Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BW2pypScCwlk9myWg6srtUERvhc.cer
File: BW2pypScCwlk9myWg6srtUERvhc.cer (raw, json)
Hash identifier: Lsrz1+h06IJP5bAeDYS1r6z9PxeDGOjpqtij89CTKnE=
Subject key identifier: 05:6D:A9:CA:94:9C:0B:09:64:F6:6C:96:83:AB:2B:B5:41:11:BE:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A8097194A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/85f3ec-06b9-440a-8baf-34dcd749a6cb/1/BW2pypScCwlk9myWg6srtUERvhc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/85f3ec-06b9-440a-8baf-34dcd749a6cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:55:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 152.89.40.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663582349642 (0x9a8097194a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=056da9ca949c0b0964f66c9683ab2bb54111be17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:bc:3e:a3:11:f0:6f:bb:a7:db:f1:fc:ca:
ff:f8:ae:ef:32:85:cd:a0:50:6f:c2:fe:03:76:d2:
ba:d3:4c:bb:93:d4:5f:d6:7a:a0:c7:30:be:86:78:
5c:2c:0b:91:d4:0c:d5:55:06:5d:9b:a6:69:4f:15:
14:d2:c6:d6:f0:9c:f9:04:26:9a:d7:a4:5f:f9:82:
82:05:52:55:f6:b6:af:63:04:c2:79:02:fa:f8:72:
32:ee:b2:5a:20:4a:80:97:bd:06:6d:c3:0d:51:41:
ab:83:de:47:f7:8a:42:15:4c:31:a4:80:88:93:bd:
ac:db:e1:6c:ee:8d:df:ed:c7:bb:f9:69:20:d6:da:
b8:b3:95:a9:1e:13:7e:c2:8d:87:35:d8:fa:f8:26:
b6:c3:af:52:b9:8c:b5:11:9e:f4:e3:aa:f9:02:0f:
9b:53:39:5c:28:30:55:23:3e:13:3b:62:c6:78:ba:
a7:e0:c1:8a:50:b9:d9:4b:33:74:5f:20:e9:35:95:
20:78:f6:43:fb:f3:1d:e9:85:b0:da:e7:74:f3:d0:
38:ef:2e:6c:61:66:97:24:a0:ae:a7:58:12:a9:50:
89:51:c4:f9:f7:2b:a6:36:d3:4e:4f:eb:96:dc:98:
c2:c0:67:26:e6:6c:bc:58:9e:35:22:47:8a:4d:e8:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6D:A9:CA:94:9C:0B:09:64:F6:6C:96:83:AB:2B:B5:41:11:BE:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/85f3ec-06b9-440a-8baf-34dcd749a6cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/85f3ec-06b9-440a-8baf-34dcd749a6cb/1/BW2pypScCwlk9myWg6srtUERvhc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.40.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:36:4a:43:18:5b:80:ab:4c:18:fd:b2:2e:56:e8:a7:b1:eb:
f6:d5:bb:11:03:25:56:19:2f:3f:75:b1:94:ce:47:58:11:9a:
d1:a8:01:71:f9:c1:da:30:61:47:07:d7:98:e1:d7:e4:c4:6a:
b6:5a:95:ab:92:da:25:ed:99:93:a9:bd:0b:d7:df:71:d5:25:
ac:a5:22:84:a2:2d:7a:c2:1e:7f:46:1f:da:3f:18:27:33:66:
96:d9:76:b9:38:e4:9d:35:fe:7d:c9:8a:33:0b:18:5b:b9:12:
41:0e:da:dc:f9:ed:20:26:db:d7:47:54:1f:c2:8a:73:66:ca:
cd:4b:18:f0:ef:99:ff:9e:f1:9a:b1:78:48:89:86:53:3c:59:
a7:70:63:68:88:2e:46:13:a6:a6:aa:6e:d0:05:49:ea:4f:44:
06:ef:ba:c4:b3:3d:1d:90:65:0a:3f:51:1e:79:7b:b2:97:47:
d5:2d:83:17:0f:ab:e6:9a:be:0a:57:fe:88:c5:c1:8a:e1:4c:
6b:a4:f6:2d:51:b0:74:fa:b8:37:3d:72:c0:5a:bb:f6:ee:4b:
a9:88:5c:9e:8d:01:d2:d2:42:91:9d:bb:61:77:73:39:63:4c:
b7:d1:15:40:a5:2f:44:80:c8:67:ad:05:5e:b2:31:c0:be:fb:
b7:8a:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:42 2024 by rpki-client on console-fra.rpki-client.org