Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DRf7tmBNlMLpn0YGDqenwMdENFE.cer
File: DRf7tmBNlMLpn0YGDqenwMdENFE.cer (raw, json)
Hash identifier: Kp4txPzFLUYO5Y/Jf1bPSh1Lbrh5cBUIait893adKVo=
Subject key identifier: 0D:17:FB:B6:60:4D:94:C2:E9:9F:46:06:0E:A7:A7:C0:C7:44:34:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99DAC391FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/DRf7tmBNlMLpn0YGDqenwMdENFE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:02:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.203.184.0/22
IP: 2a0a:ec40::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660800246271 (0x99dac391ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d17fbb6604d94c2e99f46060ea7a7c0c7443451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:bc:d0:85:23:8a:12:f3:14:5d:75:e3:81:
52:dd:95:99:8e:ce:99:3b:81:02:29:65:43:35:e9:
c9:11:de:86:42:54:98:37:d1:e3:64:21:4c:ed:9f:
66:32:21:70:af:41:0f:e7:80:ee:24:b5:64:ed:c4:
08:3e:76:c8:86:b2:0c:72:d8:e0:d9:d9:16:30:2b:
85:ca:68:71:a3:3e:43:cf:4e:de:60:e9:cc:78:1e:
e3:91:b0:bf:23:4e:82:6d:94:c2:c0:28:1f:ca:11:
ee:15:0b:03:95:99:e7:b1:89:d6:98:7c:29:a9:36:
9d:3d:da:31:33:42:67:a3:df:14:ba:35:98:ed:e1:
ee:57:6c:f2:3c:d6:35:aa:a0:17:af:34:e7:36:6b:
0e:49:e6:2c:33:72:e8:fb:80:76:f3:b5:e6:31:40:
99:0e:c2:8a:97:a8:1d:10:56:50:db:0b:d1:de:b2:
e7:d1:a5:b3:10:cb:75:14:6e:31:08:80:fb:2e:b3:
4a:e7:6d:6d:bb:68:76:53:cb:f4:91:dd:00:3b:0a:
2f:d0:23:17:8d:54:29:dd:c8:b9:6d:27:a0:f6:49:
c1:57:1a:0e:b3:eb:77:69:dc:e2:d1:0e:15:97:6a:
d4:05:42:29:6a:b4:ff:61:2a:6d:d2:6e:90:07:0c:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:17:FB:B6:60:4D:94:C2:E9:9F:46:06:0E:A7:A7:C0:C7:44:34:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/DRf7tmBNlMLpn0YGDqenwMdENFE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.184.0/22
IPv6:
2a0a:ec40::/32
Signature Algorithm: sha256WithRSAEncryption
9b:00:45:3c:ed:fa:5d:b1:e8:78:7f:bf:1d:25:0e:a0:0c:63:
0c:b6:25:b6:db:c0:39:78:5d:83:80:91:81:be:80:b7:b2:c1:
e5:94:92:27:51:80:88:4b:56:93:f0:fe:83:28:62:e9:db:ae:
00:77:c0:71:ab:cd:a1:55:32:b9:89:63:0f:6c:31:58:0e:53:
43:36:4f:3a:0d:4c:79:d6:e4:c3:c4:03:30:be:9a:be:b2:94:
c6:e3:a1:5b:c7:6f:ce:41:06:08:75:cc:df:45:3d:99:51:e1:
9a:8c:8d:06:70:6a:cb:4b:65:89:aa:d4:6c:9e:a8:0c:b9:95:
39:82:46:89:68:d4:b2:55:3e:30:c4:b1:11:03:5d:ce:42:54:
8d:05:38:51:b9:a6:1d:31:de:e6:61:f4:25:d0:ba:80:20:d9:
70:e1:e1:89:eb:ad:31:9f:0c:6d:89:d1:a1:e2:df:55:ee:7b:
2a:d6:98:0b:e5:91:db:79:6e:7a:23:a8:06:d3:9c:15:e9:5f:
c3:5b:59:23:e9:2c:b0:cd:99:a2:e2:89:81:ca:da:96:b4:16:
b1:07:1c:0d:1e:08:d8:27:1d:24:d2:55:61:fe:0a:92:f2:82:
0d:7b:d8:92:1c:43:aa:aa:46:19:5e:4d:c4:d9:9b:ff:3b:88:
25:ba:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:11 2024 by rpki-client on console-fra.rpki-client.org