Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DQ29a4_OXAmhoVxaM12DUB7TbMc.cer
File: DQ29a4_OXAmhoVxaM12DUB7TbMc.cer (raw, json)
Hash identifier: CMwyjipNWos4kDIIFMkKKMTu9CCNwwPxcGTzLku5X+s=
Subject key identifier: 0D:0D:BD:6B:8F:CE:5C:09:A1:A1:5C:5A:33:5D:83:50:1E:D3:6C:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A37363280D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/519e44-2b49-49ff-a019-e7c268680652/1/DQ29a4_OXAmhoVxaM12DUB7TbMc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/519e44-2b49-49ff-a019-e7c268680652/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:53:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.201.35.0/24
IP: 193.201.37.0 -- 193.201.38.255
IP: 193.201.43.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702015547405 (0xa37363280d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d0dbd6b8fce5c09a1a15c5a335d83501ed36cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:5d:b0:92:43:82:40:c0:33:b4:39:c6:18:
35:cb:27:42:22:e2:5b:36:d1:37:ab:5b:26:10:a2:
90:64:b9:04:bd:0f:38:c2:a5:78:c9:98:ca:f0:31:
41:8c:ff:82:0d:df:39:e1:98:7b:8e:1a:51:c4:9b:
2e:6b:7a:7d:93:10:be:99:3d:29:d7:e5:e7:14:67:
45:cd:df:30:6e:01:2c:98:28:d9:d0:c7:c7:9b:f0:
75:5d:80:be:8e:48:85:35:cc:da:64:01:1d:dd:26:
ae:a6:39:52:09:7d:63:1d:c3:09:25:8a:de:7e:20:
5c:31:09:bc:0c:ad:cb:b0:1a:1b:1f:3d:ac:e8:9d:
d5:25:0d:d4:15:f9:d1:f5:c0:68:ac:5a:1e:d5:44:
13:82:0d:01:ae:bc:74:8f:3c:05:53:3e:04:50:7a:
60:c9:9c:70:18:18:66:5d:bf:23:ee:35:06:27:81:
cb:77:f1:5e:84:2b:8f:78:6a:98:5c:05:91:b6:b9:
77:c6:14:0e:ba:05:70:6c:4a:5f:60:ba:33:15:3f:
67:50:8e:fc:de:4e:81:48:fc:e9:80:d6:bc:dd:a7:
32:95:d7:58:fe:a6:c7:56:de:03:05:aa:e3:b0:35:
2e:b8:b1:e3:75:ad:10:71:93:98:8f:eb:ad:47:47:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:BD:6B:8F:CE:5C:09:A1:A1:5C:5A:33:5D:83:50:1E:D3:6C:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/519e44-2b49-49ff-a019-e7c268680652/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/519e44-2b49-49ff-a019-e7c268680652/1/DQ29a4_OXAmhoVxaM12DUB7TbMc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.35.0/24
193.201.37.0-193.201.38.255
193.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:0f:db:b0:17:e0:f7:ad:48:cc:76:45:7c:7a:b2:40:c2:53:
15:46:15:d1:75:89:06:d0:97:92:86:93:53:d5:3f:91:c5:52:
09:8b:b6:a2:4d:ae:a8:e0:27:67:c5:2f:a3:11:4d:14:66:c2:
0a:d2:36:58:58:d2:cc:ff:d5:a4:e9:5c:01:8b:9c:9f:d5:0c:
b1:42:4c:5d:2b:b4:e4:c4:a0:e9:3d:72:e9:3c:4a:87:fa:90:
df:e6:f8:30:fb:9d:d3:c0:54:99:12:8e:13:12:25:9e:71:60:
64:a4:4f:ef:6a:2f:bf:1a:ff:52:57:a3:ce:05:d2:b1:1e:18:
57:85:02:cb:18:6f:86:6a:fa:a0:fb:97:03:b3:1d:79:e8:43:
2a:df:7a:4c:54:78:b5:38:82:53:8b:61:d6:14:d4:ba:b7:1d:
da:f1:4e:13:e2:e8:28:5e:8c:39:c5:aa:cf:68:c6:b6:37:4a:
d7:92:51:19:a1:f4:9e:f8:bd:7f:ad:a9:f8:0f:a1:28:c0:22:
85:c7:e4:69:3f:e3:9b:ad:1e:5c:29:37:e4:70:e0:d1:f7:ff:
e4:e1:1f:bd:f6:25:bf:0c:5c:8a:cb:2e:82:ea:07:f3:58:81:
e2:28:15:d0:19:9f:da:1f:30:cd:dd:11:9c:91:30:8b:64:32:
50:bc:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:10 2024 by rpki-client on console-fra.rpki-client.org