Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cd6vXezPcpvt1NJd3TqLXYA47tU.cer
File: Cd6vXezPcpvt1NJd3TqLXYA47tU.cer (raw, json)
Hash identifier: w7sGzIfQp8PEjb0degtnQTUV/DXU2oWKZ5htLIn+wGI=
Subject key identifier: 09:DE:AF:5D:EC:CF:72:9B:ED:D4:D2:5D:DD:3A:8B:5D:80:38:EE:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2C77B5313
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/f77e9b-6383-48f6-853c-e2bac6d865a1/1/Cd6vXezPcpvt1NJd3TqLXYA47tU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/f77e9b-6383-48f6-853c-e2bac6d865a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:58:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.3.245.0/24
IP: 2a10:be00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699131450131 (0xa2c77b5313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09deaf5deccf729bedd4d25ddd3a8b5d8038eed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:84:cc:af:2d:cc:41:2c:81:3b:71:c3:ce:
76:22:ac:6a:53:a6:85:4c:57:c0:35:f4:ef:eb:5a:
eb:e0:70:da:b9:cf:bb:c2:18:44:d1:cf:06:30:dc:
99:6d:75:d1:32:49:77:9f:6a:36:2a:c2:ff:45:e2:
a2:65:bf:70:0f:3c:63:69:5f:8e:1f:9f:4a:4d:3a:
5e:a9:d9:dd:46:1f:af:eb:98:47:cb:8f:2d:82:6a:
0a:1a:8c:93:67:ac:47:12:c6:d5:c4:52:2e:f6:26:
ea:8f:ce:3e:87:82:a8:f6:a2:1b:9f:b7:13:ea:e8:
28:37:27:68:e2:20:6c:fc:6c:60:01:b9:8c:58:04:
7f:f4:df:39:ec:39:96:fc:c5:77:b8:45:f7:7c:cb:
a1:7e:31:08:79:05:11:90:5f:aa:2e:ca:67:c0:89:
18:52:79:2b:76:54:22:07:60:fc:a1:c4:7c:a5:be:
e3:56:d1:41:12:b1:5a:a3:7e:d2:d5:9b:4b:04:3c:
d2:a3:aa:4d:93:5c:98:3f:e4:b4:6f:b1:89:87:dc:
4b:d9:75:11:b1:ce:ff:e4:66:ef:ce:c5:3d:fb:8c:
4e:63:06:37:30:37:98:cf:05:c0:23:44:a9:85:1d:
5e:f8:5d:51:3a:ac:7d:28:21:76:84:de:89:f4:f5:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DE:AF:5D:EC:CF:72:9B:ED:D4:D2:5D:DD:3A:8B:5D:80:38:EE:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f77e9b-6383-48f6-853c-e2bac6d865a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f77e9b-6383-48f6-853c-e2bac6d865a1/1/Cd6vXezPcpvt1NJd3TqLXYA47tU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.245.0/24
IPv6:
2a10:be00::/29
Signature Algorithm: sha256WithRSAEncryption
61:7d:bf:6f:7c:aa:c6:e4:7d:3b:f3:9c:22:9c:53:94:c9:53:
51:d7:c0:d1:a0:a1:59:33:0f:d5:66:f9:ec:2a:ad:cf:c6:36:
a1:fb:87:d4:ec:79:0f:62:4b:aa:6e:ba:89:7f:80:fd:89:88:
6d:81:b0:e5:29:d5:d9:58:ab:f5:c6:fd:ab:83:d4:3f:81:dd:
38:fd:52:0e:9c:8a:93:d3:b0:02:df:86:c4:ce:c6:10:ae:54:
7a:cf:db:21:b7:91:28:e7:e3:57:05:94:ad:7a:14:80:cb:46:
2d:ff:15:83:cb:eb:37:2e:74:76:ac:85:70:d8:08:57:54:60:
ae:96:df:13:91:26:2a:48:b9:2f:80:4c:a7:f0:a1:96:d3:69:
0f:e1:53:8e:61:1f:53:1b:a7:90:db:b7:62:79:07:e3:30:dd:
a2:34:29:ac:38:43:a9:2b:ed:45:fd:d6:3a:3c:00:77:5f:82:
53:b1:1c:1a:77:46:89:37:46:0b:56:e9:af:2f:e4:a8:23:62:
cf:f2:dd:52:ff:27:40:7c:d7:0c:1b:c6:56:7f:cf:3e:b7:d4:
c6:e1:ae:e5:67:0d:75:1a:d3:ab:82:fe:5d:46:68:db:2f:47:
db:ae:10:fa:29:19:7f:46:11:3f:e3:f2:96:60:51:77:ad:1d:
47:1e:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-fra.rpki-client.org