Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BgGo2fm7T3nkIeT68zPz-rngKtw.cer
File: BgGo2fm7T3nkIeT68zPz-rngKtw.cer (raw, json)
Hash identifier: RWkE0H2sAjP5X97nx96NyLm5nr0A88aj29nI97wAQBQ=
Subject key identifier: 06:01:A8:D9:F9:BB:4F:79:E4:21:E4:FA:F3:33:F3:FA:B9:E0:2A:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E7214FB7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/b83c2b-9115-436d-8e03-47831aa4baef/1/BgGo2fm7T3nkIeT68zPz-rngKtw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/b83c2b-9115-436d-8e03-47831aa4baef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:02:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.140.60.0/22
IP: 2a0e:c040::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680518810493 (0x9e7214fb7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0601a8d9f9bb4f79e421e4faf333f3fab9e02adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:07:55:ba:f3:38:15:e5:92:8e:cd:f9:88:
cd:1f:51:64:ca:47:fd:a0:f6:d6:69:fe:aa:f9:94:
df:24:50:03:9f:11:60:75:37:08:1f:44:03:44:16:
d7:00:d7:93:8b:34:c7:20:1d:3a:e8:84:bf:2b:0c:
fb:a9:c7:ec:cc:54:bb:09:27:60:55:8e:cc:b4:ba:
c1:c7:54:d0:ab:0d:23:d0:d3:a6:86:c7:3e:dc:48:
ac:92:40:6c:6b:e6:01:37:07:59:40:7d:64:05:f0:
21:72:50:6e:c3:42:c2:f8:09:29:e9:60:73:c6:51:
57:85:a4:b0:a1:ac:0e:dc:4a:e7:be:2d:da:ed:de:
1c:40:75:0e:b9:33:69:35:2e:3b:bf:40:41:d6:3b:
fb:23:f5:ec:a0:9d:23:de:31:7d:ba:e9:ce:4a:ef:
86:5b:69:bc:96:8b:06:0a:bc:9c:6d:40:f4:f4:fe:
f8:b6:d2:a0:1b:ab:05:27:32:20:85:98:9a:7e:b5:
c7:5b:6d:54:8c:85:cd:79:c9:f1:06:fa:e6:ca:ad:
d7:17:ee:3b:46:31:f7:30:10:de:5b:65:3c:ae:f6:
5a:b8:a4:5d:c6:af:2f:c8:c8:55:d8:ed:0c:ab:42:
01:09:18:d8:18:36:60:e7:6d:91:02:83:e5:5e:83:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:01:A8:D9:F9:BB:4F:79:E4:21:E4:FA:F3:33:F3:FA:B9:E0:2A:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b83c2b-9115-436d-8e03-47831aa4baef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b83c2b-9115-436d-8e03-47831aa4baef/1/BgGo2fm7T3nkIeT68zPz-rngKtw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.60.0/22
IPv6:
2a0e:c040::/29
Signature Algorithm: sha256WithRSAEncryption
17:b9:1c:28:a0:96:8b:11:94:95:fb:15:77:dc:cb:87:32:5c:
83:3a:14:f4:f9:6a:f3:f4:95:e0:8e:28:4a:b9:f0:76:fa:c9:
a1:a0:de:5b:b4:5e:3c:c2:d7:54:1b:fb:48:89:aa:9a:ba:1c:
40:ac:3b:90:dc:1a:5a:5a:e4:57:2a:aa:b9:b0:74:6d:8a:ca:
10:19:8c:77:45:37:64:4f:cf:76:54:18:63:41:4a:72:1a:01:
96:75:9d:b5:a8:cf:0d:d4:c5:0d:57:5f:33:6a:3e:6c:9d:54:
9c:65:bb:f7:a6:20:ad:52:54:41:b0:ee:73:ff:3c:66:4d:4e:
13:a7:86:6b:9b:6d:98:97:b7:d0:7a:ba:a1:4d:37:76:de:da:
cb:3c:54:3c:03:5c:5c:23:9b:bb:23:d0:a2:91:97:f6:f6:6c:
5e:bd:2f:e3:8b:be:de:11:36:8d:ea:d8:2d:ee:9e:ec:f9:56:
59:cc:29:2e:a4:f7:8e:4d:0e:81:62:cf:66:6a:63:f0:49:62:
37:16:f1:c4:91:b6:59:9e:85:57:25:ab:0e:bf:c8:54:1d:a0:
b7:a5:ff:10:d3:b5:90:3f:bb:69:91:87:84:e7:62:bc:d9:e6:
e4:a2:1e:1a:3d:dd:40:98:77:3f:4e:40:54:b3:ed:64:bc:df:
47:69:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:45 2024 by rpki-client on console-fra.rpki-client.org