Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cb3CNZuK0vDGDvd00HHWcc7YBFY.cer
File: Cb3CNZuK0vDGDvd00HHWcc7YBFY.cer (raw, json)
Hash identifier: l139UxX4kGUn7j++nFcaEvQ612gQPSNWHSOQ89RbG0M=
Subject key identifier: 09:BD:C2:35:9B:8A:D2:F0:C6:0E:F7:74:D0:71:D6:71:CE:D8:04:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2ECB39AA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/Cb3CNZuK0vDGDvd00HHWcc7YBFY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:00:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 139.28.48.0/22
IP: 2a09:fa80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699755895462 (0xa2ecb39aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09bdc2359b8ad2f0c60ef774d071d671ced80456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:fe:ba:6c:ac:0a:c7:5e:86:3a:1f:5f:c4:
86:e2:c5:2d:c3:e5:8f:2d:60:93:92:0b:bf:a8:33:
f0:fd:a7:55:b2:e3:0f:47:3d:b3:fd:88:09:ba:6d:
38:75:ad:8b:4e:59:34:ce:fa:94:7e:c0:e0:ca:e0:
dd:3d:02:97:4e:e9:f2:af:37:1d:c7:7c:e4:be:98:
e0:f4:4f:23:e3:29:ea:f7:8d:80:9a:c5:cb:57:0b:
eb:e3:9d:84:b8:9e:50:89:0b:e4:7a:55:b2:fc:7e:
04:f0:28:29:6f:dd:42:3e:bb:77:bc:47:65:e2:c5:
12:bc:5a:74:bc:64:0e:06:69:ec:b7:5b:6c:f9:67:
c1:9c:91:67:8d:83:61:05:76:8e:08:c5:c2:41:9b:
8b:ac:f0:26:7e:e8:ec:d0:88:ef:10:99:36:49:f2:
26:99:b0:4d:d9:b0:41:91:a5:0d:af:1b:96:ab:24:
0c:95:b0:05:65:b7:02:61:5f:be:5e:2f:08:f3:dd:
6d:25:73:b9:5d:3d:d5:5d:eb:53:27:59:4a:08:a9:
d1:78:62:92:f4:9f:05:5f:c0:0e:21:8a:a5:3d:f4:
9c:82:af:3e:ba:08:07:1e:c3:5b:eb:d8:a3:fd:19:
5b:0c:b3:c2:bd:9d:81:51:2b:88:96:3f:9d:3b:6c:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BD:C2:35:9B:8A:D2:F0:C6:0E:F7:74:D0:71:D6:71:CE:D8:04:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/Cb3CNZuK0vDGDvd00HHWcc7YBFY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.48.0/22
IPv6:
2a09:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:ea:57:65:29:f8:20:69:76:3e:e2:12:b8:5b:96:f4:7b:4c:
a0:1f:46:0c:06:cf:82:e6:24:e2:0c:b8:68:e2:91:3a:42:ea:
30:b9:ea:7d:bb:94:0d:07:0f:4d:1b:d3:a1:23:6d:01:08:e4:
99:02:39:51:42:e5:09:f8:51:0c:19:df:12:f3:c3:84:18:dc:
af:f1:73:fb:e3:36:65:ed:22:c2:ad:d9:9c:3a:dd:59:98:d7:
47:5c:95:b1:7e:a2:be:15:2a:b0:a8:92:dc:f3:a7:48:e6:bf:
43:61:98:49:81:02:c3:41:b6:ed:e4:85:f0:e3:68:b4:af:d8:
c8:7c:af:45:9b:76:af:3f:d4:19:6b:18:20:a6:bd:eb:66:24:
91:97:58:18:ea:c0:14:6f:a9:1a:c6:a4:42:17:52:91:ed:ba:
d2:89:a0:0b:67:fb:3c:a3:8e:d8:3b:00:d1:c1:db:40:68:a4:
e5:de:b7:0b:ae:52:53:dc:5c:e5:de:d4:50:f1:68:3e:f0:eb:
db:60:05:01:a9:60:dd:7d:b3:56:c4:bf:a3:64:90:fa:98:86:
18:5a:23:aa:9b:30:68:dc:16:cd:2e:46:fc:d6:f9:aa:0a:f7:
bb:17:f0:25:b5:ec:0b:0b:31:6d:14:38:38:2a:07:fc:2c:d6:
af:0e:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-fra.rpki-client.org