Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CscO_s_Q_DRr-Y5VqsJSo2zubiI.cer
File: CscO_s_Q_DRr-Y5VqsJSo2zubiI.cer (raw, json)
Hash identifier: uQu2aQJGdf1qiQxl9jLxamEJ7oH5ZEhyyDy2iYwFwoU=
Subject key identifier: 0A:C7:0E:FE:CF:D0:FC:34:6B:F9:8E:55:AA:C2:52:A3:6C:EE:6E:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A71498A728
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/e8e8d0-8cdd-40f8-b989-d3df49f9c4c4/1/CscO_s_Q_DRr-Y5VqsJSo2zubiI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/e8e8d0-8cdd-40f8-b989-d3df49f9c4c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:55:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.16.213.0/24
IP: 193.16.221.0/24
IP: 193.16.236.0/24
IP: 193.16.239.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717605087016 (0xa71498a728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ac70efecfd0fc346bf98e55aac252a36cee6e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:9e:35:00:e7:ad:c7:f0:78:fd:4c:8b:0b:
0e:40:ec:54:4f:df:78:80:58:17:b6:96:d2:93:0f:
a8:75:fb:63:73:f2:61:3b:6a:37:e9:96:b7:95:12:
bc:3a:7b:11:dc:ad:71:5c:84:f3:e7:e3:bf:8e:9b:
dc:80:96:7b:6e:2d:ec:2c:05:d8:da:5b:3b:55:e9:
5f:5c:f4:c0:8a:0b:2e:c4:6b:51:2a:3d:c6:de:03:
00:b0:9f:b7:82:18:2a:4d:07:db:9b:0e:5a:42:01:
92:8d:d0:5e:4c:36:46:65:5b:1b:47:55:5d:c3:30:
bf:5c:0d:f9:c7:f7:6e:da:7f:52:1d:02:31:0b:ac:
1d:a3:4d:b6:88:f9:16:29:d5:41:90:5b:cd:29:cf:
c4:72:5e:bb:e9:0a:34:25:d5:b4:01:1b:c5:0c:4b:
30:be:89:a2:2c:30:0d:0b:18:79:d2:f0:19:ea:e2:
d4:9f:b9:b4:47:46:f5:0c:c3:2d:2d:59:d1:77:e3:
3a:79:cc:7a:89:b2:8e:8c:a6:69:b5:e3:bf:7b:e6:
4c:2e:7e:0b:74:5b:a5:cf:cb:ee:11:46:4f:30:f9:
d6:6c:85:2d:7e:a4:73:2c:a5:5e:c8:d3:1b:97:58:
e5:06:c8:f9:71:0d:47:cc:ba:46:f7:9a:31:9d:3d:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:0E:FE:CF:D0:FC:34:6B:F9:8E:55:AA:C2:52:A3:6C:EE:6E:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e8e8d0-8cdd-40f8-b989-d3df49f9c4c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e8e8d0-8cdd-40f8-b989-d3df49f9c4c4/1/CscO_s_Q_DRr-Y5VqsJSo2zubiI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.213.0/24
193.16.221.0/24
193.16.236.0/24
193.16.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:5f:81:62:24:01:56:82:0f:0a:b2:06:80:50:ca:d4:7e:86:
5f:a5:0e:3c:fb:69:7d:81:6f:c7:4e:de:01:46:33:4c:67:1c:
83:3d:13:7b:23:fe:45:70:80:1b:72:19:a2:cf:7f:31:4d:dd:
18:e5:fb:8f:48:3d:27:14:87:b4:12:06:51:c4:82:55:cc:22:
3a:72:e5:17:c2:ba:86:da:3c:0d:b9:4f:a0:f5:f5:79:ed:bc:
ff:fe:c8:3e:3b:d9:b0:b1:18:15:7b:5c:d0:d3:fe:76:bf:52:
01:eb:95:7a:f8:a3:3a:8e:1b:4c:f4:80:4b:aa:d2:76:95:8c:
d8:c9:6b:d7:8c:1f:be:55:7d:26:88:72:69:ce:b5:87:f0:25:
af:ce:03:1e:de:c4:fc:f2:61:3d:bc:82:8f:f0:67:4a:36:74:
9a:0a:fb:64:97:0e:67:cf:1d:1c:d6:30:2b:f6:fc:1f:73:9b:
df:d8:83:02:bb:9a:4b:02:ec:1d:59:21:40:f7:ea:9d:6b:b2:
42:80:85:ca:4a:47:1d:17:9d:01:d9:78:5d:7f:b4:40:0e:bc:
0b:e1:be:27:11:3e:0b:1d:f5:bf:be:46:90:94:51:5e:69:44:
9e:38:61:9c:97:e3:05:2a:b8:98:4c:92:d8:ef:89:46:5f:f2:
04:f6:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:01 2024 by rpki-client on console-fra.rpki-client.org