Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E0lkv6hoD6GhsTZkuHi_1P9jqt0.cer
File: E0lkv6hoD6GhsTZkuHi_1P9jqt0.cer (raw, json)
Hash identifier: o3t4qD/QaFBjw7RCM1VG5VGWDKzQ+po3ucykUnRhr7s=
Subject key identifier: 13:49:64:BF:A8:68:0F:A1:A1:B1:36:64:B8:78:BF:D4:FF:63:AA:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1960360C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/fa3318-c4e9-44cd-818c-4edac347a3b1/1/E0lkv6hoD6GhsTZkuHi_1P9jqt0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/fa3318-c4e9-44cd-818c-4edac347a3b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:58:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.113.44.0/22
IP: 2a10:cb80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694006538434 (0xa1960360c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=134964bfa8680fa1a1b13664b878bfd4ff63aadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:b4:81:5e:80:58:d6:ac:93:12:ec:14:9e:
5a:fc:37:f4:50:b1:da:8d:03:ab:98:7b:40:1a:2c:
2c:73:ad:fc:80:5b:44:5f:b8:91:12:31:f3:7f:98:
e0:65:d0:82:7e:bf:80:1a:56:d8:8b:9f:38:a8:cf:
f1:b3:13:83:cf:63:b6:55:0a:b4:d8:e1:2b:46:93:
1e:f5:c0:7c:c1:f7:f3:de:fc:06:07:18:60:2c:7e:
23:57:61:8f:93:71:99:73:ef:26:cb:8a:61:1c:31:
2c:b3:ad:19:35:5b:8d:b2:84:63:aa:15:56:14:61:
41:99:f9:41:dc:d8:99:94:23:22:4c:2d:c7:42:be:
2e:be:17:7d:71:d4:29:66:dd:8d:16:b7:05:96:de:
49:fa:f3:36:cb:bc:5c:d9:17:84:7b:13:c3:41:d8:
3d:e2:8c:ee:d9:a5:4f:51:55:c1:79:d8:96:0a:f7:
25:d0:39:de:e3:2d:3f:e4:21:7b:35:08:94:c7:8b:
ae:cc:88:45:40:00:98:4b:1e:a1:ec:2e:3e:a2:e7:
d1:ef:7c:fc:f8:56:63:87:6a:6e:08:a8:cf:5e:02:
61:8a:f5:32:93:7d:a1:83:e2:be:da:9c:4a:54:48:
72:73:2b:01:3c:c7:ec:59:b5:36:49:65:4d:37:d0:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:64:BF:A8:68:0F:A1:A1:B1:36:64:B8:78:BF:D4:FF:63:AA:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa3318-c4e9-44cd-818c-4edac347a3b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa3318-c4e9-44cd-818c-4edac347a3b1/1/E0lkv6hoD6GhsTZkuHi_1P9jqt0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.44.0/22
IPv6:
2a10:cb80::/29
Signature Algorithm: sha256WithRSAEncryption
84:1c:b4:6f:78:d6:75:a2:78:7b:86:b4:dd:55:48:ad:ec:75:
36:27:65:4c:65:4c:9e:82:93:e3:f3:8e:c9:91:19:8d:49:cc:
43:b7:05:9f:5c:cd:a1:f2:70:c0:2e:59:40:01:43:a9:63:8a:
62:f0:91:d1:81:e7:48:c7:24:9d:7a:61:a6:0f:cc:c8:6f:ac:
a7:56:dc:82:da:e0:e8:58:b5:34:f7:74:03:1b:17:f2:e4:23:
90:73:34:26:fd:05:8e:c9:c8:bf:05:d1:59:46:a1:e1:21:32:
4a:44:4a:dd:a0:74:46:8c:4b:5a:01:b7:25:23:ad:44:c6:bf:
53:c1:1a:3b:57:6b:41:fb:28:1c:31:d6:d5:11:04:85:67:31:
df:c2:12:42:18:ac:90:66:fc:c1:17:94:95:ca:55:89:04:fe:
1c:11:5c:75:b6:37:33:09:3e:7c:82:7f:90:ea:65:f6:27:0e:
be:b9:1a:1c:13:10:04:93:55:ed:41:51:39:40:b9:6b:f4:dc:
a3:d1:c8:3b:61:65:11:a5:b5:db:ad:5a:78:19:cf:12:82:f7:
8f:cd:43:66:a2:b9:27:7c:b6:d0:f8:5d:45:a6:a9:65:a6:1f:
be:38:7d:d0:c3:ec:61:24:c1:8b:34:68:a1:42:47:c2:8c:f2:
5d:5f:8e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:09 2024 by rpki-client on console-ams.rpki-client.org