSwVRg-jnGRxSWzRj8xAoYp5Sec.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Oct 2022 09:40:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.238.116.0/24
IP: 185.238.118.0/23
IP: 2a0c:3480::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:77:18:21:a1:0e:9d:40:a0:dc:70:72:76:22:16:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 18 09:40:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=052c15460fa39c6471496cd18fcc40a18a7949e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:7a:43:23:33:23:27:49:4e:68:c1:49:9f:
7b:35:4a:a6:22:81:5a:38:26:a2:e7:b0:c1:f8:17:
9d:bc:cc:ad:94:22:ea:14:a4:72:72:e0:2c:ed:e6:
d7:45:16:0b:e7:1f:c6:0e:72:0f:24:4f:ed:2a:95:
29:c2:7a:9a:8b:0d:19:7c:ef:72:68:a1:51:77:f1:
20:e6:f1:8a:20:ae:92:ab:25:57:09:11:e1:d9:52:
c1:3c:a0:b5:5d:e9:53:a0:2e:27:29:53:71:86:f0:
0e:dd:66:d5:06:b1:c4:4c:24:be:8f:4e:9c:0c:d9:
c1:ec:14:1d:64:d1:1b:a1:f3:e0:bb:f9:09:58:e6:
4c:dd:bc:94:18:4a:34:71:2c:bc:00:1d:43:68:70:
36:69:d9:69:7b:65:ff:f5:5c:20:0b:8b:9f:1b:62:
20:95:bf:7a:fe:9e:fb:0a:8e:f9:7b:85:61:a6:b1:
16:bc:68:24:a2:76:db:f2:f0:70:6a:7f:32:c2:9f:
ca:d0:5c:da:b7:00:31:6f:d6:9d:b7:2c:e4:b4:0c:
a5:c1:9d:1a:85:26:03:b1:54:b6:a5:74:f4:4e:68:
a8:08:d5:44:ba:f7:84:61:88:a4:0f:91:db:0f:bc:
ff:54:4a:d6:94:70:1a:5f:cc:e8:88:56:0b:73:11:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2C:15:46:0F:A3:9C:64:71:49:6C:D1:8F:CC:40:A1:8A:79:49:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/BSwVRg-jnGRxSWzRj8xAoYp5Sec.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.116.0/24
185.238.118.0/23
IPv6:
2a0c:3480::/29
Signature Algorithm: sha256WithRSAEncryption
23:cb:1d:af:43:8f:a3:6c:ec:c2:b5:34:e1:b0:05:dd:d0:84:
1f:08:d2:4e:42:9a:48:6e:72:7b:de:61:ab:34:a8:3a:e1:81:
61:42:4b:13:23:3d:25:03:95:15:de:79:06:fa:d6:c9:28:4b:
d8:2b:ba:b6:82:b1:ad:96:30:9c:99:85:e7:bf:a0:b3:a9:23:
c6:12:26:f2:da:4e:af:b2:bc:e0:21:9d:9d:d6:b7:17:d2:b7:
88:7f:95:f8:0b:5a:eb:df:ac:0c:4f:67:4b:a1:3b:ef:24:8b:
03:47:b4:a7:25:6f:0f:41:07:14:6e:b9:16:3d:90:71:55:55:
46:a4:d5:6e:ae:d0:e2:d5:38:2f:26:db:b0:52:08:42:55:31:
6a:ec:2d:b7:cc:18:dd:6a:bd:ed:02:a9:f1:23:ed:d9:38:c6:
d5:94:66:ef:8b:47:b4:d0:18:b4:dc:c5:2c:5d:a7:9d:58:77:
35:4d:b0:5d:f8:9a:94:ce:67:50:09:80:da:a0:08:e0:d1:6a:
6f:58:63:29:de:4d:92:33:33:e2:ce:61:a9:23:b4:94:98:19:
ec:66:b6:5f:3d:ce:43:d3:42:17:80:8c:99:07:bd:4b:18:7a:
a2:43:9f:59:0d:2a:0d:b1:28:a1:39:d9:1f:0d:cb:8e:ee:06:
c5:d0:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:17 2024 by rpki-client on console-ams.rpki-client.org