Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DV9P0SZ-dRFs-78ivVLvval_ucQ.cer
File: DV9P0SZ-dRFs-78ivVLvval_ucQ.cer (raw, json)
Hash identifier: ucPLRcdJEKhkHXaXgeiWqf9dddt5U/V6D4Oaex3aws8=
Subject key identifier: 0D:5F:4F:D1:26:7E:75:11:6C:FB:BF:22:BD:52:EF:BD:A9:7F:B9:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184E21FBC3023B687987735ED16B40BA647
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 05 Dec 2022 11:50:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 146.19.97.0/24
IP: 2a13:800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:1f:bc:30:23:b6:87:98:77:35:ed:16:b4:0b:a6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 5 11:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d5f4fd1267e75116cfbbf22bd52efbda97fb9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:f3:e1:68:4b:da:53:0e:5f:bb:c4:ba:5b:
f8:05:3d:41:dd:0c:b2:a9:80:9f:21:e1:54:a5:e7:
a0:d0:74:9d:c6:34:0b:cc:e5:4d:8f:14:a3:e8:aa:
68:22:94:93:c7:ac:43:f8:df:9f:8e:a5:af:2f:a6:
b0:5f:4b:a4:5a:3c:e7:ac:91:84:40:c0:e8:b2:41:
fe:5d:9f:09:37:10:b6:23:8f:8a:bc:57:b1:9d:18:
7e:59:9f:3d:e6:a5:62:f6:50:62:76:b7:0f:30:56:
52:72:e6:78:95:5c:91:00:98:0a:6f:41:b3:49:68:
52:e0:47:e4:a6:79:a9:27:47:23:2f:b9:28:84:b9:
d9:f6:3b:97:48:d9:55:19:60:45:3f:56:24:31:42:
ab:e7:c0:00:82:d1:da:3f:8e:b3:27:44:b4:89:42:
84:32:67:75:8f:42:6d:60:2d:2b:5f:c2:fa:6c:ed:
05:80:09:9b:02:d9:4b:6a:25:af:a2:ab:8d:6d:73:
f8:05:fd:02:31:32:b8:8c:36:30:c9:21:94:fb:da:
c8:f1:4b:a2:e2:cb:c1:bb:d4:2d:92:32:63:38:60:
c1:a3:b9:b3:08:0d:0d:a5:0d:c8:17:06:7f:dd:91:
31:cb:cc:cb:e9:78:df:74:7c:3c:3c:55:93:13:55:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5F:4F:D1:26:7E:75:11:6C:FB:BF:22:BD:52:EF:BD:A9:7F:B9:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.97.0/24
IPv6:
2a13:800::/29
Signature Algorithm: sha256WithRSAEncryption
96:5a:62:f7:b7:05:9e:54:d2:b6:aa:5d:08:57:a7:99:3d:a1:
d0:dc:11:4f:9f:3b:d8:39:bd:4f:7f:a5:e0:9c:4b:c6:f0:32:
b0:44:9d:55:df:8c:74:fc:16:20:5f:aa:f5:03:12:25:cb:bd:
74:d2:0d:ae:10:07:33:cf:e4:91:53:d6:bd:31:14:00:05:8e:
55:2a:f8:4c:30:5c:14:5b:d8:5f:e9:11:89:b4:15:cc:b7:57:
de:03:db:a6:5f:6c:1b:51:f6:6f:76:dc:58:09:3d:bc:16:c9:
39:2e:9f:47:aa:6c:0f:ea:de:4e:65:ed:e2:93:5c:ec:aa:0c:
d0:de:71:08:1c:cf:34:73:04:35:7b:e8:36:50:ec:cd:23:27:
59:c8:b0:51:99:ba:db:e0:f5:43:4c:fd:6f:9b:95:45:35:50:
27:76:09:87:10:b2:dd:8f:b6:a0:98:21:f3:fd:45:17:ce:e5:
f6:38:23:e7:02:ef:86:3e:5d:f8:93:01:86:c5:45:ac:2a:3d:
e8:e4:1d:18:af:d7:ae:90:a2:49:7e:85:eb:49:e3:45:ed:a6:
98:07:80:03:07:bd:cf:29:e5:ad:a6:d4:19:28:3a:12:37:01:
2f:e4:e6:51:ae:5e:85:e2:14:2b:48:2f:c0:8b:f7:db:89:d6:
fb:40:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:11 2024 by rpki-client on console-fra.rpki-client.org